Legal
Privacy Policy
This Privacy Policy explains how Arabian Private Holdings collects, processes, stores, and protects personal data. We are committed to handling personal information responsibly and in compliance with applicable data protection requirements.
Scope of this policy
This Privacy Policy describes how Arabian Private Holdings collects, processes, stores, and manages personal data through its website, through direct correspondence, and in connection with business inquiries, client engagements, and recruitment-related communications.
The policy applies to all personal data collected by Arabian Private Holdings, whether obtained through digital channels, written correspondence, telephone conversations, or in-person meetings. It covers interactions with prospective clients, current clients, former clients, website visitors, job applicants, contractors, and other individuals who interact with the firm.
This policy is intended to describe the firm's general approach to data handling in a clear and practical manner. For specific questions about how your personal data is processed, or to exercise any rights you may have regarding your data, contact contact@arabian-private-holdings.com.
Data controller information
Arabian Private Holdings is the controller of personal data collected through its website, business communications, and professional activities. As the data controller, Arabian Private Holdings determines the purposes and means of processing personal data and is responsible for compliance with applicable data protection requirements.
Data Controller:
Arabian Private Holdings
The Executive Centre, Level 7, Building 3.09, District 3
KAFD, Riyadh 13519, Kingdom of Saudi Arabia
Categories of personal data collected
Arabian Private Holdings collects and processes the following categories of personal data:
Identity and Contact Information
- —Full name, title, and professional designation
- —Business email address and personal email address where provided
- —Telephone numbers including mobile and direct office lines
- —Business postal address and correspondence address
- —Organization name, position, and department
Professional Information
- —Professional background, qualifications, and certifications
- —Employment history and current role responsibilities
- —Areas of professional interest and expertise
- —Professional affiliations and memberships
Communication Data
- —Content of emails, messages, and correspondence
- —Information voluntarily provided in inquiry forms
- —Meeting notes and records of discussions
- —Feedback and evaluation responses
Recruitment Data
- —Curriculum vitae and resume information
- —Educational background and academic qualifications
- —Professional references and recommendations
- —Interview notes and assessment records
- —Compensation expectations and availability information
Technical and Usage Data
- —IP address and approximate geographic location
- —Browser type, version, and language preferences
- —Operating system and device information
- —Pages visited, time spent on pages, and navigation paths
- —Referring website or source of visit
- —Cookie identifiers and preference settings
How personal data is collected
Personal data is collected through the following channels and methods:
Direct Collection
Personal data is collected directly from individuals when they submit inquiry forms on our website, send email correspondence, participate in telephone or video calls, attend meetings, submit recruitment applications, or otherwise voluntarily provide information to the firm.
Automated Collection
Technical data is collected automatically when you visit our website through standard web server logs, analytics tools, and cookie technologies. This data is collected to understand how visitors interact with our website and to maintain the security and functionality of our digital infrastructure.
Third-Party Sources
In limited circumstances, we may receive personal data from third-party sources such as professional networking platforms, industry databases, referral partners, or publicly available sources. When we collect data from third parties, we take reasonable steps to verify that the data was lawfully obtained.
We do not collect personal data through deceptive means or without providing clear information about why the data is being requested and how it will be used.
Purposes of processing
Arabian Private Holdings processes personal data for the following specific purposes:
Business Development and Client Relations
- —Responding to business inquiries and evaluating potential engagements
- —Preparing proposals and engagement documentation
- —Maintaining ongoing client relationships and communications
- —Delivering consulting services under engagement agreements
- —Following up on completed engagements and gathering feedback
Recruitment and Employment
- —Evaluating applications for employment or contractor positions
- —Conducting interviews and assessment processes
- —Verifying qualifications and conducting reference checks
- —Maintaining records for compliance and audit purposes
Website Operations and Security
- —Operating and maintaining the website infrastructure
- —Analyzing website traffic and user behavior patterns
- —Detecting and preventing security incidents and fraud
- —Improving website functionality and user experience
Legal and Regulatory Compliance
- —Complying with applicable laws and regulatory requirements
- —Responding to lawful requests from governmental authorities
- —Establishing, exercising, or defending legal claims
- —Maintaining appropriate business records
Legal bases for processing
Where applicable data protection laws require a legal basis for processing personal data, Arabian Private Holdings relies on the following grounds:
Legitimate Interests
We process personal data based on our legitimate interests in operating our consulting business, including responding to business inquiries, managing client relationships, recruiting personnel, maintaining our professional reputation, and ensuring the security of our systems. When relying on legitimate interests, we conduct a balancing assessment to ensure that processing does not override the fundamental rights and freedoms of the data subject.
