Legal

Privacy policy

Last updated: [DATE]

The Arabic version of this policy is the authoritative version. Where the English and Arabic differ, the Arabic prevails.

[LEGAL-ENTITY-EN] (Commercial Registration [CR-NUMBER]), "RANCO", "we", "us", operates ranco.com.sa. This policy explains what personal data we collect, why, and your rights under the Saudi Personal Data Protection Law (PDPL). We are the data controller. Contact: shakeel@ranco.com.sa, Building 3883, Omar Bin Al Khattab Street 7163, [DISTRICT-EN], Saihat 32471, Kingdom of Saudi Arabia.

What we collect

When you contact us: the name, company, role, email, phone, location, dates and message you submit through our enquiry or capability-statement request forms, or that you send us by email or WhatsApp. Name and either an email address or a phone number are required so that we can reply; every other field is optional.

Automatically: basic technical and usage data such as IP address, device and browser type, and the pages you viewed, collected by our privacy-friendly, cookieless analytics. We do not set advertising or tracking cookies.

Why, and our legal basis

To respond to your enquiry, and to send you documents you ask for — our legitimate interest in replying to people who contact us about our services.

To provide the services you ask for — performance of a contract, or steps taken at your request before entering into one.

To keep the website working and useful — our legitimate interest in measuring and improving the site.

Who we share it with

We use service providers who process data on our behalf under contract: Cloudflare (website hosting, content delivery and cookieless analytics), Microsoft 365 (our email), and WhatsApp / Meta if you choose to contact us that way. We do not sell your personal data and we do not share it for advertising.

Transfers outside the Kingdom

Some of these providers process data outside Saudi Arabia. Where personal data is transferred outside the Kingdom, we do so in accordance with the PDPL and its implementing regulations, and only with providers who apply appropriate safeguards.

How long we keep it

Enquiries and document requests: [RETENTION-ENQUIRIES, default 24 months] from your last contact with us, unless you ask us to delete them sooner or we need them for an ongoing contract. Analytics: [RETENTION-ANALYTICS, default 12 months].

Your rights

Under the PDPL you have the right to be informed, to access your personal data, to request a copy of it in a readable format, to have it corrected, and to request its destruction where the law allows. Where we rely on your consent, you can withdraw it at any time. Email shakeel@ranco.com.sa and we will respond within 30 days.

Complaints

If you are not satisfied with how we handle your personal data, you can complain to the Saudi Data & AI Authority (SDAIA), the supervisory authority for personal data in the Kingdom.

Cookies

This website does not set advertising or tracking cookies, and our analytics are cookieless — so there is no cookie banner. Only cookies strictly necessary for the site to work may be set.

Automated decision-making

We do not carry out automated decision-making or profiling.

Changes to this policy

We update this policy when our practices change. The date at the top shows when it was last revised.