Privacy notice

What we collect, where it goes, and how to get it back.

This describes what actually happens to something you send us through this site — the specific fields, the systems they pass through, which country those systems are in, and how long the enquiry is kept. It is written against the code that runs the form rather than from a template, which is why it names two providers and one country instead of referring to “trusted partners”.

EvidenceVerifiable

Zero

Cookies set by this site

No analytics, no tracking, no embeds

Processors outside ADTCS

Cloudflare · Resend

Where a form submission is processed

Resend, us-east-1 — outside the Kingdom

None

Automatic retention rule on the mailbox

Enquiries are deleted on request

Last reviewed 16 August 2026

Who is responsible

Two entities, one site.

This site is operated by Advanced Techniques Specialized Company, registered in the Kingdom of Saudi Arabia, and byTakamul Digital For Information Technology Consultants Co. L.L.C S.O.C, registered in the United Arab Emirates. Whichever entity you end up contracting with, an enquiry sent through this site reaches the same mailbox and is handled under this notice.

For anything about your personal data — a question, a request, or a complaint — write to info@adtcs-sa.com. That address is monitored by people, not by an autoresponder, and it is the same address the form itself delivers to.

What we collect

Only what the form asks for, and it differs by route.

There are three forms on the contact pageand they ask for different things. Nothing below is inferred, enriched or bought from anywhere — this is the complete list of what reaches us, and it is exactly what you typed.

New project

Required

Name
Work email
Company
Country
Practice of interest
What you are trying to do

Optional

Current system
Deadline
Budget range

Existing client

Required

Name
Work email
Company
Environment
Severity
Description

Procurement

Required

Name
Work email
Organisation
Documents needed

Optional

Tender reference
Submission deadline

What happens to it

Five steps, two companies, no database.

Most privacy notices describe a category of processing. This is the actual path, in order, and it is short because the system is small.

Your browser posts it to us

The form sends what you typed to /api/contact on adtcs.com as a single JSON request. It carries the fields you filled in, which of the three routes you chose, and nothing else — no timestamp, no referring page, no browser fingerprint, no identifier we generated.

A Cloudflare Worker validates it

The request is handled by our own code running on Cloudflare’s network. It checks the fields against the same rules your browser used, rejects anything over 16 KB, and rate-limits by IP address to five submissions a minute. Nothing is stored at this step: the Worker holds the submission only for as long as it takes to send it on.

Resend delivers it as email

The validated submission is passed to Resend, an email delivery provider, which formats it as a message and delivers it. This is the step where your details leave our infrastructure and enter a third party’s. Resend is the only company other than Cloudflare that handles what you submit.

It arrives in our mailbox

The message lands in info@adtcs-sa.com, a Microsoft 365 mailbox, with your address set as the reply-to so a practice lead can answer you directly. From that point the enquiry is an email in a mailbox. There is no database, no CRM and no contact record behind this site.

You get an acknowledgement

A short confirmation is sent back to the address you gave, through the same provider, saying which route your enquiry took and when to expect a reply. It does not quote your submission back to you. If that second message fails, your enquiry has still reached us — the acknowledgement is a courtesy and its failure is logged rather than shown to you.

Cross-border transfer

If you submit this form from Saudi Arabia, your personal data is processed outside the Kingdom.

We would rather state that plainly than bury it. Resend, the provider that delivers the email, processes it in the United States — the us-east-1 region. Cloudflare, which serves this site and runs the validation step, operates a global network and will handle your request at whichever location is closest to you, which may also be outside the Kingdom.

Why this matters under PDPL

The Personal Data Protection Law restricts transferring personal data outside the Kingdom. It is permitted on conditions rather than at will, and unauthorised transfer carries its own penalty. That obligation sits with us as the recipient of your data, not with you — but you are entitled to know that the transfer happens before you decide to submit anything, which is the reason this section exists.

What you can do instead

You do not have to use the form. Emailinginfo@adtcs-sa.com directly, or calling the Riyadh office, reaches exactly the same people and takes Resend out of the path entirely. For a government or regulated enquiry where the transfer itself is the problem, that is the better route, and we would rather tell you so than collect the submission.

What we are not claiming

We are not asserting on this page that the transfer meets a particular condition under the transfer regulation, or that any adequacy decision covers it. Whether it does is a determination, and stating one here that had not been made would be exactly the kind of unchecked claim the rest of this site refuses to make. If your organisation needs the basis documented before you send us anything, ask us and we will deal with it in writing.

You are reading the Saudi Arabia version of this site. This section applies to you directly.

