Privacy notice
How SYNFRA collects, uses and protects personal data on synfra.sa, in line with the Personal Data Protection Law of the Kingdom of Saudi Arabia.
Last updated: 16 October 2026
Who we are
The controller of personal data collected through this website is SynFra Company Commercial (CR 7054826933), Building 8884, Airport Street, Sedra District, Riyadh 13413, Kingdom of Saudi Arabia — privacy@synfra.sa. Questions about this notice or your rights can be sent to that address.
What we collect
Information you give us when you request a site assessment or contact us: name, company, phone number, email address, the topic and sector you select, and anything you write in the message field.
Technical information about your visit: IP address, browser and device type, pages viewed, the page you arrived from, and campaign parameters (UTM, gclid, fbclid) when you reach us from an advertisement.
Cookie-based identifiers from analytics and advertising tools, only if you accept them in the cookie banner (see the cookie policy).
Why we use it and on what basis
To answer your enquiry, arrange the site visit and prepare a proposal — necessary for the steps you asked us to take before a contract.
To contact you about SYNFRA services after your enquiry — only with the consent you give on the form, which you can withdraw at any time.
To measure which campaigns and pages lead to enquiries and to improve the site — our legitimate interest in running an effective business, with advertising cookies set only with your consent.
To keep the site secure and to meet legal obligations.
Who receives it
Our staff and representatives who handle enquiries, under confidentiality obligations.
Service providers that host the site and database in the Kingdom and the infrastructure provider of our servers.
If you accept advertising or analytics cookies: Meta Platforms (Facebook, Instagram), Google (Analytics, Ads), TikTok and Snap. These providers process data on servers outside the Kingdom; the transfer is made under the conditions set out in the PDPL and its regulations, and only with your consent.
When you request it, we send conversion signals (a hashed version of your phone number or email, never the message text) to the advertising platform that brought you to us, so that advertising spend can be measured. This does not happen if you decline advertising cookies.
Public authorities where the law requires it.
How long we keep it
Enquiry records are kept for 24 months after the last contact, or for the duration of a contract and the statutory retention period that follows it.
Server logs are kept for 90 days. Cookie lifetimes are listed in the cookie policy.
Your rights
Under the PDPL you may ask to be informed about the processing, to access and receive a copy of your data, to correct or complete it, to have it destroyed when it is no longer needed, and to withdraw consent for processing based on consent.
Send requests to privacy@synfra.sa. We answer within the period set by the Implementing Regulations and may ask you to confirm your identity. You may also complain to the competent authority, the Saudi Data & AI Authority (SDAIA).
Security
Data is transmitted over encrypted connections and stored on access-controlled servers. Access is limited to people who need it to handle your enquiry.
Children
This site is intended for businesses and is not directed at children under 18. We do not knowingly collect their data.
Changes
We will publish any change to this notice on this page with a new date.