Privacy Policy

Who we are

This website is operated by Growth Theory Company for Business Solutions, trading as Leads, a marketing and lead generation agency registered in the Kingdom of Saudi Arabia under commercial registration number 2051249132, with its registered address at Building 7984, Feras Ibn Al Nadr Street, Al Olaya District, Al Khobar 34447, Kingdom of Saudi Arabia.

For the purposes of the Saudi Personal Data Protection Law, we are the data controller for the personal data described in this policy. If you have any question about how we handle your data, write to info@leads.sa and mark your message for the attention of the person responsible for data protection.

What personal data we collect

We collect only what we need to answer your enquiry and deliver work you have asked us to do.

When you submit the contact form, we collect your name, your company name, your email address, your phone number and whatever you write in the message field. Every field on that form is required, because we cannot scope a piece of work or reply usefully without them.

When you email, call or message us on WhatsApp, we hold the contact details you use and the content of the conversation. WhatsApp conversations are also processed by Meta under its own terms, which we do not control.

When you simply browse the site, our hosting provider records standard technical information such as your IP address, browser type and the pages you visited. Our bot protection service also inspects your IP address and browser characteristics to tell a person apart from an automated script.

We do not run advertising trackers or analytics profiling on this site, and we do not buy personal data from third parties.

Why we collect it, and on what basis

• To respond to your enquiry. Basis: your consent, given when you submit the form or contact us.
• To provide services you have engaged us for. Basis: performance of a contract with you.
• To keep the website secure and available. Basis: our legitimate interest in preventing abuse and fraud.
• To meet accounting, tax and regulatory obligations. Basis: compliance with Saudi law.

We do not use your data to build marketing profiles, and we do not send marketing email to people who have only made an enquiry unless they have separately asked to hear from us.

Cookies and similar technologies

This site uses a small number of strictly necessary cookies set by our website platform. They keep forms working, remember your language preference and help prevent abuse. They do not track you across other websites.

We do not currently use advertising or analytics cookies. If that changes, this policy will be updated and consent will be requested before any non-essential cookie is set.

The site loads fonts from Google’s font service and uses Cloudflare for bot protection. Both receive your IP address as a technical necessity of serving those resources.

Who we share it with

We do not sell personal data. We share it only with service providers who help us run the business, and only to the extent they need it:

• Our website hosting and form platform, which stores form submissions
• Our email and business productivity provider
• Our bot protection and content delivery provider
• Professional advisers and auditors, where required

We may also disclose personal data where we are legally required to do so by a competent Saudi authority.

Where your data is stored

Some of the providers above operate servers outside the Kingdom of Saudi Arabia. Where personal data is transferred outside the Kingdom, we do so on the bases permitted by the Personal Data Protection Law and its implementing regulations, and we take reasonable steps to satisfy ourselves that the recipient applies protection consistent with Saudi requirements.

How long we keep it

Enquiries that do not lead to an engagement are kept for 24 months and then deleted. Records relating to a client engagement are kept for as long as the engagement continues, and afterwards for the period required by Saudi accounting and tax law. Technical logs are kept for a short operational period and then overwritten.

Your rights

Under the Personal Data Protection Law you have the right to:

• Be informed about how and why your personal data is processed
• Request access to your personal data in a readable format
• Request correction of data that is inaccurate, incomplete or out of date
• Request destruction of your personal data where it is no longer needed or where you withdraw consent
• Withdraw consent at any time, without affecting processing that already took place
• Object to your data being used for direct marketing

To exercise any of these, email info@leads.sa. We will respond within thirty days, as the law requires, and we keep a record of every request we receive.

If you are not satisfied with how we have handled your request, you may complain to the Saudi Data and Artificial Intelligence Authority, which supervises compliance with the Personal Data Protection Law.

Security

We restrict access to personal data to the people who need it to do their job, use reputable providers with their own security controls, and keep the number of systems holding personal data deliberately small. No system is perfectly secure, but if a breach occurs that affects your personal data we will notify the supervisory authority and, where the law requires it, you, without undue delay.

Changes to this policy

If we change how we handle personal data, we will update this page and change the date at the top. Where a change is significant, we will make that clear rather than relying on you to notice.

Contact

Questions, requests or complaints about personal data: info@leads.sa, or call +966 50 704 9997.