Privacy Policy

Who we are and who controls your data

Arena Rise, Commercial Registration No. 7031090991, located at Abdullah bin Masoud Street, Al Urubah District, Dammam, Eastern Province, Saudi Arabia. We are the controller of the personal data collected through this website. You can reach us at info@arenarise.sa or +966 53 222 3269.

This policy explains what we collect, why, who we share it with, and what your rights are under the Saudi Personal Data Protection Law and its Implementing Regulations.

The data we collect

We collect what you give us voluntarily, plus a limited amount of technical data:

• Quote request data: full name, organisation or company name, mobile number, email address, event type, approximate date, and the event brief you write yourself.
• Correspondence: whatever you send us by WhatsApp, email or phone, including the content of the messages themselves.
• Technical data: approximate IP address, browser and device type, pages visited and time spent, and the source you arrived from. Collected through the measurement tools described below.
• Preferences stored on your device: language, dark or light display mode, and sound state. These stay in your browser, are never sent to us, and contain no personal data.

We neither request nor want sensitive data through this website: no card numbers, no health data, no ID images. If you send us any of that unprompted, we will delete it.

Why we process your data

• To respond to your enquiry, prepare a quotation and discuss scope. This processing is necessary to take steps at your request before entering a contract.
• To deliver and manage the agreed event and coordinate with the parties involved in it.
• To meet legal requirements: invoicing, zakat and tax, and permits required by venues and site owners.
• To improve the website and measure the performance of our marketing campaigns. This processing relies on your consent, which you may withdraw at any time.

We do not sell your personal data to anyone, we do not rent it, and we do not trade in it. Nor do we use your data for automated decisions that affect you.

The confidentiality of your event

This clause is specific to the nature of our work. What you tell us about your event is usually not public: a product launch date, an approximate budget, a guest list, a stand layout, or the name of a partner not yet announced.

• We treat your event details as inherently confidential, whether or not a non-disclosure agreement has been signed.
• We publish no project in our portfolio before the event has taken place and been announced, and we never name a client or show their images without permission.
• When we run registration or visitor reception on your behalf, attendee data belongs to you, not to us. We process it on your instructions, hand it over to you, and never use it for any purpose of our own.
• Photography and documentation during the event take place with your prior agreement on their scope, and you decide what may and may not be published.

Who we share data with

We share the minimum necessary, and only with those who need it:

• Subcontractors and suppliers delivering part of your event: fabrication workshops, audio and lighting crews, and on-site staffing companies. Each receives only what their task requires.
• Venue owners and government bodies, when obtaining access, build-up and insurance permits. This sharing is mandatory and the event cannot proceed without it.
• Technical providers: the hosting company the site runs on, and Google's measurement and advertising services.
• WhatsApp, if you choose to message us there. Your conversation is then governed by the privacy policy of WhatsApp and Meta, not by ours.
• Judicial or regulatory authorities, where we are required to do so by law.

Measurement, advertising and cookies

We use Google Analytics 4 to understand how the site is used, and we may use the Google Ads tag to measure our campaign results. These tools set cookies in your browser and transmit usage data to Google.

You can refuse or delete these cookies from your browser settings at any time. The site works fully without them, and submitting a quote request is unaffected.

Locally stored preferences — language, theme and sound — are not cookies, are never sent to any server, and disappear when you clear your browser data.

Transfer of data outside the Kingdom

Google's and WhatsApp's servers are located outside the Kingdom, which means usage data or the content of your conversation may be processed in other countries. This takes place under the controls set out in the Personal Data Protection Law for cross-border transfers.

Quote request data and email correspondence remain with our hosting provider and in our corporate mailbox.

How long we keep it

• Quote requests that did not lead to a contract: up to twenty-four months, then deleted. This reflects the long buying cycle in events, where an enquiry may return a season or two later.
• Data of contracted clients and records of delivered events: for the period required by accounting and tax regulations, being ten years from the end of the financial year.
• Attendee and registration data processed on behalf of a client: handed over to them and deleted from our systems when the project closes.
• Measurement data: according to the retention periods configured in Google Analytics.

Your rights

The Personal Data Protection Law grants you the following rights, and exercising them is free of charge:

• The right to be informed of the legal basis for collecting your data and the purpose of it.
• The right to access the personal data we hold about you.
• The right to obtain a copy of your data in a clear and readable format.
• The right to request correction, completion or updating of your data.
• The right to request destruction of your data once it is no longer needed for the purpose it was collected for.
• The right to withdraw your consent to consent-based processing, at any time.

To exercise any of these rights, write to us at info@arenarise.sa. We respond within thirty days. We may ask for proof of identity before acting, to protect your data from an unauthorised request.

Some data may not be destroyable immediately if retention is legally required, such as accounting records. We will explain this to you in our response.

Data security

The site runs over an encrypted connection, and access to quote requests is limited to staff who need it to do their work. We also apply measures to prevent automated spam submissions through the form.

No method of transmission over the internet is absolutely secure. If a breach affecting your personal data occurs, we will notify the competent authority and notify you as the law requires.

Children

Our services are directed at organisations and companies, and we do not intend to collect data from anyone under eighteen. If we learn that we have collected a minor's data without guardian consent, we will delete it.

Changes to this policy

We may update this policy whenever our way of working or the tools we use change. The last updated date is shown at the top of the page, and we will clearly flag any material change.

Contact and complaints

For any question about this policy or about your data: info@arenarise.sa or +966 53 222 3269.

If you are not satisfied with our response, you have the right to lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA), the body supervising the application of the Personal Data Protection Law in the Kingdom.