Privacy Policy

Effective Date: [Date]

Last Updated: [Date]

1. Introduction

Prime Advisory Saudi Arabia (“PASA,” “we,” “us,” or “our”) is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://primeadvisorysa.com (the “Site”) or interact with us as a client, potential client, or job applicant.

This policy is formulated in compliance with the Saudi Arabian Personal Data Protection Law (PDPL) and other applicable laws and regulations.

By using our Site or providing your personal data to us, you acknowledge that you have read and understood the practices described in this policy.

2. Controller of Your Personal Data

Prime Advisory Saudi Arabia
Riyadh, Saudi Arabia
info@primeadvisorysa.com

3. Information We Collect

We may collect the following categories of personal data:

  • Information You Provide Directly:
    • Contact Information: Name, email address, phone number, company name, job title.
    • Inquiry and Client Data: Information you provide when contacting us for services, support, or information. This includes details necessary for providing our professional services (e.g., financial data, business information, identity documents for compliance purposes (KYC)).
    • Career Applications: Information contained in your CV, cover letter, qualifications, and work history.
    • Communications: Records of your correspondence with us.
  • Information Collected Automatically:
    • Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our Site.
    • Usage Data: Information about how you use our Site, including the full Uniform Resource Locators (URL), clickstream to, through and from our Site (including date and time), pages you viewed, page response times, download errors, length of visits to certain pages, and page interaction information.
  • Information from Third Parties: We may receive personal data about you from various third parties, such as analytics providers (e.g., Google Analytics) and professional networking sites (e.g., LinkedIn).

4. How We Use Your Information (Purposes of Processing)

We will only use your personal data in accordance with the PDPL and for the following lawful purposes:

  • To provide and maintain our professional services to you as a client.
  • To manage our relationship with you, including notifying you about changes to our terms or privacy policy.
  • To respond to your inquiries and fulfill your requests for information.
  • To process and evaluate your job application.
  • For administrative and internal business purposes (e.g., data analysis, audits, fraud monitoring).
  • To send you marketing and promotional communications about our services, events, and insights that we believe may be of interest to you, where you have consented to, or where we have a legitimate interest to do so in accordance with applicable law. You can opt-out of these at any time.
  • To improve our Site, services, marketing, and customer relationships.
  • To comply with our legal and regulatory obligations, including anti-money laundering (AML) and know-your-customer (KYC) requirements.

5. Legal Basis for Processing (Under PDPL)

We process your personal data based on one or more of the following legal bases as outlined in the PDPL:

  • You have given us your explicit consent.
  • The processing is necessary to enter into or perform a contract with you.
  • The processing is necessary for us to comply with a legal or regulatory obligation.
  • The processing is for a legitimate interest pursued by PASA, and such interest is not overridden by your interests or fundamental rights and freedoms. Our legitimate interests include managing our business, providing services, and promoting our growth.

6. How We Share Your Information

We may share your personal data with the following parties for the purposes described in this policy:

  • Affiliates: Other entities within the Prime Advisory network, strictly on a need-to-know basis.
  • Service Providers: Third-party vendors who provide services on our behalf, such as IT and hosting providers, email communication providers, and analytics companies. These parties are contractually bound to protect your data and use it only for the services we specify.
  • Professional Advisors: Our auditors, lawyers, accountants, and other professional advisors where necessary.
  • Government and Regulatory Authorities: Where required by law, regulation, or legal process, or to comply with a request from a governmental or regulatory body within the Kingdom of Saudi Arabia.
  • Other Parties in Connection with Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets.

We do not sell your personal data to third parties.

7. International Data Transfers

Your personal data may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different from the laws of Saudi Arabia.

When we transfer personal data outside of Saudi Arabia, we will ensure a similar degree of protection is afforded to it by implementing appropriate safeguards as required by the PDPL, such as:

  • Transferring to countries deemed to provide an adequate level of protection.
  • Using specific contracts approved for use in Saudi Arabia which give personal data the same protection it has in Saudi Arabia.

8. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of your personal data and prevent it from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission over the Internet or electronic storage is 100% secure.

9. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including to satisfy any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, and the applicable legal requirements.

10. Your Rights Under the PDPL

Subject to certain conditions and exceptions under the PDPL, you have the right to:

  • Access: Request access to the personal data we hold about you.
  • Correction: Request correction of any inaccurate or incomplete data we hold about you.
  • Deletion: Request deletion of your personal data.
  • Withdraw Consent: Where we rely on your consent, you have the right to withdraw it at any time.
  • Object to Processing: Object to our processing of your personal data where we are relying on a legitimate interest.

To exercise any of these rights, please contact us using the details provided in Section 2.

11. Cookies and Similar Technologies

Our Site uses cookies and similar tracking technologies to track activity and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Site.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Prime Advisory Saudi Arabia
Riyadh, Saudi Arabia
info@primeadvisorysa.com