Privacy Policy
We are committed to protecting your personal data in accordance with Saudi Arabia's Personal Data Protection Law (PDPL)
Last updated: 27 September 2026
Introduction
Zeta Administrative Consultations Company (ZACCO) — registered in Madinah, Saudi Arabia — is the data controller for the personal information collected through this website.
This policy explains what data we collect, why we collect it, how we use and protect it, and the rights available to you under Saudi Arabia's Personal Data Protection Law (PDPL), issued by Royal Decree M/19 of 1443H.
Data We Collect
We collect the following personal data when you interact with us:
Contact Information
Full name, email address, phone number, and the name of your organisation or facility.
Enquiry Data
Details of your request or enquiry submitted via the contact form, including the type of service required.
Technical Data
IP address, browser type, pages visited, and session duration — used for performance analysis and improving user experience.
Correspondence Data
Any communications you send us via email or other channels.
Legal Bases and Purposes for Processing
We process your personal data on the following legal bases under PDPL:
Data Retention
Contact form data is retained for no more than 24 months from the date of last contact, unless legal or contractual requirements necessitate a longer retention period.
Technical data (logs and analytics) is automatically deleted after 12 months.
Client data linked to active contracts is retained for the duration of the contract and three years thereafter, in accordance with Saudi commercial archiving requirements.
Your Rights Under PDPL
Saudi Arabia's Personal Data Protection Law grants you the following rights:
Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of any inaccurate or incomplete data.
Right to Erasure
Request deletion of your personal data when it is no longer needed or the legal basis for processing no longer applies.
Right to Object
Object to processing of your data for direct marketing purposes or on grounds of legitimate interest.
Right to Restriction
Request restriction of processing in certain circumstances while your requests are being considered.
Right to Data Portability
Receive your data in a structured, machine-readable format for transfer to another controller.
Third-Party Data Sharing
We do not sell or rent your personal data to any third party. We may share your data only in the following circumstances:
Service Providers: Trusted technology partners who assist us in operating the website and sending notifications, bound by confidentiality obligations.
Regulatory Authorities: The National Cybersecurity Authority or other Saudi government bodies when legally required.
Legal Advisors: In the event of a legal dispute requiring disclosure of data.
Data Security
We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, modification, or destruction. These measures include TLS encryption in transit, restricted access controls, and regular security reviews.
Cookies
Our website uses essential cookies to ensure proper functionality, and analytical cookies to understand usage patterns. You can control cookie settings through your browser at any time.
Contact Us
To exercise any of your rights or for any enquiry relating to this policy, please contact us at:
We will respond to your request within 30 business days as required by PDPL.
Policy Updates
We may update this policy periodically to reflect legislative changes or developments in our services. We will notify you of any material changes via email or a prominent notice on the website. Your continued use of the site after updates are published constitutes acceptance of the revised policy.