Privacy Policy | NAAS Consulting

Last updated: 22 September 2026

Who is responsible

NAAS Consulting, Riyadh, Kingdom of Saudi Arabia, is responsible for the personal data collected through this website. Our contact details are at the end of this policy.

Data you give us

When you use the enquiry form we collect your name, company, work email, phone number, country, area of interest, the sector page you came from, the language you used and any message you write. Please do not send confidential business information through the form.

Data collected automatically

Like any website, our host records technical data when pages are requested, such as your IP address, browser type, the page requested and the time, to deliver the site and keep it secure. Fonts are loaded from Google Fonts, so Google receives your IP address and browser details when a page loads. We do not use tracking cookies, advertising technology or analytics.

Why we use it

We use your details only to respond to your enquiry, to discuss the services you ask about, to keep a record of our correspondence, and to keep the website secure. We do not sell your personal data, and we do not use it for unrelated marketing.

Legal basis

We process enquiry data on the basis of the consent you give when you submit the form, and to take the steps you ask for before any engagement. Technical data is processed because it is necessary to run and secure the website. You can withdraw consent at any time; this does not affect processing already carried out.

Who we share it with

We share personal data only with service providers who help us run the website and respond to you: Netlify, which hosts the site and receives form submissions, and Google, which serves the fonts. We may also disclose data where required by law or by a competent authority. We do not share it with anyone for their own marketing.

International transfers

Our service providers may process data outside the Kingdom, including in the United States and the European Union. We transfer data only where the PDPL and its implementing regulation on transfers allow it, with appropriate safeguards such as the providers’ contractual commitments.

Retention

Enquiries that do not lead to an engagement are deleted or anonymised within 24 months of our last contact. If you become a client, records are kept for as long as the engagement and applicable law require. Hosting logs are kept by our host for a limited period for security purposes.

Security

The site is served only over encrypted connections, and access to enquiries is limited to the people who respond to them. No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.

Your rights

Under the PDPL you may ask to be informed about, access, obtain a copy of, correct or delete your personal data, and you may withdraw your consent. We respond within 30 days. If you are outside the Kingdom, you may also have rights under your local law, such as the EU GDPR, and we will honour them where they apply. To exercise any of these rights, use the contact form at https://naasmarketentry.com/contact.

Automated decisions

We do not make decisions about you based solely on automated processing, and we do not profile visitors.

Children

This website is intended for business users and is not directed at anyone under 18. We do not knowingly collect personal data from children.

Complaints

If you are unhappy with how we have handled your data, please contact us first so we can put it right. You may also complain to the Saudi Data & AI Authority (SDAIA).

Changes to this policy

We may update this policy when our practices or the law change. The date at the top shows when it was last updated; significant changes will be highlighted on this page.

Contact

For any privacy question or request, use the contact form at https://naasmarketentry.com/contact or write to NAAS Consulting, Riyadh, Kingdom of Saudi Arabia.