Privacy
Privacy Policy
PACTIS is committed to protecting your personal data and processing it in accordance with the Personal Data Protection Law of the Kingdom of Saudi Arabia (PDPL). This policy explains how we handle data connected with this informational website.
Last updated: 7 June 2026
Data controller
The data controller is PACTIS, a founding-stage professional legal and regulatory platform based in Riyadh, Kingdom of Saudi Arabia. For any privacy enquiry, or to exercise your rights, contact us at [email protected].
Scope and purpose
This website is informational in nature. The “Request Access” form is used solely to collect enquiry details in order to evaluate and respond to investor and professional enquiries. We do not collect data for marketing or profiling purposes.
Current-state notice
Lead submission through the form is not yet active, pending the completion of a Data Protection Impact Assessment (DPIA). At this time, no enquiry data is transmitted or stored through the form. The terms below govern processing once the form is activated.
Legal basis for processing
We rely on your consent as the legal basis for processing your data, in accordance with the PDPL. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
Categories of data
When the form is active, the data we collect is limited to what you voluntarily provide: name, email, organisation, role, and the content of your message. We do not collect sensitive data, and we ask for no more than is necessary to handle your enquiry.
Retention
We retain enquiry data only for as long as needed to handle and respond to your enquiry — for up to twenty-four months unless an ongoing relationship is established that requires otherwise — after which the data is deleted or anonymised.
Recipients and transfers
We apply the principle of data minimisation. We do not sell your data or share it for commercial purposes. If any processor or cross-border transfer is later used, it will comply with the PDPL transfer rules and be disclosed.
Your rights
Under the PDPL you have the right to access your data, to have it rectified, to request its erasure, to withdraw your consent at any time, and to lodge a complaint with the Saudi Data & AI Authority (SDAIA). To exercise any of these rights, email us at [email protected].
Automated decision-making
We do not carry out any automated decision-making or profiling that produces a legal or similarly significant effect on you based on your data.
Data security
We apply appropriate organisational and technical measures to protect personal data against unauthorised access, disclosure, or destruction, consistent with the limited processing this website involves.
How to contact us
For any question about this policy, or to exercise your data-protection rights, email us at [email protected]