Legal
Privacy Policy
Short, in plain language, and aligned with the PDPL — because a data-conscious firm should have a data-conscious privacy page.
1. Who we are
Kindi (“we”, “us”) is an AI consultancy headquartered in Riyadh, Saudi Arabia. This policy explains how we handle personal data collected through this website and in the course of business correspondence. For questions or requests, contact salam@kindihq.com.
2. What we collect
We collect only what you give us: name, organization, work email, phone number, and the content of your messages when you contact us, subscribe to our newsletter, or apply to join the team. This website does not use advertising trackers, and we do not buy or enrich personal data from third parties.
3. Why we process it
We process personal data to respond to inquiries, scope and deliver engagements, send the newsletter you asked for, and evaluate applications you submit. The legal bases are your consent and our legitimate interest in operating the business — consistent with the Saudi Personal Data Protection Law (PDPL).
4. Where it lives and how long
Business correspondence and contact records are stored on access-controlled systems. We keep personal data only as long as the purpose requires: inquiry records for the life of the relationship plus applicable statutory periods, newsletter data until you unsubscribe, and application materials for up to twelve months unless you ask us to delete them sooner.
5. Who we share it with
We do not sell personal data, ever. We share it only with service providers that operate our basic infrastructure (email, hosting) under confidentiality obligations, or where the law requires disclosure. Client engagement data is governed separately — and more strictly — by the contracts that cover each engagement.
6. Your rights
Under the PDPL you may request access to the personal data we hold about you, ask for correction or deletion, and withdraw consent for the newsletter at any time. Write to salam@kindihq.com and we will respond within the statutory timeframe. If you believe we have mishandled your data, you may also lodge a complaint with the competent Saudi data protection authority.
7. Changes
If this policy changes materially, the updated version will be posted here with a revised date. This version is effective as of July 2026.