1. Who we are
Design Zone Group is a Saudi-headquartered engineering consultancy specialising in BIM (Building Information Modelling), VDC (Virtual Design and Construction), and digital twin platforms (TwinMs, TwinMaq). Our head office is in Jeddah, Saudi Arabia, with regional presence in Amman, Jordan and Cairo, Egypt. The data controller for designzone.com.sa is Design Zone Group, contactable at info@designzone.com.sa.
2. What personal data we collect
We collect data you provide directly through our contact form: full name, email address, phone number (optional), company or organisation, project topic, and the message body you write. When you visit our site, our hosting provider may automatically log your IP address, browser user-agent, referrer, and timestamps for security purposes. We also use Google Analytics 4 (anonymised IP) to understand which pages are useful — this only activates if you click <em>Accept</em> on the cookie banner. We do NOT use third-party advertising trackers, marketing pixels, retargeting, or behavioural advertising cookies on this site.
3. How we use your data
We use contact form data solely to respond to your enquiry, prepare proposals, and communicate about active or potential engagements. We use server logs to monitor site security, diagnose technical issues, and produce aggregated traffic statistics. We do NOT sell, rent, or trade personal data with third parties for marketing purposes. We do NOT use your personal data to train AI models.
4. Legal basis for processing
For EU and GDPR-covered users: we rely on legitimate interest (responding to your enquiry constitutes a pre-contractual or contractual interaction you initiated) and, where applicable, your explicit consent. Under Saudi PDPL, the legal basis is the contractual or pre-contractual relationship initiated by your contact, and our legitimate interest in operating a business website with normal security logging.
5. Who we share data with
Email correspondence is processed through Microsoft 365 (Microsoft Corporation), which acts as our data processor for inbound and outbound email. The site is hosted on Netlify (Netlify, Inc.), which processes server logs and serves static files. Both providers are bound by their own published data-protection policies and standard contractual clauses where required. We do not share contact form submissions with any other party except where required by Saudi law or court order.
6. International data transfers
Microsoft 365 may process email data in EU and US data centres; Netlify hosts data on AWS infrastructure across multiple regions. Both providers maintain certifications and standard contractual clauses for cross-border transfers in line with GDPR and PDPL requirements.
7. How long we keep data
Contact form submissions and related correspondence are retained for as long as the business relationship is active, plus up to five years after the last interaction for tax, audit, and legal-defence purposes. Server logs are kept for up to 90 days. You may request earlier deletion at any time via the rights described below.
8. Your rights
You have the right to access the personal data we hold about you, request correction of inaccuracies, request erasure where retention is no longer necessary, restrict or object to processing, and request a portable copy of your data. To exercise any of these rights, email info@designzone.com.sa with the subject line "Data rights request". We respond within 30 days. Under Saudi PDPL you also have the right to lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA). Under GDPR you may complain to your national supervisory authority.
9. Security
We use HTTPS encryption for all site traffic (TLS 1.2+) and rely on Microsoft 365 and Netlify's enterprise-grade security controls for data at rest and in transit. We restrict internal access to contact-form data on a need-to-know basis. No system can guarantee absolute security; you accept residual risk when transmitting data over the internet.
10. Cookies and tracking
On first visit we show a cookie banner with two choices: <strong>Accept</strong> (enables Google Analytics 4 with anonymised IP) or <strong>Reject</strong> (no analytics cookies set). Your choice is stored in your browser's localStorage for 12 months — you can change it any time by clearing site data. We do not use marketing cookies, advertising pixels, retargeting, or any third-party tracker beyond Google Analytics. Embedded YouTube videos on certain pages may set their own cookies when you press play; you control playback.
11. Children
This site is not directed at children under 16. We do not knowingly collect personal data from minors. If you believe a child has submitted data, please contact us and we will delete it.
12. Changes to this policy
We may update this Privacy Policy periodically. The effective date at the top reflects the current version. Material changes will be highlighted on the site for at least 30 days before they take effect.
13. Contact
For any privacy questions or to exercise your rights, contact us at info@designzone.com.sa or by post at Design Zone Group, Jeddah, Saudi Arabia.
For questions about this privacy policy, contact info@designzone.com.sa.