Privacy policy.

1. Who we are

Element8 provides digital services to businesses in Saudi Arabia. This policy covers personal data collected through element8.sa and its subdomains, and through enquiries about our Saudi services. Element8 is the data controller for this information. Our Saudi contact address is 6705 Imam Abdullah Bin Saud Bin Abdulaziz Al-Fari, Riyadh 13242, Saudi Arabia.

2. Information we collect

We collect information you choose to provide — such as your name, email address, phone number, company, job title and project brief — when you contact us through forms, email, phone or WhatsApp, subscribe to communications, or apply for a role. We also collect limited technical information automatically, including IP address, browser and device type, pages visited and cookies, to keep the site working and understand how it is used.

3. How we use your information

• Responding to enquiries, proposals and support requests
• Providing, operating and improving our websites and services
• Processing job applications
• Sending communications you have opted in to receive
• Measuring site performance and improving user experience
• Enhancing security, preventing fraud and complying with legal obligations

4. Legal bases for processing

Processing is subject to the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations. We rely on consent, an agreement you are party to, a legal requirement, or legitimate interests where permitted without prejudice to your rights and excluding sensitive data. You may withdraw consent at any time.

5. How we share information

We do not sell or rent personal data. Limited information may be shared with trusted service providers who support our hosting, analytics, CRM, communication and delivery — under appropriate confidentiality controls — and with authorities where required by law. If our business is restructured, information may transfer as part of that transaction.

6. International data transfers

Some service providers may process personal data outside Saudi Arabia. Any such transfer is subject to the PDPL and the Regulation on Personal Data Transfer Outside the Kingdom, including applicable safeguards and assessment requirements. This policy does not mean that all data is hosted in Saudi Arabia.

7. Data retention

We keep personal data only as long as needed for the purposes described here — typically the duration of our relationship plus a reasonable period for legal, accounting and business records — after which it is deleted or anonymised. Enquiry records that do not lead to an engagement are periodically reviewed and removed.

8. Cookies & tracking

We use cookies for site functionality, analytics and, where enabled, advertising measurement. These include essential cookies (required for the site to work), analytics cookies (to understand usage) and marketing cookies (to measure campaigns). You can manage or disable cookies in your browser settings; core parts of the site will continue to work.

9. Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration or disclosure — including encrypted transport, access controls and monitored infrastructure. No online system can be guaranteed absolutely secure, but security is engineered into how we build and operate.

10. Your rights under Saudi law

Subject to the PDPL and its applicable exceptions, you may be informed about processing, access your personal data, obtain a readable copy, request correction or completion, and request destruction when it is no longer needed. Where processing relies on consent, you may withdraw it. Send requests to info@element8.sa. We may need to verify your identity and will respond within the applicable statutory timeframe.

11. Marketing communications

We obtain consent for direct marketing as required by Saudi law. You can unsubscribe using the link in a marketing message or by contacting info@element8.sa. Withdrawing marketing consent does not affect necessary service communications.

12. Children's privacy

Our websites and services are intended for businesses and are not directed at children under 18. We do not knowingly collect personal data from children; if you believe a child has provided us information, contact us and we will delete it.

13. Third-party links

Our websites may link to external sites. We are not responsible for the privacy practices of third-party websites, and we encourage you to review their policies.

14. Updates to this policy

We may update this policy periodically. Changes are posted on this page with an updated date; material changes may be highlighted on the site.

15. Complaints & contact

Contact Element8 about this policy or your personal data at info@element8.sa or +966 11 470 3408. Saudi office: 6705 Imam Abdullah Bin Saud Bin Abdulaziz Al-Fari, Riyadh 13242, Saudi Arabia. You may also submit a personal-data complaint to the Saudi Data & AI Authority (SDAIA) through the National Data Governance Platform: https://dgp.sdaia.gov.sa/