سياسة الخصوصية

KOD Events ("the Platform" or "we") respects the privacy of its users and visitors and is committed to processing personal data lawfully, fairly and transparently, in accordance with the Saudi Personal Data Protection Law (Royal Decree M/19) and its Implementing Regulations, supervised by the Saudi Data & AI Authority (SDAIA). This policy explains how we collect, use and protect your data, and your rights regarding it.

1. Data Controller

KOD Events, based in Riyadh, Kingdom of Saudi Arabia, is the data controller responsible for processing your personal data under this policy. Contact: [email protected].

2. Definitions

• Personal data: any data that identifies an individual, directly or indirectly.
• Processing: any operation performed on data, such as collection, storage, use, disclosure and destruction.
• Data subject: the natural person to whom the personal data relates.

3. Data We Collect

• Identity and contact data: name, mobile number, email address and organization.
• Booking data: event type, date, venue, requested services and number of attendees.
• Organizer data: information provided when submitting an event to the directory.
• Consultation requests: information you voluntarily provide in our request forms.
• Technical data: IP address, browser and device type, and aggregated usage data via analytics and cookies.

4. Legal Basis for Processing

We process your data on one or more of the following bases: your explicit consent; performance of a contract to which you are a party (such as completing a booking); a legitimate interest that does not conflict with your rights; or compliance with a legal obligation.

5. Purposes of Processing

• Processing booking requests, issuing quotes and invoices, and related communication.
• Reviewing and publishing events submitted to the Riyadh directory.
• Responding to consultation and event-design requests.
• Improving the platform, measuring performance and developing our services.
• Complying with applicable laws and regulations.

6. Data Sharing and Disclosure

We do not sell your personal data. We may disclose it, only as necessary, to trusted service providers processing data on our behalf (such as hosting, payment gateways and analytics tools) under contractual confidentiality obligations, or to competent government or judicial authorities upon a lawful request.

7. Cross-Border Data Transfers

Operating some services may require processing your data outside the Kingdom. Where this occurs, we comply with the controls set out in the Personal Data Protection Law and its Implementing Regulations to ensure an adequate level of protection.

8. Data Retention

We retain your data for as long as necessary to fulfil the purposes described above, or for the period required by law (such as tax and accounting regulations), after which it is securely destroyed or anonymized.

9. Data Security

We apply reasonable technical and organizational measures to protect your data against unauthorized access, disclosure, alteration or destruction, proportionate to the nature of the data and its risk level.

10. Your Rights as a Data Subject

• The right to be informed how your data is collected and the legal basis for processing.
• The right to access your data and obtain a copy of it.
• The right to request correction, updating or completion of your data.
• The right to request destruction of your data when no longer needed.
• The right to withdraw consent to processing at any time.

To exercise any of these rights, contact us at the email below; we will respond within the statutory period.

11. Cookies

We use cookies and similar tools for essential operation, experience improvement and performance measurement. You may accept or reject non-essential cookies through your browser settings.

12. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect data from minors without guardian consent; if we become aware of such data, we take the necessary steps to delete it.

13. Data Breach Notification

In the event of a data breach or unauthorized disclosure that may harm a data subject, we commit to taking the required legal measures and notifying the competent authority and affected data subjects as prescribed by law.

14. Changes to This Policy

We may update this policy from time to time to reflect changes in regulations or our services, and we will publish the updated version on this page with its update date.

15. Contact

For any privacy enquiry or to exercise your rights: [email protected] — Riyadh, Kingdom of Saudi Arabia.