Privacy Policy
Draft for legal review. This policy has been prepared as a starting point and must be reviewed by qualified counsel before launch.
Last updated:
Who we are
System Formation Co. Ltd ("System Formation", "we") is a company registered in the Kingdom of Saudi Arabia, commercial registration [CR NUMBER], with its registered address at [CITY / ADDRESS]. We are the controller of the personal data described in this policy.
What we collect
When you submit the contact form we collect the name, company, email address, phone number, the audience and interest you select, and the content of your message.
Our hosting provider processes technical information needed to deliver the site securely, including IP address and request metadata. We do not use advertising or behavioural tracking cookies, and we do not embed third-party trackers.
Why we use it
We use contact form submissions for one purpose: to respond to your enquiry and, where you ask us to, to prepare a commercial proposal. We rely on your consent, given by submitting the form, and on our legitimate interest in responding to business enquiries.
We do not sell personal data, and we do not use it for marketing unrelated to your enquiry.
A security check on the form
The contact form is protected by a bot-detection service to stop automated abuse. It receives technical signals about the request. It does not receive the content of your message.
How long we keep it
Enquiries are retained for [RETENTION PERIOD] from the last contact, after which they are deleted or anonymised. Where an enquiry becomes a contract, the related records are retained under the retention period required by Saudi commercial and tax law.
Who else sees it
Personal data is available to System Formation staff who need it to answer you, and to the service providers that operate our website infrastructure and email under contract. We do not disclose it to anyone else except where the law requires it.
Where personal data is transferred outside the Kingdom, we apply the conditions set out in the Personal Data Protection Law and its implementing regulations.
Your rights
Under the Personal Data Protection Law you may ask to access your personal data, correct it, request its destruction, withdraw consent, and be informed of how it is used. Write to [email protected] and we will respond within the period the law allows.
If you believe we have not handled your data correctly, you may complain to the Saudi Data and AI Authority (SDAIA).
Changes to this policy
We will update this page when our practices change, and will change the date above when we do.