Privacy Policy
Updated
This policy explains how Red Spark collects, uses and protects your personal data when you use this website or request our services. We operate in line with the Personal Data Protection Law of the Kingdom of Saudi Arabia and its implementing regulations.
This policy is a starting template that needs review by a qualified Saudi legal adviser before it is relied upon. It does not constitute legal advice.
1. The data we collect
Data you provide yourself: your name, mobile number, business type, budget range, the services you're interested in, and any message you write in the contact form.
Data collected automatically: a truncated IP address, browser and device type, the pages you visited, and the traffic source (UTM parameters). This is collected only after you consent to non-essential cookies.
We do not request or collect sensitive personal data such as health, financial or biometric information through this website.
2. Our lawful basis for processing
We process your data on the basis of the explicit consent you give when submitting the contact form, or on a legitimate interest in responding to your enquiry and delivering the service you asked for.
For analytics and advertising tools, the basis is your prior consent via the consent banner. You can withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.
3. How we use your data
To contact you about your enquiry by phone, WhatsApp or email, and to prepare a service proposal suited to your business.
To measure the performance of our own marketing campaigns and improve the website experience — in aggregate, not at the level of an individual.
We do not sell your personal data to any third party, and we do not use it for purposes other than those it was collected for.
4. Cookies and tracking tools
We use essential cookies required to run the site and to remember your language choice and consent preference. These need no consent, because the site cannot function without them.
Only after you consent do we load non-essential tools through Google Tag Manager: Google Analytics 4, plus the Snapchat, TikTok and Meta pixels. These tell us which advertising brought you to this page.
If you choose 'essential only', no advertising or analytics tag is loaded at all. You can change your choice at any time from the 'Manage consent' link in the footer.
5. Sharing data with third parties
We use service providers to run the site and store enquiries: Vercel for hosting, Supabase for the database, and WhatsApp (Meta) to notify our team of your enquiry.
Some data may be transferred and processed outside the Kingdom by these providers. We work only with providers who maintain appropriate protection standards.
We may disclose your data where a competent authority in the Kingdom lawfully requires it.
6. How long we keep data
We keep contact-enquiry data for 24 months from our last contact, after which it is deleted or anonymised. Data for current clients is kept for the duration of the engagement plus one year, to meet accounting obligations.
7. Your rights
Under the Personal Data Protection Law you have the right to: be informed how your data is processed, access it, request its correction, request its destruction, and withdraw your consent at any time.
To exercise any of these rights, email us at the address shown on the contact page. We respond within 30 days at the latest.
8. Data security
We use encryption in transit (HTTPS) and restricted database access permissions, and we never store payment-card data on this website.
9. Changes to this policy
We may update this policy from time to time. The last-updated date appears at the top of this page, and any material change will be announced prominently on the site.
10. Contacting us
For any question about this policy or about your data, contact us through the contact page or the email address shown there.