Privacy Policy
Saudi Downtown Company (SDC)
Saudi Downtown Company (SDC) is a Saudi entity responsible for developing, managing, and activating downtown destinations and real estate projects within the Kingdom of Saudi Arabia. SDC engages with website visitors, event participants, investors, vendors, and business partners as part of its development, marketing, and operational activities.
This Privacy Policy explains how SDC collects, processes, discloses, stores, and protects personal data in accordance with the Personal Data Protection Law of the Kingdom of Saudi Arabia and its implementing regulations.
You may contact us using the details provided below.
E-mail:
contact@saudidowntown.com.sa (to be confirmed)
What Personal Data is collected?
We collect and process the following Personal Data:
Identity and Contact Data: Name, email address, phone number.
Demographic Data: Age range, city or district-level location.
Engagement and Preference Data: Event interests, sector preferences, participation records, and communication preferences.
Marketing Interaction Data: Email opens, click-through rates, campaign engagement metrics.
SDC does not intentionally collect or process sensitive personal data such as health information, biometric data, financial account information, or religious beliefs.
How do we collect your Personal Data? What is the purpose of collecting?
Some of the Personal Data that we process is obtained directly from you using website forms (including the “Contact Us” form), event registration forms, marketing landing pages, and email correspondence for the following purposes:
Responding to inquiries and communications.
Managing event registrations and participation.
Sending marketing communications and event invitations.
Managing investor and vendor engagement.
Conducting campaign performance analysis and improving marketing effectiveness.
Enhancing website functionality and user experience.
We also obtain some Personal Data indirectly from the following sources:
Event organizers, where participant lists are shared with SDC for coordination, communication, and event-related follow-up purposes.
SDC does not obtain personal data directly from digital advertising or social media platforms. Marketing analytics and audience segmentation are primarily conducted within such platforms based on data provided by SDC or through aggregated, non-identifiable reporting.
How do we use your Personal Data?
We use Personal Data collected, directly or indirectly, as follows:
To respond to inquiries submitted through the website or other communication channels.
To manage and administer event registrations and participation.
To communicate updates, invitations, and relevant information regarding SDC projects and initiatives.
To manage relationships with investors, vendors, and business partners.
To conduct marketing communications where a valid legal basis applies.
To analyze campaign performance and engagement trends using aggregated or segmented data.
To improve website functionality, security, and user experience.
To comply with applicable legal and regulatory obligations within the Kingdom of Saudi Arabia.
Personal Data is processed only for specified, explicit, and legitimate purposes and will not be further processed in a manner incompatible with those purposes.
How do we disclose your Personal Data?
We may disclose your Personal Data to the following entities:
Event organizers, for the purpose of coordinating participation, managing registrations, and facilitating event-related communications.
Digital marketing and advertising platforms, for the purpose of executing targeted campaigns, audience segmentation, and performance analytics.
Email campaign service providers, for the purpose of sending marketing communications and managing mailing lists.
Regulatory or governmental authorities, where disclosure is required by applicable laws or official requests within the Kingdom of Saudi Arabia.
All disclosures are limited to what is necessary for the specified purpose and are subject to appropriate contractual and security safeguards.
Legal Basis for Collecting and Processing Your Personal Data
In accordance with the Personal Data Protection Law, the legal basis on which we rely in processing such data is:
Your explicit consent. You may withdraw your consent at any time without affecting processing operations carried out based on other legal bases. To this end, you may contact us at contact@saudidowntown.com.sa. Consent is relied upon primarily for direct marketing communications and optional engagement activities.
In fulfillment of a contractual obligation. Personal Data may be processed where necessary to manage event participation, vendor engagement, investor communications, or other business relationships where processing is required to perform obligations agreed between SDC and the data subject.
In compliance with a statutory obligation. Personal Data may be processed where required under applicable laws and regulations within the Kingdom of Saudi Arabia, including commercial, regulatory, and archival requirements.
Achieving legitimate interests or objectives. SDC may process Personal Data where necessary to achieve legitimate business interests, such as improving services, managing operational communications, enhancing website functionality, and analyzing campaign effectiveness, provided such interests do not conflict with the rights of data subjects.
How do we store your Personal Data?
Your Personal Data is stored securely either at SDC headquarters and/or through cloud computing service providers hosted within the Kingdom of Saudi Arabia, and this data is protected with the best technologies in accordance with the policies and controls of the National Authority for Cybersecurity and international standards in order to prevent non-authorized entry and reduce cyber risks.
Personal Data is securely disposed of in a manner that prevents access, recovery, or reconstruction.
Your Rights Regarding Processing of Your Personal Data
Under the Personal Data Protection Law, you have the following rights, which primarily depend on the purpose of Personal Data collection and processing:
Right to Be Informed
You are entitled to be informed how we collect your Personal Data, the legal basis for collection and processing, how such data is processed, stored, destroyed, and to whom it will be disclosed. You can access all details through this Privacy Policy or contact us at contact@saudidowntown.com.sa
This right may be limited where disclosure would conflict with legal or regulatory obligations under applicable laws within the Kingdom of Saudi Arabia.
Right of Access to Your Personal Data
You are entitled to request access to your Personal Data by submitting a written request to contact@saudidowntown.com.sa.
Access may be restricted where disclosure would adversely affect the rights of others or where such access is limited under applicable laws.
Right to Request Access to Your Personal Data in a Readable Format
You are entitled to request a copy of your Personal Data held by SDC in a readable and clear format, where technically feasible, by submitting a request to contact@saudidowntown.com.sa.
Provision of data may be limited where technical constraints exist or where disclosure would conflict with legal or regulatory requirements.
Right to Request Correction of Your Personal Data
You are entitled to request correction of your Personal Data that you believe is inaccurate, incorrect, or incomplete by contacting contact@saudidowntown.com.sa.
Such data will be reviewed and updated within 30 days of receiving the request. You will be notified of the outcome through the same communication channel used to submit the request.
Right to Request Destruction of Your Personal Data
You are entitled to request destruction of your Personal Data in certain circumstances, including where:
Personal Data is no longer necessary for the purpose for which it was collected.
You withdraw your consent (where consent is the legal basis).
Processing is unlawful.
This right may not apply where retention is required to comply with legal or regulatory obligations within the Kingdom of Saudi Arabia.
Right to Withdraw Your Consent for Processing Your Personal Data
You are entitled to withdraw your consent for processing your Personal Data at any time where consent is the legal basis for processing.
Withdrawal of consent does not affect processing carried out prior to withdrawal or processing based on other lawful grounds.
You will not be required to pay any fees for exercising this right. Upon submission of a request, you will receive a response within 30 days.
For further details regarding the processing of your Personal Data and how to exercise your rights, you may contact Saudi Downtown Company using the following contact details:
E-mail:
contact@saudidowntown.com.sa
Complaint or Objection Filing Method
If you have any concerns or if you believe that SDC has not complied with the Personal Data Protection Law, you may file a complaint using one of the following channels:
E-mail: contact@saudidowntown.com.sa
All complaints and requests will be reviewed and responded to within 30 days of receipt.
If you are not satisfied with how we process your complaint, or if we fail to respond within 30 days, you may file a complaint with the Competent Authority:
Saudi Data & AI Authority
SDAIA Address
Kingdom of Saudi Arabia
Riyadh
Website:
Saudi Data & AI Authority (sdaia.gov.sa)
National Data Governance Platform “DGP