Privacy Policy

Last updated: November 2026
Applies to: techarch.com.sa and TechArch commercial, marketing and service channels

This Privacy Policy explains how TechArch handles personal data in accordance with the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations. It provides clear information About the data we collect, the purposes for which we process it, how we protect it, and the rights of data subjects and how to exercise them.

1. Who We Are

TechArch is a Saudi cybersecurity and data protection company founded in Riyadh in 2013. TechArch provides cybersecurity consulting, assessment, penetration testing, security architecture, risk, compliance, privacy and cyber resilience services.

TechArch acts as the data controller for personal data collected through our website, enquiry forms, marketing activities and other commercial channels where we determine the purposes and means of processing. Where we process personal data on behalf of a client as a data processor under a contracted service, we follow the client’s documented instructions, the applicable agreement and legal requirements.

You can contact TechArch using the following details:

Company: TechArch

Location: Riyadh, Kingdom of Saudi Arabia

Email: info@techarch.com.sa

Website: techarch.com.sa

2. Personal Data We Collect

Depending on how you interact with TechArch, we may collect the following categories of personal data:

  • Contact information: name, email address, mobile or telephone number.
  • Professional information: job title, organization, department, industry or sector.
  • Enquiry information: information included in messages, requests for information, meeting requests, RFP/RFI submissions or service enquiries.
  • Marketing information: communication preferences, content downloaded, event registrations and interactions with our communications.
  • Website and technical information: IP address, browser/device information, pages viewed, approximate usage information and other technical information where collected through cookies or similar technologies.
  • Service-related information: information necessary to scope, manage and deliver a professional engagement, where applicable.

We collect only personal data that is relevant and necessary for the purpose for which it is processed.

3. How and Why We Use Personal Data

TechArch may process personal data for the following purposes:

  • Responding to enquiries, requests, meeting bookings and other communications.
  • Providing access to requested reports, white papers, publications and other resources.
  • Understanding business requirements and preparing proposals or service scopes.
  • Delivering, managing and supporting contracted cybersecurity and data protection services.
  • Managing business relationships with clients, prospects, partners and suppliers.
  • Sending direct marketing communications with your prior consent, with the option to unsubscribe at any time.
  • Managing events, webinars, campaigns and other professional activities.
  • Improving our website, content, services and user experience.
  • Protecting the security, integrity and availability of our systems and services.
  • Meeting applicable legal, regulatory, contractual and governance obligations.

Where processing is based on your consent, you may withdraw it at any time by contacting us using the details in Section 10. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

4. Legal Basis for Processing

  • We process personal data on the legal basis applicable to each processing purpose under the PDPL and its Implementing Regulations. Depending on the activity, we rely on Your Consent.
  • Processing necessary to perform an existing agreement to which you are a party. Processing required under applicable laws or regulations.

Our legitimate interests, provided that the processing does not prejudice your rights or interests, does not involve sensitive personal data, and meets the applicable regulatory requirements.

5. Sharing and Disclosure

TechArch does not sell personal data. We may disclose or make personal data available only where necessary and appropriate, including to:

  • Authorized personnel within TechArch who need access to personal data to perform their responsibilities.Carefully selected service providers, technology providers and professional advisers acting under appropriate confidentiality and contractual obligations.
  • Clients and their authorized representatives, where sharing personal data is necessary to deliver the agreed services.
  • Competent governmental, regulatory or law-enforcement authorities where disclosure is required or permitted by applicable Saudi law.
  • Other parties where the individual has provided an appropriate consent or where another lawful basis applies.

Where personal data is transferred or processed  outside the Kingdom, we comply with the applicable requirements of the PDPL and the Regulation on Personal Data Transfer Outside the Kingdom.

6. Data Retention 

We retain personal data only for as long as necessary for the purposes for which it was collected. Any further retention must have a valid legal basis, including where required by law or where the data is closely related to an ongoing judicial case.

Retention periods vary depending on the type of personal data, the purpose of processing, applicable legal requirements and any ongoing judicial proceedings.

When personal data is no longer required and there is no legal basis for retaining it, we securely destroy it or anonymize it so that individuals can no longer be identified.

7. Data Security and Protection

We  apply appropriate organizational, technical and administrative measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, misuse or destruction.

Depending on the nature of the data and processing activity, safeguards may include:

  • Access controls based on business need and least privilege.
  • Authentication and account security controls.
  • Encryption or other protective measures where appropriate.
  • Security monitoring, logging and incident-management practices.
  • Confidentiality obligations for personnel and relevant service providers.
  • Periodic review and improvement of security controls.

No method of transmission or storage can be guaranteed to be completely secure. TechArch continuously works to maintain and improve the protection of personal data.

8. Cookies and Website Technologies

TechArch may use cookies or similar technologies to support essential website functions, remember preferences, understand website usage and improve the user experience.

Where non-essential cookies or similar technologies are used and consent is required, TechArch will provide an appropriate mechanism for obtaining and managing that consent.

You may also be able to control cookies through your browser settings. Disabling certain technologies may affect some website functionality.

9. Your Privacy Rights

Subject to the conditions and exceptions provided by the PDPL and its Implementing Regulations, you have the following rights regarding your personal data:

  • The right to access your personal data held by us.
  • The right to be informed about the legal basis and purposes of collecting your personal data and how it is processed.
  • The right to request correction, completion or updating of your personal data.
  • The right to request destruction of your personal data, subject to applicable legal requirements.
  • The right to withdraw your consent at any time where processing is based on your consent.
  • The right to obtain a copy of your personal data in a clear and readable format.

To exercise your rights or submit a privacy-related request, please contact us using the details in Section 10. We will verify your identity as appropriate and respond to your request without undue delay, within 30 days. Where permitted under the Implementing Regulations, this period may be extended by up to an additional 30 days. We will notify you in advance of any extension and explain the reasons.

10. Contact Us

For questions, requests or concerns regarding this Privacy
Policy or the processing of your personal data, contact TechArch:

TechArch
Riyadh, Kingdom of Saudi Arabia
Email: info@techarch.com.sa
Website: techarch.com.sa

When contacting us, please provide enough information for us to understand your request and, where appropriate, verify your identity.

You have the right to submit a complaint to the Saudi Data & AI Authority (SDAIA) regarding the processing of your personal data, in accordance with applicable law.

11. Changes to this Privacy Policy

TechArch may update this Privacy Policy from time to time to reflect changes in our services, processing activities, applicable laws or regulatory requirements.

We will update the “Last updated” date whenever this Privacy Policy is revised and, where appropriate, provide additional notice of material changes. We encourage you to review this page periodically to remain informed about how TechArch handles personal data.