At iFact, we value your privacy and are committed to protecting your personal data. This Privacy Policy explains how iFact collects, uses, processes, stores, and protects personal data when you visit our website, contact us, or use our services.

This Privacy Policy is designed in accordance with the applicable laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL) and its Implementing Regulations.

1. About iFact

iFact is a Saudi Arabia-based technology and business solutions company providing IT, cybersecurity, digital transformation, digital marketing, and other technology-enabled services.

For purposes of applicable data protection laws, iFact may act as the Controller of personal data collected through its website and business interactions.

2. Personal Data We Collect

Depending on how you interact with iFact, we may collect:

• Name
• Company or organization name
• Job title or position
• Email address
• Phone or mobile number
• Business requirements and inquiry details
• Information submitted through website forms
• Communications exchanged with iFact
• Technical information such as IP address, browser, device, and website usage information
• Any other information you voluntarily provide to us

We aim to collect only the personal data necessary for the relevant purpose.

3. How We Collect Personal Data

We may collect personal data when you:

• Visit or use our website
• Submit an inquiry or contact form
• Request a quotation or proposal
• Contact us by email, phone, WhatsApp, or other communication channels
• Request information about our services
• Communicate with our team for business purposes
• Interact with our website, digital platforms, or online content

Certain technical information may also be collected automatically through cookies and similar technologies.

4. Purposes of Processing

iFact may process your personal data to:

• Respond to inquiries and requests
• Provide information about our services
• Prepare quotations, proposals, and business documents
• Communicate with customers and potential customers
• Deliver and manage our services
• Understand and respond to business requirements
• Improve our website, services, and customer experience
• Maintain website and information security
• Detect and prevent unauthorized activity or misuse
• Meet applicable legal and regulatory obligations
• Conduct marketing activities where legally permitted

We will process personal data only for legitimate and specified purposes and in accordance with applicable Saudi laws and regulations.

5. Legal Basis for Processing

Where required under applicable law, iFact will process personal data based on an appropriate legal basis, which may include:

• Consent of the data subject
• Fulfillment of a contractual relationship or steps taken at the request of the data subject
• Compliance with a legal obligation
• Legitimate interests where permitted by applicable law
• Other lawful grounds provided under the PDPL and its Implementing Regulations

Where processing is based on consent, you may withdraw your consent subject to applicable legal requirements.

6. Cookies

Our website may use cookies and similar technologies to:

• Enable essential website functionality
• Understand website traffic and usage
• Improve website performance
• Enhance user experience
• Support security and analytics
• Support marketing activities where applicable

You may manage or disable cookies through your browser settings. Certain website functions may not operate properly if essential cookies are disabled.

7. Sharing and Disclosure of Personal Data

iFact may disclose personal data when necessary to:

• Authorized iFact employees and representatives
• Service providers and technology partners working on our behalf
• Professional advisors and consultants
• Government authorities or regulatory bodies where required by law
• Other parties where disclosure is legally permitted or necessary for a lawful purpose

iFact takes reasonable measures to ensure that third parties processing personal data on our behalf maintain appropriate safeguards and process the data only for authorized purposes.

8. Personal Data Transfers Outside the Kingdom

If personal data is transferred or processed outside the Kingdom of Saudi Arabia, iFact will comply with the applicable requirements governing transfers of personal data outside the Kingdom, including applicable safeguards and conditions under Saudi data protection regulations.

9. Data Storage and Retention

iFact retains personal data only for as long as necessary to fulfill the purposes for which it was collected, meet legal and regulatory requirements, resolve disputes, and protect our legitimate business interests.

When personal data is no longer required, iFact will take appropriate measures to securely delete, destroy, anonymize, or otherwise dispose of the data in accordance with applicable requirements.

10. Data Security

iFact implements reasonable technical, organizational, and administrative measures designed to protect personal data against:

• Unauthorized access
• Unauthorized disclosure
• Loss or destruction
• Alteration or misuse
• Other unlawful or unauthorized processing

While we take reasonable precautions to protect personal data, no electronic system or method of transmission can be guaranteed to be completely secure.

11. Data Subject Rights

Subject to the applicable provisions of Saudi law, data subjects may have rights including:

• The right to be informed about the collection and processing of their personal data
• The right to access their personal data
• The right to request correction or completion of inaccurate personal data
• The right to request deletion or destruction of personal data where legally applicable
• The right to withdraw consent where processing is based on consent
• Other rights provided under the PDPL and its Implementing Regulations

To exercise an applicable right, you may contact iFact using the contact details provided below.

12. External Links

Our website may contain links to third-party websites, applications, or services.

iFact does not control the privacy practices of third parties and is not responsible for their privacy policies or practices. We recommend reviewing the privacy policy of any third-party service you visit.

13. Children’s Data

Our website and services are primarily intended for businesses, organizations, and professional users. iFact does not knowingly collect personal data from children in circumstances where such collection is prohibited by applicable law.

14. Changes to This Privacy Policy

iFact may update this Privacy Policy from time to time to reflect changes in our services, technology, business practices, or applicable laws and regulations.

Any updated version will be published on this page with a revised Last Updated date. Where required, we will provide appropriate notice of material changes.

15. Contact Us

For questions regarding this Privacy Policy or to exercise your applicable data protection rights, please contact us:

iFact
Kingdom of Saudi Arabia
Email: [email protected]
Phone: +966 920008227
Website: www.iFact.sa

We will review and respond to privacy-related requests in accordance with applicable laws and regulations.

16. Applicable Law

This Privacy Policy shall be interpreted and applied in accordance with the applicable laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL) and its Implementing Regulations.

Last Updated: 24 August 2026