Privacy policy
Last updated:
In short: we collect only what you type into the demo-request form or the contact form, we use it to reply to you, we keep it for a fixed period and then delete it, and you can ask to see, correct or delete it at any time from the contact page. During the closed beta the site is hosted outside the Kingdom; hosting moves inside the Kingdom at general availability.
What we collect
The demo-request form and the contact form are the only two places on this site where personal data is entered: your name and job title, your email and your mobile number if you share it, your organisation's name, type and programme count on the demo-request form, and your reason for writing plus your message. We collect nothing else and we do not track you across other sites.
Why, and on what basis
We use this data to answer your request and carry on the conversation you started, and nothing else. The lawful basis under the Personal Data Protection Law is your consent when you send the form, together with our legitimate interest in replying to people who write to us. We do not sell your data, share it with third parties for marketing, or add you to a mailing list you did not ask for.
Where it is held, and who can reach it
During the closed beta the platform runs on a cloud provider's servers outside Saudi Arabia, in India, with each organisation's data isolated at the database, and the connection between your browser and the site is encrypted (HTTPS). This is a transfer of data outside the Kingdom and we state it here plainly; access is limited to authorised ilaf staff. Hosting moves to a data centre inside the Kingdom at general availability, and this page is updated the day it does.
How long we keep it
We keep demo-request and contact data for 24 months from our last exchange and then delete it, unless the conversation becomes a subscription agreement, in which case that agreement governs. You can ask for deletion earlier at any time.
Your rights
Under the Personal Data Protection Law you may:
- Know what we hold about you and why.
- Obtain a copy of your data.
- Correct anything inaccurate.
- Ask us to delete your data.
- Withdraw your consent at any time.
How to exercise your rights
From the contact page: choose the request type and give the email you wrote to us from. No organisation name and no work email is needed. We reply within one business day and complete rights requests within 30 days at most, as the law requires.
You can also write to us directly at [email protected].
Complaints
If you are not satisfied with our answer you may lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA), the competent authority under the Personal Data Protection Law.
Cookies
We add no tracking cookies and no third-party analytics tool to this site. The only two cookies we may write are your language and theme preferences, and both store a choice you made.
The site's content security policy lets no script from another origin run, so if the network provider that delivers the site inserts a measurement script into a page, your browser blocks it and it receives nothing about you.
Who controls the data
For data ilaf collects through this website, ilaf is the controller. For a subscribed organisation's ecosystem data, that organisation is the controller and ilaf is its processor under the agreement signed between them.
Changes to this policy
When this page changes, the last-updated date at the top changes with it. The move to hosting inside the Kingdom in particular will appear here the day it happens.