Privacy Policy

Learn how we collect, use, and protect your personal data in compliance with Saudi PDPL and GDPR.

Last updated: May 8, 2026

This Privacy Policy explains how How to Saudi Arabia ("we," "our," or "us") collects, uses, and protects your information when you use our website howtosaudiarabia.com (the "Service").

1. Information We Collect

1.1 Analytics Data

We use the following analytics services to understand website usage:

DataFast (cookieless mode): We use DataFast as our web analytics service, running in cookieless mode. In this mode, DataFast does not use cookies for visitor identification. Instead, each visitor is represented by a pseudonymous hashed identifier derived from signals such as IP address, browser user-agent, site domain, and a salt that rotates approximately every 24 hours (UTC). The same person browsing on different days is not linked as one long-lived profile. No cross-domain visitor linking occurs. DataFast collects aggregated data including page views, referral sources, browser type, device information, and general traffic patterns. Privacy Policy: datafa.st/privacy-policy.

GetYourGuide: We use GetYourGuide widgets and analytics on certain pages to display tours and activities. GetYourGuide may collect usage data and set cookies when you interact with their embedded content. Privacy Policy: getyourguide.com/privacy_policy.

1.2 Calculator Data

All calculations (tax, salary, cost of living, mortgage) are performed locally in your browser. We do not receive, store, or have access to any of your financial information or calculation results.

1.3 Contact Form (Tally.so)

Our contact page uses a form hosted by Tally.so, a third-party form service. When you submit the contact form, your data is collected and processed by Tally.so and delivered to us. This may include your name, email address, and the content of your message. Tally.so may store this data on servers located in the European Union. Privacy Policy: tally.so/help/privacy-policy.

1.4 Inquiry Forms (Web3Forms)

Some pages contain inquiry forms (such as requests for immigration legal assistance, job search help, or relocation support) processed through Web3Forms, a third-party form handling service. When you submit a form, your data is transmitted to Web3Forms servers and forwarded to us via email. This may include:

Full name
Email address
Phone number (if provided)
Location information (current city/country, target city)
Details about your inquiry (case type, industry, service needed, timeline)
Any additional information you include in free-text fields

This data is collected only when you actively submit a form and give your explicit consent. Privacy Policy: web3forms.com/privacy.

2. Legal Basis for Processing

We process data based on the following legal grounds under the Saudi Personal Data Protection Law (PDPL) and, for users in the European Economic Area, the General Data Protection Regulation (GDPR):

Legitimate interest (Article 6(1)(f) GDPR / Article 5 PDPL): For cookieless analytics data (DataFast) to improve our website. DataFast in cookieless mode does not use cookies for visitor identification, relying instead on pseudonymous server-side hashing with a rotating salt.
Consent (Article 6(1)(a) GDPR / Article 6 PDPL): For personal data submitted through our contact and inquiry forms. You provide explicit consent by submitting a form. You may withdraw your consent at any time by contacting us at hello@howtosaudiarabia.com.

3. How We Use Your Information

We use the collected information to:

Provide and maintain our Service
Improve our website content and user experience
Analyze website traffic and usage patterns
Respond to your inquiries submitted through our forms
Connect you with relevant service providers (immigration lawyers, recruitment agencies, relocation specialists) when you request this through our forms
Ensure website security and prevent abuse
Comply with legal obligations

4. Data Sharing and Third Parties

4.1 Service Provider Matching

When you submit an inquiry form requesting assistance with immigration, employment, or relocation, we may share the information you provided with third-party service providers (such as immigration lawyers, recruitment agencies, or relocation specialists) for the purpose of fulfilling your request. We will only share your data:

With your explicit consent (given when submitting the form)
With providers we consider relevant to your inquiry
Limited to the information necessary to address your request

You can request deletion of your data or withdrawal of consent at any time by emailing hello@howtosaudiarabia.com.

4.2 Affiliate Links

Our website contains affiliate links to third-party services (banks, insurance, SIM cards, and others). When you click these links:

You are redirected to the third party's website
Their privacy policy applies from that point
We may receive a commission (at no cost to you)
We do not share your personal data with affiliates

5. Cookies and Tracking

Our website uses the following types of cookies and tracking:

Essential cookies: Strictly necessary cookies required for basic website functionality. These do not collect personal information.
Third-party cookies (GetYourGuide): May be set when you interact with embedded GetYourGuide widgets on certain pages.
Third-party cookies (Tally.so): May be set when you interact with the embedded contact form.

DataFast (cookieless): Our analytics service, DataFast, runs in cookieless mode and does not set any cookies for visitor identification. It may use session-only storage for the current tab session, which is cleared when you close the site. You can manage or delete cookies set by other services through your browser settings.

6. Data Retention

DataFast analytics data: Retained by DataFast according to their data retention policy. Visitor identifiers rotate approximately every 24 hours due to the cookieless hashing mechanism, so no long-lived individual profiles are maintained.
Form submission data (Web3Forms): Retained in our email system for up to 12 months, or until you request deletion. Data processed by Web3Forms is subject to their retention policy.
Contact form data (Tally.so): Retained by Tally.so according to their retention policy and in our email system for up to 12 months, or until you request deletion.

7. Your Rights Under PDPL and GDPR

Under the Saudi Personal Data Protection Law (PDPL) and, for users in the European Economic Area, the GDPR, you have the following rights:

Right of Access: Request information about your personal data we hold and how it is processed.
Right to Rectification: Correct inaccurate or incomplete personal data.
Right to Erasure: Request deletion of your personal data when it is no longer necessary for the purpose it was collected.
Right to Restrict Processing: Limit how we process your data in certain circumstances.
Right to Data Portability: Receive your data in a structured, commonly used format.
Right to Object: Object to processing based on legitimate interests.
Right to Withdraw Consent: Withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at hello@howtosaudiarabia.com. We will respond within 30 days.

8. International Data Transfers

Some of the third-party services we use may process data outside of Saudi Arabia. DataFast may process data on servers outside Saudi Arabia. Tally.so processes data within the European Union. GetYourGuide may process data outside Saudi Arabia. Such international transfers are conducted with appropriate safeguards in place, including Standard Contractual Clauses and compliance with the PDPL requirements for cross-border data transfers (Article 29 PDPL). For DataFast's commitments as a data processor, see their Data Processing Agreement.

9. Data Security

We implement appropriate security measures including:

HTTPS encryption for all data transmission
Regular security updates and monitoring
Limited access to personal data
Secure hosting infrastructure

10. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately.

11. Supervisory Authority

If you believe we have not handled your personal data in accordance with the PDPL, you have the right to lodge a complaint with the Saudi National Data Management Office (NDMO) under the Saudi Data and Artificial Intelligence Authority (SDAIA). Website: ndmo.gov.sa.

For users in the European Economic Area, you may also lodge a complaint with your local data protection authority under the GDPR.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Changes are effective immediately upon posting.

13. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at hello@howtosaudiarabia.com.