Privacy Policy

1. Introduction

RM Consultancy ("RMC", "we", "us", or "our") is a government-aligned strategic advisory firm specializing in market entry, industrial enablement, incentives advisory, and regulatory navigation in the Kingdom of Saudi Arabia, in line with Saudi Vision 2030.

This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your personal data when you visit our website, contact us, request a consultation, or otherwise engage with our services. We are committed to handling your data responsibly and in accordance with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations, as overseen by the Saudi Data and Artificial Intelligence Authority (SDAIA).

2. Information We Collect

We collect personal data in the following ways:

• Information you provide directly — such as your name, position or job title, company name, email address, phone number, and any details you include in an inquiry, consultation request, or other correspondence.
• Engagement information — the nature of your inquiry, the services you are interested in, consultation type, and preferred dates or times.
• Information collected automatically — when you visit our website we may collect technical data such as your IP address, browser type, device information, pages viewed, and the date and time of your visit, through cookies and similar technologies.

3. How We Use Your Information

We use the personal data we collect to:

• Respond to your inquiries and communicate with you about your request.
• Schedule, prepare for, and deliver consultations and advisory services.
• Provide, operate, maintain, and improve our services and website.
• Understand how our website is used so we can enhance its performance and user experience.
• Comply with applicable legal, regulatory, and governmental requirements.
• Protect the security and integrity of our operations, and prevent fraud or misuse.

4. Legal Basis for Processing

We process your personal data only where we have a lawful basis to do so under the PDPL. Depending on the circumstances, this may include your consent, the performance of a contract or pre-contractual steps taken at your request, compliance with a legal obligation, or our legitimate interests in operating and growing our advisory practice in a manner that does not override your rights and freedoms.

5. How We Share Your Information

We do not sell your personal data. We may share it only in the following limited circumstances:

• Service providers — trusted third parties who perform services on our behalf (such as hosting, IT, and communications providers) under appropriate confidentiality and data-protection obligations.
• Professional advisors and partners — where necessary to deliver a specific engagement, such as legal, financial, or specialist partners, with appropriate safeguards in place.
• Government and regulatory bodies — where disclosure is required to deliver a service you have requested, or to comply with applicable laws, regulations, or lawful requests from competent authorities in the Kingdom of Saudi Arabia.
• Legal and safety reasons — where we believe disclosure is reasonably necessary to comply with the law, enforce our agreements, or protect the rights, property, or safety of RMC, our clients, or others.

6. International Data Transfers

Your personal data is primarily processed within the Kingdom of Saudi Arabia. Where data is transferred outside the Kingdom — for example, to a service provider located abroad — we take steps to ensure such transfers are carried out in accordance with the PDPL and that appropriate safeguards are in place to protect your data.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to provide our services, maintain our business relationship, and satisfy any legal, regulatory, accounting, or reporting requirements. When personal data is no longer needed, we securely delete or anonymize it.

8. Data Security

We implement appropriate technical and organizational measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. While no method of transmission or storage is completely secure, we work to safeguard your information using measures consistent with the sensitivity of the data and applicable legal requirements.

9. Your Rights

Subject to the PDPL, you have the right to:

• Be informed about how your personal data is collected and used.
• Access the personal data we hold about you.
• Request that inaccurate or incomplete data be corrected.
• Request that your personal data be deleted in certain circumstances.
• Withdraw your consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us using the details in the "Contact Us" section below. We will respond to your request in accordance with applicable law.

10. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to operate properly, remember your preferences, and understand how the site is used. You can control or disable cookies through your browser settings, though some features of the website may not function as intended if you do so.

11. Third-Party Links

Our website may contain links to third-party websites or resources. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any website you visit.

12. Children’s Privacy

Our services are intended for businesses and professionals and are not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, or if you wish to exercise your rights, please contact us: