If you are resident in the European Economic Area ("EEA") / United Kingdom ("UK"), we will comply with the EU and UK General Data Protection Regulations ("GDPR", as applicable) and/or other applicable data protection and privacy laws in the EEA or UK. For the purposes of the GDPR on the Website, we are a data "Controller" and you are a "Data Subject" with certain protected privacy rights concerning your "Personal Data."
"Personal Data" in this Privacy Policy means any information relating to you as an identified or identifiable natural person that can be directly or indirectly related to you. Personal Data generally may include your name, email address, ID number, location data, household information, online ID, and factors specific to your physical, physiological, genetic, mental, economic, cultural or social identity. Your Personal Data may identify you as a person, and thus is often referred to as Personally Identifiable Information ("PII") or Personal Information ("PI"). Both PII and PI are included in the term "Personal Data" as used in this Privacy Policy.
1. Who Collects Your Information On Our Website?
If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact our IT officer by emailing it@sadasol.com.
2. What Information Do We Collect?
A. Requested Information
We do not collect any Special Category Data (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data) as defined in the GDPR. Nor do we collect any information about criminal convictions and offenses.
B. Scheduling Information (Calendly)
Please review Calendly’s Privacy Policy → calendly.com/legal/privacy-notice
C. AI Product Usage Data
• Pseudonymous account/profile IDs (where applicable);
• Inputs, queries, or interactions with our AI services;
• Learning activity or system usage logs (timestamps, session duration, error reports);
• Feedback, labels, or other information you provide to help improve our AI systems;
• System performance analytics.
We design our AI systems to minimize the use of directly identifying Personal Data wherever possible.
The types of Personal Data we collect and save include:
- •Contact information such as name, email address, phone number, city, country, organization, and role;
- •Client engagement and scheduling information, including project/service inquiries, consultation bookings (through Calendly), and related correspondence;
- •Billing and payment metadata, such as invoicing details and transaction confirmations from our payment service provider (we do not store full card details);
- •Marketing and communications data, including your preferences for receiving updates from us and your communication settings;
- •Information you provide such as feedback, comments, or other messages;
- •AI product usage data (if applicable), including pseudonymous account/profile IDs, queries, inputs, feedback, and system performance logs;
- •Technical and usage data collected in our logs, such as IP address, browser type, plug-in versions, device identifiers, operating system, visited page URLs, and timestamps. If we use analytics or other non-essential cookies in the future, we will first seek your consent.
Aggregate Information: We may also collect anonymous, non-identifying and aggregate information such as the type of browser you are using, device type, the operating system you are using, and the domain name of your Internet service provider. Aggregated data may be derived from your Personal Data, but is not itself Personal Data and it cannot be used, either on its own or together with other data, to directly or indirectly reveal your identity.
3. Why Is My Personal Data Being Collected?
Further details on why your Personal Data is being collected and our legal basis for doing so under GDPR (for EEA/UK residents) are provided in Section 15, below.
4. How Do We Use the Information We Collect?
- •Responding To Your Inquiries, Feedback and Fulfilling Your Requests. We may use your Personal Data to respond to your inquiries and feedback, and to fulfil your requests for information.
- •Providing and managing our Services. To configure accounts, deliver consultancy or AI solutions, and manage client projects.
- •Communicating With You About Our Services. We may use your Personal Data to send you marketing information about new services or the Services and other items that may be of interest to you.
- •Sending Administrative Emails. We may use your Personal Data to send you emails to: (a) confirm your Personal Data, (b) process your transactions to purchase our Services, (c) provide you with information regarding the Website, (d) process payments to you for the third-party use of your content, and (e) inform you of changes to this Privacy Policy, our Terms of Service, or our other policies.
We may use anonymous aggregated information that we collect to improve the design and content of our Website, and to enable us to personalize your Internet experience. We also may use this anonymous aggregated information to analyze how our Website is used, analyze industry trends, as well as to enable us to offer new programs or services.
5. What Are Your Choices Regarding Our Marketing Materials?
7. What Categories of Personal Data Do We Share?
8. Are There Other Ways My Personal Data Could Be Shared?
9. How Can You Access and Control Your Information?
10. How Do We Store and Protect Your Information?
B. Unfortunately, no data transmission over the Internet or data storage solution can ever be completely secure. As a result, although we take industry-standard steps to protect your information (e.g., strong encryption), we cannot ensure or warrant the security of any information you transmit to or receive from us or that we store on our or our service providers' systems.
