Privacy Policy

Learn how we collect, use, and protect your personal data in compliance with Saudi PDPL and GDPR.

Last updated: May 8, 2026

This Privacy Policy explains how How to Saudi Arabia ("we," "our," or "us") collects, uses, and protects your information when you use our website howtosaudiarabia.com (the "Service").

1. Information We Collect

1.1 Analytics Data

We use the following analytics services to understand website usage:

Simple Analytics: A privacy-first analytics service that collects only anonymized, aggregated data including page views and general traffic patterns. No personal information, cookies, or user tracking is involved. Privacy Policy: simpleanalytics.com/privacy.

Google Analytics (GA4): We use Google Analytics, which collects data about your website usage through cookies and similar technologies. This may include your IP address (anonymized), browser type, device information, pages visited, time spent on pages, and referral sources. Google may transfer and process this data on servers located outside Saudi Arabia, including the United States. Google Analytics uses cookies such as _ga and _ga_* (expiring after up to 2 years) to identify unique users across browsing sessions. For more information, see Google's Privacy Policy. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

GetYourGuide: We use GetYourGuide widgets and analytics on certain pages to display tours and activities. GetYourGuide may collect usage data and set cookies when you interact with their embedded content. Privacy Policy: getyourguide.com/privacy_policy.

1.2 Calculator Data

All calculations (tax, salary, cost of living, mortgage) are performed locally in your browser. We do not receive, store, or have access to any of your financial information or calculation results.

1.3 Contact Form (Tally.so)

Our contact page uses a form hosted by Tally.so, a third-party form service. When you submit the contact form, your data is collected and processed by Tally.so and delivered to us. This may include your name, email address, and the content of your message. Tally.so may store this data on servers located in the European Union. Privacy Policy: tally.so/help/privacy-policy.

1.4 Inquiry Forms (Web3Forms)

Some pages contain inquiry forms (such as requests for immigration legal assistance, job search help, or relocation support) processed through Web3Forms, a third-party form handling service. When you submit a form, your data is transmitted to Web3Forms servers and forwarded to us via email. This may include:

Full name
Email address
Phone number (if provided)
Location information (current city/country, target city)
Details about your inquiry (case type, industry, service needed, timeline)
Any additional information you include in free-text fields

This data is collected only when you actively submit a form and give your explicit consent. Privacy Policy: web3forms.com/privacy.

2. Legal Basis for Processing

We process data based on the following legal grounds under the Saudi Personal Data Protection Law (PDPL) and, for users in the European Economic Area, the General Data Protection Regulation (GDPR):

Legitimate interest (Article 6(1)(f) GDPR / Article 5 PDPL): For anonymized analytics data (Simple Analytics) to improve our website.
Consent (Article 6(1)(a) GDPR / Article 6 PDPL): For personal data submitted through our contact and inquiry forms. You provide explicit consent by submitting a form. You may withdraw your consent at any time by contacting us at hello@howtosaudiarabia.com.
Consent (Article 6(1)(a) GDPR / Article 6 PDPL): For analytics data collected by Google Analytics through cookies. By continuing to use our website without opting out, you consent to the use of these analytics cookies.

3. How We Use Your Information

We use the collected information to:

Provide and maintain our Service
Improve our website content and user experience
Analyze website traffic and usage patterns
Respond to your inquiries submitted through our forms
Connect you with relevant service providers (immigration lawyers, recruitment agencies, relocation specialists) when you request this through our forms
Ensure website security and prevent abuse
Comply with legal obligations

4. Data Sharing and Third Parties

4.1 Service Provider Matching

When you submit an inquiry form requesting assistance with immigration, employment, or relocation, we may share the information you provided with third-party service providers (such as immigration lawyers, recruitment agencies, or relocation specialists) for the purpose of fulfilling your request. We will only share your data:

With your explicit consent (given when submitting the form)
With providers we consider relevant to your inquiry
Limited to the information necessary to address your request

You can request deletion of your data or withdrawal of consent at any time by emailing hello@howtosaudiarabia.com.

4.2 Affiliate Links

Our website contains affiliate links to third-party services (banks, insurance, SIM cards, and others). When you click these links:

You are redirected to the third party's website
Their privacy policy applies from that point
We may receive a commission (at no cost to you)
We do not share your personal data with affiliates

5. Cookies and Tracking

Our website uses the following types of cookies:

Essential cookies: Strictly necessary cookies required for basic website functionality. These do not collect personal information.
Analytics cookies (Google Analytics): Used to collect anonymized data about how visitors use our website, including page views, session duration, and browsing patterns. Cookies include _ga and _ga_*, which expire after up to 2 years.
Third-party cookies (GetYourGuide): May be set when you interact with embedded GetYourGuide widgets on certain pages.
Third-party cookies (Tally.so): May be set when you interact with the embedded contact form.

Simple Analytics does not use cookies. You can manage or delete cookies through your browser settings. Disabling analytics cookies will not affect your ability to use our website. To specifically opt out of Google Analytics, you can install the Google Analytics Opt-out Browser Add-on.

6. Data Retention

Simple Analytics data: Retained by Simple Analytics for 26 months in anonymized form.
Google Analytics data: Retained by Google Analytics for 14 months. You can request deletion of your data through Google's tools or by contacting us.
Form submission data (Web3Forms): Retained in our email system for up to 12 months, or until you request deletion. Data processed by Web3Forms is subject to their retention policy.
Contact form data (Tally.so): Retained by Tally.so according to their retention policy and in our email system for up to 12 months, or until you request deletion.

7. Your Rights Under PDPL and GDPR

Under the Saudi Personal Data Protection Law (PDPL) and, for users in the European Economic Area, the GDPR, you have the following rights:

Right of Access: Request information about your personal data we hold and how it is processed.
Right to Rectification: Correct inaccurate or incomplete personal data.
Right to Erasure: Request deletion of your personal data when it is no longer necessary for the purpose it was collected.
Right to Restrict Processing: Limit how we process your data in certain circumstances.
Right to Data Portability: Receive your data in a structured, commonly used format.
Right to Object: Object to processing based on legitimate interests.
Right to Withdraw Consent: Withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at hello@howtosaudiarabia.com. We will respond within 30 days.

8. International Data Transfers

Some of the third-party services we use may process data outside of Saudi Arabia. Simple Analytics processes data within the European Union. Google Analytics may transfer data to servers in the United States. Tally.so processes data within the European Union. GetYourGuide may process data outside Saudi Arabia. Such international transfers are conducted with appropriate safeguards in place, including Standard Contractual Clauses and compliance with the PDPL requirements for cross-border data transfers (Article 29 PDPL).

9. Data Security

We implement appropriate security measures including:

HTTPS encryption for all data transmission
Regular security updates and monitoring
Limited access to personal data
Secure hosting infrastructure

10. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately.

11. Supervisory Authority

If you believe we have not handled your personal data in accordance with the PDPL, you have the right to lodge a complaint with the Saudi National Data Management Office (NDMO) under the Saudi Data and Artificial Intelligence Authority (SDAIA). Website: ndmo.gov.sa.

For users in the European Economic Area, you may also lodge a complaint with your local data protection authority under the GDPR.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Changes are effective immediately upon posting.

13. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at hello@howtosaudiarabia.com.