Privacy Policy

This policy generally explains how BIG AI COMPANY handles personal data submitted by visitors to bigai.sa through the contact form. This page must be aligned with the company’s actual technical practices, hosting, email providers and processors before final legal adoption.

1. Controller and Contact Details

BIG AI COMPANY, Riyadh, Kingdom of Saudi Arabia.
General email: info@bigai.sa.
Privacy and personal-data requests may be directed to this address unless another dedicated channel is announced.

2. Data We Collect

When you use the contact form, we may collect your name, email address, subject and message. Organization and phone number are optional. Technical systems may also log operational and security data such as IP address, browser/user-agent, request time and referring page where necessary for security, abuse prevention and troubleshooting.

3. Purposes

We use submitted data to respond to inquiries, manage communications, protect the website and form against abuse and spam, maintain appropriate communication records and improve service security and stability.

4. Required and Optional Data

Name, email, subject and message are required to process an inquiry. Organization and phone are optional unless additional information is clearly required for the nature of the request.

5. Legal Basis

Personal data is processed under the legal basis applicable to the specific purpose, which may include the data subject’s consent where appropriate, steps taken at the data subject’s request, or another basis permitted by applicable law and regulations. A privacy-policy acknowledgement checkbox does not replace the need to identify the correct legal basis for each processing activity.

6. Disclosure and Service Providers

Data may be processed by hosting, email and security service providers used by BIG AI COMPANY to operate the website and communications, to the extent necessary to provide those services. Contact-form submissions are routed internally to info@bigai.sa and ceo@bigai.sa. Other disclosures should occur only where a valid legal basis exists and should be limited to what is necessary.

7. International Processing or Transfer

BIG AI COMPANY must verify this section before final publication: if any hosting, email, backup or technical provider processes personal data outside Saudi Arabia, this policy must be updated accordingly and applicable cross-border transfer requirements must be addressed.

8. Retention and Destruction

An actual retention period or objective criteria must be approved before final adoption. BIG AI COMPANY retains contact data only for as long as necessary for communication and applicable legal, contractual or security purposes, after which appropriate destruction or anonymization steps should be taken in line with the company’s approved retention policy.

9. Security

Reasonable technical and organizational measures are used to protect contact-form data, which may include encryption in transit, access controls, anti-spam measures, rate limiting, security logging and restricted mailbox access. No electronic method can guarantee zero risk.

10. Data-Subject Rights

Data subjects have the rights available to them under the Saudi Personal Data Protection Law and its Implementing Regulations as applicable, including rights relating to information about processing, access, obtaining data, correction/completion and destruction in cases permitted by law. Requests can be sent to info@bigai.sa.

11. Withdrawal of Consent

Where a particular processing activity relies on consent, the data subject may request withdrawal through info@bigai.sa. Withdrawal does not affect processing lawfully carried out before withdrawal, and some processing may continue where another lawful basis applies.

12. External Links

External websites linked from this site are governed by their own privacy policies.

13. Updates

This policy may be updated as processing practices or legal requirements change. Last updated: 10 September 2026.