C. If you are visiting the Website from outside of the USA, you understand that your connection will be through and to servers located in the USA, and the information you provide will be securely stored in our web servers and internal systems located within the USA.
D. For EEA/UK citizens: Whenever we transfer your Personal Data outside of the EEA or UK, we ensure a degree of protection is afforded to it that is similar to that of the EEA or UK by ensuring at least one of the following safeguards is implemented:
• We will only transfer your Personal Data to countries that have been deemed to provide an adequate level of protection for Personal Data under the EEA/UK; and
• Where we use certain service providers, we may use specific contracts approved under EEA or UK laws which give Personal Data the same protection it has in EEA or UK.
E. We will only retain your Personal Data for as long as is reasonably necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your Personal Data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
F. We store our logs and other technical records indefinitely (or where they contain personal data, for as long as we have a legitimate reason to keep that information in light of the purpose for which it was provided).
G. Third Party Tools. Our Website uses the following third party tools: Calendly and Meta Developers.
12. Collection of Information by Others
13. Children and Young People’s Information
14. For EEA/UK Residents – Your Legal Rights
Your GDPR Rights
If you are an EEA/UK resident, under the data protection laws that apply to you, you may contact us at contact@sadasol.com to exercise your rights to:
15. Purposes / Legal Basis For Which We Will Use Your Personal Data
| Purpose/Activity | Type of Personal Data | Lawful basis for processing |
|---|---|---|
| Respond to inquiries, schedule meetings or consultations (e.g., via Calendly) | Name, email, time zone, notes from consultation request forms | Performance of a contract Necessary for our legitimate interests (to provide services to our clients) |
| To process and deliver your order for our Services including: AI/data solutions and cloud consulting | Contact and organizational details, project requirements, technical usage data (pseudonymous if applicable) | Performance of a contract Necessary for our legitimate interests |
| To manage our relationship with you which will include: (a) Notifying you about changes to our terms or Privacy Policy (b) Asking you to provide feedback | Name, username, email address and transaction history | Performance of a contract Necessary to comply with a legal obligation Necessary for our legitimate interests (to keep our records updated and to study how our products/services are used) |
| Billing, invoicing, and payment processing | Invoicing details, confirmation from payment service provider (no card data stored) | Performance of a contract Necessary for our legitimate interests |
| To deal with any inquiries, correspondence, concerns or complaints you have raised | Name, username, email address, and information about the issue raised | Legitimate interests (to allow us to respond and deal with any queries, correspondence, concerns or complaints raised by you) |
| To administer and protect our business and the Website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) | Name, username, email address, standard web log entries that contain your IP address, page URL, browser plug-in types and versions, device information and identifier, operating system information, and timestamp | Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) Necessary to comply with a legal obligation |
| To update you on services, product enhancements, case studies, or events (marketing communications) | Name, username, email address, standard web log entries that contain your IP address, page URL, browser plug-in types and versions, device information and identifier, operating system information, and timestamp | Consent, when required Necessary for our legitimate interests in providing our website and promoting our business |
| To use data analytics to improve our Website, products/services, marketing, customer relationships and experiences | Name, username, email address, standard web log entries that contain your IP address, page URL, browser plug-in types and versions, device information and identifier, operating system information, and timestamp | Necessary for our legitimate interests (to define types of customers for our products and services, to keep our Website updated and relevant, to develop our business and to inform our marketing strategy) |
| To make suggestions and recommendations to you about products or Services that may be of interest to you | Your name and email address | Consent, when required Necessary for our legitimate interests in providing our website and promoting our business |
16. Changes to this Policy
17. General Provisions
• The User acknowledges that they have read, understood, and agreed to this Privacy Policy.
• This Privacy Policy is available in two languages, Arabic and English, and each constitutes a legally binding document. In the event of any conflict in the interpretation of any provision between the two languages, the English document shall prevail.
18. Our Contact Information
We are Here to Help
Questions about this Privacy Policy?
Contact our Data Protection Officer: