SB Consulting (“SB Consulting”, “we”, “us”) is an independent financial and investment advisory firm based in Jeddah, Kingdom of Saudi Arabia. We process personal data in accordance with the Personal Data Protection Law issued by Royal Decree No. (M/19) and its Implementing Regulations (the “PDPL”). This policy applies to our website and to the enquiries and engagements that begin through it.
01Data we collect
We collect only the personal data needed to respond to you and to deliver our services:
- Contact details you provide, such as your name, organisation, job title, email address, and telephone number.
- The content of your enquiry and any documents or information you choose to share with us.
- Engagement information, including correspondence, meeting notes, and data needed to complete client due diligence.
- Basic technical data generated when you visit the website, such as browser type, device, approximate location derived from IP address, and pages viewed.
02How we use your data
We use personal data to:
- Respond to enquiries and arrange confidential discussions.
- Scope, deliver, and administer advisory engagements.
- Meet our legal, regulatory, and professional obligations, including record keeping and anti-money-laundering checks where applicable.
- Maintain the security and performance of our website.
We process personal data on the basis of your consent, the performance of a contract with you or your organisation, compliance with a legal obligation, or our legitimate interests where these do not override your rights. We do not sell personal data and we do not use it for unsolicited marketing.
03Confidentiality
Client and transaction information is treated as strictly confidential. Access is limited to the team members working on the matter, and information is never disclosed to third parties except as described in this policy, with your permission, or where required by law.
04Sharing your data
We may share personal data, only to the extent necessary, with:
- Trusted service providers who host our website, email, and document systems, bound by confidentiality and data protection obligations.
- Professional advisers, such as legal counsel and auditors, where required for an engagement.
- Competent government, regulatory, or judicial authorities where required by law.
Where personal data is transferred outside the Kingdom, we do so only in accordance with the PDPL and its regulations on cross-border transfers, and with appropriate safeguards in place.
05Retention
We keep personal data only for as long as needed for the purpose it was collected, or for longer where a law or professional obligation requires it. Enquiries that do not result in an engagement are deleted or anonymised once they are no longer needed.
06Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure, including access controls, encrypted communications, and confidentiality undertakings from our team.
07Cookies and analytics
The website uses only cookies and similar technologies that are necessary for it to function and to remember your language preference. If we introduce analytics or other non-essential cookies, we will update this policy and request your consent where required.
08Your rights
Subject to the PDPL, you have the right to:
- Be informed about how your personal data is collected and processed.
- Access and obtain a copy of your personal data.
- Request correction, completion, or updating of your personal data.
- Request destruction of personal data that is no longer needed.
- Withdraw your consent at any time, where processing is based on consent.
To exercise any of these rights, contact us at sindi@sbconsulting.sa. You may also lodge a complaint with the Saudi Data & AI Authority (SDAIA).
09Changes to this policy
We may update this policy from time to time. The latest version will always be published on this page with its effective date.
Questions about this policy or about your personal data can be sent to sindi@sbconsulting.sa, or by post to SB Consulting, Jeddah, Kingdom of Saudi Arabia.
