Riyada Ventures ("we", "our") respects your privacy. This policy explains what personal data we collect through the HESP platform, why we collect it, who we share it with, and the rights you hold over it. We process personal data in accordance with the Saudi Personal Data Protection Law (PDPL — نظام حماية البيانات الشخصية) and its implementing regulations.
In short: we collect only what we need to answer your inquiries, fulfil your orders, and run the platform. We do not sell personal data, and we do not use it for advertising networks.
1. Who Controls Your Data
The data controller is Riyada Ventures, Al Faisaliyyah, Riyadh 12882, Kingdom of Saudi Arabia. For anything related to your personal data, contact us at info@riyada-ventures.com.
2. What We Collect
We collect personal data in the following situations:
- Contact and quote requests — your name, company, phone number, email address, and the details of the parts you ask about, when you submit a form on the platform or message us on WhatsApp.
- Order and invoicing data — company details, delivery addresses, and payment references needed to fulfil confirmed orders and issue tax invoices.
- Account data — name, business email, and assigned role, for staff and registered business users who are issued platform accounts.
- Technical data — IP address, browser type, and pages visited, collected automatically in aggregate form to measure site traffic and keep the platform secure.
3. Why We Use It
We process personal data on the legal bases recognized by the PDPL — your consent, the performance of a contract with you, our legitimate interests in operating a B2B business, and compliance with legal obligations. Specifically, we use your data to:
- Responding to your inquiries and preparing quotations.
- Fulfilling confirmed orders, arranging delivery, and issuing invoices.
- Operating and securing platform accounts under role-based access.
- Understanding, in aggregate, how the site is used so we can improve it.
- Meeting record-keeping obligations under Saudi commercial and tax regulations.
We do not send marketing messages without your consent, and we never sell or rent personal data to third parties.
4. Cookies and Analytics
The platform uses essential cookies only where they are needed for the service to function — for example, to keep authorized users signed in to their accounts. For traffic measurement, we record simple, aggregate visit statistics (such as which pages are viewed). We do not use cross-site advertising trackers or social media pixels.
You can set your browser to refuse cookies; the public catalog remains fully usable, though account sign-in requires them.
5. Who We Share Data With
We share personal data only with service providers who help us run the platform, and only to the extent needed:
- Hosting and infrastructure providers that run the website and its database.
- Email delivery services used to send transactional messages such as quotation replies.
- WhatsApp (Meta), when you choose to contact us through it — governed by Meta's own privacy terms.
- Delivery carriers, who receive the name, address, and phone number needed to deliver your order.
- Government authorities, where disclosure is required by Saudi law.
Some infrastructure providers host data on servers outside the Kingdom. Where personal data is transferred outside Saudi Arabia, we do so only with safeguards consistent with the PDPL's rules on cross-border transfer, and our providers process data solely on our instructions.
6. How Long We Keep Data
We keep personal data only as long as it is needed for the purpose it was collected for. Inquiry and quote data is deleted or anonymized once it is no longer needed for follow-up. Order, invoicing, and accounting records are retained for the periods required by Saudi commercial and tax regulations (up to ten years for certain financial records), after which they are securely deleted.
7. Your Rights
Under the PDPL, you have the right to:
- Know how we collect and process your personal data.
- Request access to, and a copy of, the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your data, subject to the legal retention obligations above.
- Withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, email info@riyada-ventures.com. We respond within the timeframes set by the PDPL's implementing regulations. You also have the right to lodge a complaint with the competent data protection authority in the Kingdom (SDAIA).
8. How We Protect Data
We apply technical and organizational safeguards appropriate to the data we handle: encrypted connections (HTTPS) across the platform, role-based access so each user sees only what their role requires, hashed credentials, and access limited to staff who need the data for their work.
9. Changes to This Policy
If we change how we handle personal data, we will update this policy and revise the "last updated" date at the top of the page. Material changes will be highlighted on the platform.
10. Contact Us
For any question about this policy or your personal data: info@riyada-ventures.com · +966 55 228 2868 · Al Faisaliyyah, Riyadh 12882, Kingdom of Saudi Arabia.