Privacy Policy

Ad Digitalize is an advertising and digital marketing company based in Riyadh, Kingdom of Saudi Arabia. In this policy, "we", "us" and "our" mean Ad Digitalize, and "you" means anyone who visits this website or contacts us through it.

We are the party that decides why and how your personal data is handled on this site. Our registered address and contact details are at the end of this page.

This policy covers this website and the enquiry, careers and AI features published on it. It does not cover other companies' websites that we link to, including our clients' sites and the social networks our profiles live on.

We collect two kinds of information: what you deliberately give us, and a small amount that your browser sends automatically. We do not buy personal data from anyone, and we do not build profiles of visitors for advertising.

Information you give us

• Contact form: your name, email address, phone number, company name, the service you are interested in, an optional budget range, and the message you write.
• Job applications: your name, email address, phone number, an optional link to your portfolio or profile, and the role you are applying for.
• AI tools: whatever you type into Ask AD, and the answers you select in Find My Solution and the Outdoor Campaign Planner. If you choose to carry those answers into the contact form, they arrive with your enquiry.

Information collected automatically

• A language cookie that remembers whether you are reading the site in English or Arabic.
• Browser storage used by the AI tools to keep your session and conversation attached to you between pages, described in full in our Cookie Policy.
• With each AI conversation, a one-way hash of your IP address and your browser's user-agent string, kept to detect abuse and enforce usage limits. The hash cannot be turned back into your IP address.
• Ordinary web server logs kept by our hosting provider, which record requests made to the site.

What we do not collect

This site runs no advertising pixels, no analytics trackers and no social media tracking scripts. We do not ask for or store payment card details anywhere on this website. We do not knowingly collect sensitive personal data, such as health, religious or biometric information — please do not include any in a message to us.

We use what you give us only for the purpose you gave it for, and for the operational reasons below:

• To reply to your enquiry, discuss your requirements and prepare a proposal.
• To assess a job application and contact you about it.
• To run the AI tools: to answer your question, produce a recommendation, and keep the conversation coherent across your visit.
• To protect the site: to block automated abuse, enforce rate limits and investigate misuse.
• To keep the records a business is required to keep, and to establish, exercise or defend a legal claim.
• To improve the site and our services, using information that is aggregated and does not identify you.

We do not use your contact details to send marketing emails you did not ask for, and we do not sell, rent or trade personal data to anyone.

Under the Personal Data Protection Law of the Kingdom of Saudi Arabia (PDPL) and its implementing regulations, we rely on the following grounds:

• Your consent, given when you choose to send an enquiry, submit an application or type a question into an AI tool.
• The performance of a contract, or steps taken at your request before entering into one — such as preparing a quotation.
• Our legitimate interests in operating and securing this site, provided those interests do not override your rights.
• Compliance with a legal obligation that applies to us.

Where we rely on your consent, you may withdraw it at any time. Withdrawing consent does not affect anything we did lawfully before you withdrew it.

Ask AD, Find My Solution and the Outdoor Campaign Planner deserve their own section, because they behave differently from an ordinary contact form.

• You are not identified by name. The tools recognise you through an anonymous token issued by our server and stored by your browser. The token contains nothing about you and cannot be forged.
• Your messages are sent to the AI model provider we have configured for the site, so that a reply can be generated. At the time of writing that provider is Google (Gemini API). If we change provider, we will update this page.
• Recommendations are produced by our own rules, not by the model. The model writes the explanation; it does not decide which service you are shown.
• The tools will never state a price, an audience reach figure or a coverage claim that is not already published on this website.
• Your conversation is stored so it can continue across pages and visits, and so that our team can understand an enquiry that came out of it.
• You can end this at any time by clearing this site's data in your browser, or by asking us to delete it — see your rights below.

Please do not type confidential material, passwords or anyone else's personal data into the AI tools. Treat them as you would an opening conversation with a new agency.

We share personal data only where it is necessary, and only with parties bound to protect it:

• Our hosting and email providers, who store and deliver the data on our behalf.
• The AI model provider described above, which receives the content of your AI conversation in order to generate a reply.
• Professional advisers such as auditors and lawyers, where they need it to advise us.
• A competent authority, court or regulator, where the law requires us to disclose it.
• A buyer or successor, if the business or part of it is ever transferred — in which case this policy continues to apply to the data transferred.

We never sell personal data, and we do not share it with advertising networks or data brokers.

• Enquiries: kept for as long as we are in contact with you about the work, and afterwards for the period we are required to keep business records.
• Job applications: kept while the role is open and for a reasonable period afterwards, so we can consider you for a similar role. Tell us if you would rather we deleted yours immediately.
• AI conversations and the anonymous visitor record: kept for up to 365 days by default, then deleted.
• Server logs: kept for a short period by our hosting provider, in line with their own retention schedule.

When a retention period ends, the data is deleted or irreversibly anonymised.

The site is served over an encrypted connection. Access to enquiries, applications and AI conversations is limited to the members of our team who need it to do their work, and is protected by individual accounts. Form submissions pass through automated abuse protection — a hidden trap field, a signed timestamp and rate limiting — before anything is stored.

No system is perfectly secure, and we cannot guarantee the security of information while it is in transit to us. If a breach ever affects your personal data and is likely to cause you harm, we will notify you and the competent authority as the law requires.

Under the PDPL you have the right to:

• Be informed of the legal basis and purpose for collecting your personal data.
• Request access to the personal data we hold about you.
• Request a copy of it in a readable, commonly used format.
• Request that inaccurate or incomplete data be corrected or completed.
• Request that your data be destroyed when it is no longer needed for the purpose it was collected for.
• Withdraw your consent to processing that is based on consent.

To exercise any of these, email us at the address at the end of this page. We will respond within the period set by the regulations, and we may ask you for enough information to be sure it is really you asking. Exercising your rights is free unless a request is excessive or repetitive.

If you believe we have not handled your data properly, you may complain to the Saudi Data and Artificial Intelligence Authority (SDAIA), which supervises the PDPL. We would appreciate the chance to put it right first.

Some of the providers we rely on — including the AI model provider and parts of our email infrastructure — process data on servers outside Saudi Arabia. Where that happens, we transfer data only in the circumstances the PDPL permits, and only to parties that offer an adequate level of protection.

This website and our services are aimed at businesses and the people who work in them. They are not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

We update this page when the way we handle data changes — for example, if we adopt a different AI provider or add a new form. The date at the top of the page always shows the current version. If a change materially affects your rights, we will make that clear rather than relying on you to notice the date.