Contract Performance
We process personal data where necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract. This includes processing data to deliver consulting services, manage contractor relationships, and fulfill employment obligations.
Legal Obligations
We process personal data where necessary to comply with legal obligations to which Arabian Private Holdings is subject, including tax and accounting requirements, employment regulations, and responses to lawful requests from governmental authorities.
Consent
Where required by applicable law, we obtain explicit consent before processing personal data. This includes consent for certain types of marketing communications and for the use of non-essential cookies. Where consent is the legal basis for processing, individuals may withdraw their consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.
Data retention periods
Arabian Private Holdings retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period |
|---|---|
| Client engagement records | Seven years following the completion of the engagement, or longer where required for legal, regulatory, or professional standards compliance |
| Business inquiries (not proceeding) | Two years from the date of last contact, unless the individual requests earlier deletion |
| Business correspondence | Five years from the date of correspondence, or longer where related to ongoing business relationships |
| Recruitment applications (unsuccessful) | Twelve months following the conclusion of the recruitment process, or longer with the applicant's consent |
| Website analytics data | Twenty-six months from the date of collection |
| Server logs and security data | Ninety days for routine logs; longer for data related to security incidents |
Upon expiration of the applicable retention period, personal data is securely deleted or anonymized. In some cases, we may retain limited data in anonymized form for statistical purposes.
International data transfers
Arabian Private Holdings is headquartered in Saudi Arabia and primarily processes personal data within the Kingdom of Saudi Arabia and the Gulf Cooperation Council region. However, in some circumstances, personal data may be transferred to, stored, or processed in countries outside Saudi Arabia.
Where personal data is transferred outside Saudi Arabia, we implement appropriate safeguards to ensure the protection of personal data in accordance with applicable law. These safeguards may include:
- —Transfers to countries that have been determined to provide an adequate level of data protection
- —Standard contractual clauses approved by relevant data protection authorities
- —Binding corporate rules for transfers within a group of companies
- —Certifications or codes of conduct with binding commitments
- —Explicit consent of the data subject, where appropriate
You may request information about the specific safeguards applied to international transfers of your personal data by contacting us.
Data security measures
Arabian Private Holdings implements reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. Our security measures include:
- —Encryption of personal data in transit and at rest using industry-standard protocols
- —Access controls that limit access to personal data to authorized personnel on a need-to-know basis
- —Regular security assessments and vulnerability testing of our systems
- —Secure disposal procedures for personal data that is no longer required
- —Employee training on data protection and information security
- —Incident response procedures to address potential security breaches
- —Physical security measures for premises where personal data is processed
While we take reasonable precautions to protect personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of personal data transmitted to or stored by us. We encourage users to take steps to protect their own data, including using strong passwords and protecting login credentials.
If you become aware of any security incident or have concerns about data security, please contact us immediately at contact@arabian-private-holdings.com.
Your rights regarding personal data
Depending on your jurisdiction and the circumstances of data processing, you may have certain rights regarding your personal data. These rights may include:
Right of Access
You may request confirmation of whether we process your personal data and, if so, access to that data along with information about how it is processed.
Right to Rectification
You may request correction of inaccurate personal data or completion of incomplete personal data that we hold about you.
Right to Erasure
In certain circumstances, you may request deletion of your personal data, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You may request restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
Where technically feasible and applicable, you may request to receive your personal data in a structured, commonly used, machine-readable format.
Right to Object
You may object to processing of your personal data based on our legitimate interests, and we will cease processing unless we have compelling legitimate grounds that override your interests.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.
