This policy is published for transparency. It is not a substitute for legal advice, and customers should seek their own legal counsel before relying on it.
Last updated: July 2026.
1. Who we are
Deyar Digital is a Saudi company based in Riyadh, Kingdom of Saudi Arabia, and the provider of the DeyarIS governance, risk and compliance platform. We act as the data controller for personal data collected through this website, and as a data processor on behalf of our customers for data processed inside the DeyarIS platform. Privacy contact: privacy@deyardigital.sa.
2. Data we collect
Through this website we collect the contact details you voluntarily provide (such as your name, work email, organisation and message) when you complete a contact form or request a demonstration, together with limited technical data generated automatically, such as IP address, browser type and pages visited. When you use the DeyarIS platform we process account data (name, email, role and organisation), activity logs, and the data your organisation uploads into the platform. We do not collect sensitive personal data through this website.
3. How we use data, and our lawful basis
We process personal data for defined purposes: to respond to your enquiries and demo requests, to provide, operate and secure the DeyarIS platform, to manage accounts and subscriptions, to improve our website and services, and to meet our regulatory obligations. Under the Saudi Personal Data Protection Law, our processing relies on one of the following bases: your consent, the performance of a contract to which you are a party, a legitimate interest that does not conflict with your rights, or compliance with a legal obligation. Where processing is based on consent, you may withdraw it at any time.
4. Cookies and analytics
This website uses cookies that are necessary for it to function correctly, and we may use limited analytics to understand, in aggregate, how the site is used. We do not sell your data and we do not use advertising cookies to track you across other sites. You can configure your browser to refuse non-essential cookies, although some features may then not work fully.
5. Sharing and sub-processors
We do not sell personal data. We may share it with a limited number of trusted service providers who process it on our behalf for purposes such as hosting and support, under contracts that require them to protect the data and process it only on our instructions. We select infrastructure providers so that data remains stored inside the Kingdom. We may also disclose data where required by law or in response to a valid request from a competent authority.
6. In-Kingdom storage and retention
Personal data is stored and processed within data centres in the Kingdom of Saudi Arabia. We retain data for as long as necessary to fulfil the purposes described in this policy, or for the period required by law and our contractual obligations, after which it is securely deleted or anonymised. Customer data held inside the DeyarIS platform is retained according to the agreement with the customer, who acts as the controller of that data.
7. Your rights under the PDPL
The Saudi Personal Data Protection Law grants you rights including: to be informed how your data is processed, to access it, to obtain a copy of it in a readable format, to correct inaccurate or incomplete data, to request its deletion, to object to its processing, and to withdraw your consent where processing is based on it. To exercise any of these rights, contact us at privacy@deyardigital.sa. We may ask you to verify your identity, and we will respond within the periods set by the law. You also have the right to lodge a complaint with the competent authority, the Saudi Data and AI Authority (SDAIA).
8. Security measures
We apply organisational and technical controls to protect personal data, including encryption in transit and at rest, need-to-know access control, isolation of each customer's data, activity logging and monitoring, regular backups, and secure development practices. While no security can be guaranteed absolutely, we continually review and improve our controls in line with best practice and regulatory requirements in the Kingdom.
9. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or in regulatory requirements. We will publish the updated version on this page and revise the "Last updated" date. We encourage you to review it periodically.
10. Contact
For any question about this policy or about your personal data: privacy@deyardigital.sa.
← Back to home