Privacy Policy

This policy covers personal data collected through kataleap.com. It is written to meet the Saudi Personal Data Protection Law (PDPL) and is kept deliberately short, because a policy nobody reads protects nobody.

Who is responsible

Kataleap is the data controller for the information described here. For any question about your data, or to exercise any of the rights below, write to [email protected].

What we collect, and when

We collect personal data in one place only: the contact form. When you submit it, we receive the name, work email, company, phone number and service interest you enter, along with your message and the page you sent it from.

We do not collect anything else. This site runs no analytics, no advertising trackers and no third-party embeds, and it loads no fonts, scripts or images from anyone else’s servers. Nothing about your visit is shared with another company, because nothing about your visit leaves ours.

Your IP address

Your IP address is used momentarily to limit how many messages can be sent from one connection, as a defence against automated abuse. It is converted to an irreversible value for that check and is never written to our records. We could not tell you your own IP address from what we store.

Why we hold it, and on what basis

We use what you send to reply to your enquiry and, if it leads somewhere, to carry on that conversation. The lawful basis is your consent, which you give by ticking the box on the form. We record the wording you agreed to and the moment you agreed to it, so that what you consented to is never in question.

We do not use these details for marketing, we do not add you to a mailing list, and we do not sell or share them.

How long we keep it

Enquiries that do not lead to work are deleted after 24 months. Where an enquiry becomes a client relationship, the records are kept for as long as that relationship lasts and then for the period Saudi commercial and tax law requires us to retain business records.

Where it is held

Enquiries are stored in this website’s own database and in the email account of the team who answer them. Access is limited to the people who need it to reply to you.

Your rights

Under PDPL you may ask us to tell you what we hold about you, to correct it if it is wrong, to give you a copy, to destroy it, and to withdraw your consent at any time. Withdrawing consent does not undo anything done while it was in force. Write to [email protected] and we will respond within 30 days.

If you believe we have handled your data improperly, you may complain to the Saudi Data & AI Authority (SDAIA).

Cookies

This site sets no tracking or advertising cookies. WordPress sets a session cookie if you log in to the administration area, which applies to our team rather than to visitors.

Changes

If this policy changes materially we will update the date below. Consent already recorded stays attached to the wording it was given under.