Privacy Policy
This policy is prepared in compliance with the Saudi Arabia Personal Data Protection Law (PDPL) issued by Royal Decree No. M/19 and its Implementing Regulations.
1. Who We Are
Founders Zone is a premium serviced office and flexible workspace operated by Absher Group, located in Riyadh, Saudi Arabia.
- Website: www.founders-zone.com
- Email: [email protected]
- Phone / WhatsApp: +966 53 976 3908
- Address: Riyadh, Saudi Arabia
Founders Zone is the data controller responsible for personal data collected through this website.
2. What Personal Data We Collect
We collect the following personal data when you contact us through the website contact form:
| Data Type | Examples | Source |
|---|---|---|
| Full name | Your name as entered in the form | Contact form |
| Email address | Your business or personal email | Contact form |
| Phone number | Your mobile or office number | Contact form (optional) |
| Company name | Your company or trade name | Contact form (optional) |
| Enquiry details | Service interest, preferred move-in date, message | Contact form |
| Technical data | IP address, submission timestamp | Automatic (form processing) |
We do not collect sensitive personal data (as defined by PDPL Article 23), financial data, or government identity numbers through this website.
3. Purpose and Legal Basis
We process your personal data for the following purposes:
- Responding to your enquiry — to answer your questions and provide information about our services.
- Service provision — to process your interest in booking a workspace or tour.
- Security and fraud prevention — to log IP addresses and prevent abuse of the contact form.
The legal basis for processing is: performance of a contract or pre-contractual steps (responding to your service enquiry), and legitimate interests (security and fraud prevention).
4. How We Use Your Data
Your personal data is used only for the purposes listed above. Specifically:
- Your enquiry is delivered by email to the Founders Zone team.
- A copy is sent to Absher Group's management for follow-up.
- Your data is logged in a secure server-side file for operational records.
- We do not use your data for unsolicited marketing unless you explicitly request to receive communications.
5. Data Sharing
We do not sell your personal data to third parties. Your data may be shared with:
- Absher Group — our parent company, for internal coordination and follow-up on workspace enquiries.
- Email service provider — your enquiry is transmitted via Hostinger's email infrastructure to deliver it to our team.
- Regulatory authorities — if required by law or a valid legal order in Saudi Arabia.
6. Data Retention
We retain your personal data for the following periods:
| Data Type | Retention Period | Reason |
|---|---|---|
| Contact form submissions (email) | 2 years | Standard business communication retention |
| Server logs (IP + timestamp) | 90 days | Security monitoring |
| Session data (CSRF tokens) | Session only (browser close) | Technical requirement for form security |
After these periods, your data is permanently deleted.
7. Your Rights Under Saudi PDPL
Under Saudi Arabia's Personal Data Protection Law, you have the following rights regarding your personal data:
- Right to access — you may request a copy of the personal data we hold about you.
- Right to correction — you may request that inaccurate data be corrected.
- Right to deletion — you may request that your personal data be deleted, subject to our legal retention requirements.
- Right to restrict processing — you may request that we stop using your data for certain purposes.
To exercise any of these rights, please contact us at: [email protected]
We will respond to your request within 30 days.
8. Cookies
This website uses only a single session cookie (PHPSESSID) which is required for the contact form to function securely. This cookie:
- Contains no personal information — only a randomly generated security token.
- Is deleted automatically when you close your browser.
- Is required for submitting the contact form (prevents automated submissions).
We do not use advertising cookies, tracking pixels, or analytics cookies at this time. If analytics are added in future, this policy will be updated.
9. Data Security
We protect your personal data using the following measures:
- HTTPS encryption for all data in transit (SSL/TLS certificate).
- Server-side security controls including rate limiting and input validation.
- Restricted file permissions on server-stored data.
- No data stored in publicly accessible databases on this website.
While we take commercially reasonable measures to protect your data, no internet transmission is 100% secure. If you believe your data has been compromised, please contact us immediately.
10. Cross-Border Data Transfers
Your data is processed and stored on servers located outside Saudi Arabia (Hostinger VPS, Mumbai, India). These transfers are made for the purposes of operating this website and delivering your enquiry to our team. We ensure that appropriate safeguards are in place in accordance with PDPL requirements.
11. Children's Data
This website is intended for business professionals and adults. We do not knowingly collect personal data from persons under 18 years of age. If we become aware that we have inadvertently received data from a minor, we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the policy was last revised. Continued use of this website following any changes constitutes acceptance of the updated policy.
13. Contact Us
For any privacy-related questions, data access requests, or concerns:
- Email: [email protected]
- Phone: +966 53 976 3908
- Address: Founders Zone, Riyadh, Saudi Arabia
We aim to respond within 30 days of receiving your request.