This notice is published for transparency. It is not a substitute for legal advice, and customers should seek their own legal counsel before relying on it.
Last updated: July 2026.
1. Data controller
The controller is Deyar Digital, based in Riyadh, Kingdom of Saudi Arabia. We determine the purposes and means of processing the personal data we collect through our website and in the course of our business relationship with you. For any matter relating to personal data, contact: privacy@deyardigital.sa. When personal data is processed inside the DeyarIS platform on behalf of a customer, that customer is the controller and Deyar Digital acts as processor.
2. Lawful basis for processing
We process personal data on a lawful basis under the Personal Data Protection Law, being one of: your explicit consent; the necessity of processing to perform a contract to which you are a party; a legitimate interest of Deyar Digital that does not conflict with your fundamental rights and freedoms; or compliance with a legal obligation to which we are subject. We limit processing to what is necessary to achieve the specified purpose.
3. Data-subject rights
The law guarantees you the following rights over your personal data: the right to be informed of the reasons and manner of its processing; the right to access it; the right to obtain a copy of it in a clear, readable format (portability); the right to request correction or updating of inaccurate or incomplete data; the right to request its destruction where it is no longer needed; the right to object to its processing; and the right to withdraw consent at any time where processing is based on it, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, send your request to privacy@deyardigital.sa, stating which right you wish to exercise. We may ask you to verify your identity before acting on the request, to protect your data, and we will respond within the statutory periods. You also have the right to lodge a complaint with the competent authority, the Saudi Data and AI Authority (SDAIA).
4. Cross-border transfers
As a general rule, we keep personal data stored and processed within the Kingdom of Saudi Arabia. We transfer data outside the Kingdom only in the cases permitted by the Personal Data Protection Law and its regulations, where the necessary safeguards are in place to ensure an appropriate level of protection, and only to the extent needed to achieve the purpose. No such transfer will be made in a manner that conflicts with the regulatory requirements in force in the Kingdom.
5. Data Protection Officer
Deyar Digital has designated a point of contact responsible for overseeing compliance with the Personal Data Protection Law and responding to data-subject enquiries. You can reach our Data Protection Officer at privacy@deyardigital.sa.
6. Contact
For any request or enquiry relating to personal data: privacy@deyardigital.sa.
← Back to home