The ability to exercise these rights may depend on your jurisdiction, the legal basis for processing, and other circumstances. We will respond to valid requests within the time periods required by applicable law.
How to submit a data subject request
To exercise any data subject rights or to make inquiries about your personal data, please submit a request to:
Data Protection Contact
Arabian Private Holdings
Email: contact@arabian-private-holdings.com
Subject line: Data Subject Request
When submitting a request, please provide sufficient information to allow us to verify your identity and locate your personal data. We may request additional information to confirm your identity before processing your request. We will respond to verified requests as promptly as practicable and within the time periods required by applicable law.
There is generally no charge for exercising your data protection rights. However, we reserve the right to charge a reasonable fee or refuse to act on requests that are manifestly unfounded, excessive, or repetitive.
Recruitment-related data processing
When you apply for a position with Arabian Private Holdings, we collect and process personal data to evaluate your application and manage the recruitment process. This section provides additional information specific to recruitment-related processing.
Data Collected
We collect curriculum vitae, cover letters, educational credentials, professional certifications, work history, references, and information provided during interviews. We may also collect information about compensation expectations, availability, and visa or work authorization status.
Purpose of Processing
Recruitment data is processed to evaluate your qualifications, conduct interviews, verify credentials, make hiring decisions, and comply with employment regulations. With your consent, we may retain your application for consideration for future opportunities.
Retention
Applications for unsuccessful candidates are retained for twelve months following the conclusion of the recruitment process. If you consent to being considered for future opportunities, we may retain your data for a longer period. Successful candidates' data is transferred to employment records.
Background Checks
For certain positions, we may conduct background checks, including verification of employment history, educational credentials, and professional references. We will inform you before conducting such checks and obtain any required consent.
Website analytics and cookies
The website uses cookies and similar technologies to understand how visitors interact with our content and to improve functionality. Cookies are small text files stored on your device that enable the website to recognize you and remember certain information.
We use strictly necessary cookies that are essential for the website to function properly, as well as analytics cookies that help us understand traffic patterns and user behavior. Analytics data is collected in a manner that does not directly identify individual users.
Detailed information about the cookies we use, their purposes, and how to manage your cookie preferences is available in our Cookie Policy.
You can control cookie settings through your browser preferences and through the cookie preferences control available on our website. Note that disabling certain cookies may affect the functionality of the website.
Marketing communications
Arabian Private Holdings may send informational communications about our services, perspectives, and industry developments to individuals who have expressed interest in our work or with whom we have an existing business relationship.
Where required by applicable law, we obtain consent before sending marketing communications. You may opt out of marketing communications at any time by following the unsubscribe instructions included in each communication or by contacting us directly.
Opting out of marketing communications does not affect transactional or service-related communications that are necessary for an ongoing business relationship.
Children and minors
This website is not directed to children under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete that data as soon as reasonably practicable. If you believe we have collected data from a child, please contact us immediately.
Third-party websites and services
Our website may contain links to third-party websites, platforms, or services that are not operated by Arabian Private Holdings. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit. Links to third-party sites do not constitute an endorsement of their content or practices.
Changes to this Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes in our data processing practices, applicable laws, or business operations. When we make material changes to this policy, we will update the "Last reviewed" date and, where appropriate, provide additional notice such as a prominent announcement on our website.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Continued use of our website following any changes constitutes acceptance of the updated policy.
Complaints and regulatory authorities
If you have concerns about how we process your personal data, we encourage you to contact us first so we can address your concerns. You may also have the right to lodge a complaint with a supervisory authority or data protection regulator in your jurisdiction.
In Saudi Arabia, the relevant authority is the Saudi Data and Artificial Intelligence Authority (SDAIA) and the National Data Management Office (NDMO). Contact information for other relevant authorities can be provided upon request.
Contact information
For questions about this Privacy Policy, to exercise your data protection rights, or to raise concerns about data processing, please contact:
Arabian Private Holdings
The Executive Centre, Level 7, Building 3.09, District 3
KAFD, Riyadh 13519, Kingdom of Saudi Arabia
We aim to respond to all inquiries within a reasonable timeframe and will work with you to address any concerns about your personal data.