Privacy Policy
Last updated: 7 Jun 2025
---
1. Who We Are
SaudiLawAssist.com (“we”, “our”, or “Saudi Law Assist”) is a digital legal-information service operated from Riyadh, Kingdom of Saudi Arabia. We provide plain-language summaries of Saudi statutes, royal decrees and regulatory updates, plus AI-powered Q\&A tools that help users locate publicly available legal information. We are not a law firm and do not give personalised legal advice.
Contact (privacy matters)
Email: [info@saudilawassist.com](mailto:info@saudilawassist.com)
Postal: Office 208, Al Takamul Tower, King Fahd Rd., Riyadh 11564, KSA
---
2. Scope of this Policy
This notice explains what personal data we collect, how we use it, the lawful bases we rely on, and your choices. It covers all visitors, subscribers, and customers who interact with:
1. saudilawassist.com (the “Website”);
2. our AI chat interface and knowledge-base tools;
3. social-media pages and email newsletters operated by Saudi Law Assist.
---
3. What Data We Collect
Category Typical items When collected
| ------------------ | ------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------ |
Identity Data Name, job title, company, nationality When you create an account, buy a product, or request a consultation
Contact Data Email address, phone number, business address Same events as above
Technical Data IP address, browser type, device ID, operating system, referring URLs Auto-collected by our servers and analytics tools
Usage Data Pages viewed, time on page, clicks, chat-prompt text (stripped of personal identifiers where feasible) When you browse or use our AI tools
Marketing Data Newsletter preferences, campaign engagement metrics When you opt in to marketing communications
Payment Data Transaction ID, amount, masked card details Processed securely by our payment partner (Stripe); we never store full card numbers
We do not intentionally collect sensitive personal data (e.g., religion, health records), nor data about persons under 18.
---
4. How & Why We Use Your Data
Purpose Legal basis under KSA Personal Data Protection Law (PDPL) & (where applicable) GDPR
| ------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------- |
Provide the website, AI chat, and legal-info tools Contract performance or legitimate interest (to run a functional service)
Respond to enquiries, comments, or support requests Legitimate interest
Send regulatory-update emails you requested Consent (you may unsubscribe at any time)
Process payments and issue invoices Contract performance
Detect, prevent, and investigate fraud or abuse Legitimate interest / legal obligation
Improve content, train AI models, and run analytics Legitimate interest (service optimisation)
Comply with Saudi or international legal requirements (court orders, PDPL, VAT, etc.) Legal obligation
We keep personal data only as long as necessary for these purposes, after which it is securely erased or anonymised.
---
5. Cookies & Analytics
We use first-party and third-party cookies (Google Analytics 4, OpenAI telemetry, Hotjar) to:
understand aggregate user behaviour;
remember language or display preferences;
protect against malicious use.
You can disable non-essential cookies via the cookie banner or your browser settings without losing core site functionality.
---
6. Sharing & International Transfers
We never sell your data. We share it only with:
1. Service providers (website hosting, email delivery, payment processors, AI infrastructure) under strict confidentiality agreements;
2. Government or judicial authorities when required by Saudi law;
3. Successors in the event of a merger or acquisition, with the same protections.
Where providers are located outside KSA or the EEA (e.g., US-based cloud servers), we rely on PDPL-compliant transfer mechanisms such as contractual safeguards and encryption in transit and at rest.
---
7. Security
TLS 1.3 encryption for all web traffic
ISO 27001-certified data-centre hosting (Riyadh primary, Frankfurt backup)
Role-based access control, multi-factor authentication for staff
Annual penetration testing and continuous vulnerability scanning
---
8. Your Rights
Under the Saudi PDPL (and, where applicable, GDPR), you may:
1. Access a copy of your personal data.
2. Rectify inaccuracies.
3. Erase data that is no longer necessary (“right to be forgotten”).
4. Restrict or object to certain processing.
5. Port data to another controller (where technically feasible).
6. Withdraw consent at any time (newsletter opt-out, cookie settings).
To exercise any right, email [privacy@saudilawassist.com](mailto:privacy@saudilawassist.com). We will respond within 30 days.
---
9. Third-Party Links
Our site may link to government gazettes, legal-resource portals, or social-media platforms. We do not control these sites; review their privacy notices before sharing personal data.
---
10. Children
SaudiLawAssist.com is directed at professionals and the general public aged 18 and above. We do not knowingly collect data from minors. Parents who believe a child has provided data should contact us for deletion.
---
11. Policy Updates
We may revise this Privacy Policy to reflect legal or service changes. The “Last updated” date will change accordingly. For material changes, we will post a banner or email registered users.
---
12. Contact & Complaints
For questions or complaints about privacy, reach us at [info@saudilawassist.com](mailto:info@saudilawassist.com).
If you believe we have not handled your data lawfully, you may also file a complaint with the Saudi Data & AI Authority (SDAIA).
---
Thank you for trusting Saudi Law Assist with your information. We are committed to safeguarding your privacy while delivering clear, reliable legal insights.