What we do not do

The part most sites cannot say.

Every line here was checked against the files this site actually serves, not against a policy someone intended to follow. You can verify all of it yourself with your browser's developer tools in about a minute, which is the only reason it is worth writing down.

We set no cookies

Not for analytics, not for preferences, not for a session. There is no cookie banner on this site because there is nothing to consent to. The site also writes nothing to local storage, session storage or IndexedDB — close the tab and your browser holds nothing from us.

There is no analytics on this site

No Google Analytics, no tag manager, no Plausible, no Fathom, no product analytics of any kind. We do not measure which pages you read, how far you scroll, or where you came from. The contact form in particular carries no measurement whatsoever.

No third-party scripts and no embeds

This site loads no JavaScript, stylesheet, font or image from any domain other than its own. No chat widget, no video embed, no map, no scheduling tool, no third-party form provider. The typefaces are served from our own domain rather than a font CDN, so reading a page does not disclose your IP address to anyone but us and Cloudflare.

No advertising, and no sale or sharing of your data

No ad network, no retargeting pixel, no conversion tag, no LinkedIn or Meta tracking. We do not sell what you send us, do not share it with anyone outside the two providers named on this page, and do not add you to a mailing list. There is no mailing list.

Two honest qualifications.

Cloudflare sees your request. Serving and protecting this site means Cloudflare's network handles every visit, and it records request data at the edge — including your IP address — as part of doing that. We do not run analytics on top of it. Cloudflare also sets network error logging headers, which ask your browser to report failed connections to Cloudflare; they are configured to report failures only and nothing on a page that loads normally. And depending on the security settings in force, Cloudflare may set its own cookies for bot detection; those are Cloudflare's, we do not read them, and they are the one exception to the statement above.

Links leave this site. Compliance pages here cite primary sources — ZATCA, SDAIA, the NCA, ministries, law firms. Those are ordinary links, they load nothing until you click, and once you do you are on somebody else's site under somebody else's policy.

The calculators

Nothing you type into a calculator ever reaches us.

The GOSI, Saudization, gratuity, end-of-service and e-invoicing readiness tools on this site run entirely in your browser. The salaries, headcounts, nationality splits and answers you enter are computed on your own machine and are never transmitted to ADTCS or to anyone else. There is no submission step, no email gate and no saved result — close the tab and the figures are gone.

This is a deliberate design decision rather than an accident of implementation. Payroll and workforce figures are commercially sensitive, and a tool that quietly posted them to a vendor in exchange for a number would not be worth using.

How long we keep it

Until you ask us to delete it.

An enquiry is an email in a mailbox. There is no database behind this site, so retention means how long that message stays in the mailbox — and today no automatic rule prunes it. A message stays until a person deletes it, and the reliable way that happens is you asking us.

We are not going to publish a retention period we do not yet enforce. A notice that promises deletion after a fixed number of months, on a mailbox where nothing runs on a schedule, is a statement that is false the day it is published — and this firm sells the argument that a control you cannot evidence is not a control. When a Microsoft 365 retention policy is in place, this page will state the period and the date it took effect, and the mailbox will actually do it.

Two things would keep a message beyond a deletion request. If your enquiry becomes an engagement, the correspondence is kept for as long as the commercial relationship and the record-keeping obligations attached to it require. And if a message is caught by a legal hold or a regulatory obligation to retain it, it stays until that lifts. We will tell you if either applies to you.

Your rights

Four of them, and one address.

These are the rights the Saudi Personal Data Protection Law and the UAE data protection law give you over personal data we hold. You do not need a form, a template or a reason to exercise any of them.

Access

Ask what we hold about you and we will tell you, and provide a copy of the enquiry you sent.

Correction

Tell us something we hold is wrong or incomplete and we will correct it.

Deletion

Ask us to delete your enquiry and we will delete the message and its acknowledgement from the mailbox, unless we are required to keep it.

Objection and withdrawal

Ask us to stop processing your enquiry, or withdraw a consent you gave, at any time. Withdrawing it does not affect anything already done.

How to exercise them

Write to info@adtcs-sa.com from the address you used to contact us, or tell us which address you used, and say what you want. We will acknowledge it within one business day and complete it within thirty days. If we need something from you to identify your enquiry we will ask for the least we can work with, rather than a copy of your ID.

If we get it wrong, you are entitled to complain to the supervisory authority in your jurisdiction — the Saudi Data and Artificial Intelligence Authority in the Kingdom, and the UAE Data Office in the Emirates. We would rather you told us first, but that is your right and not our permission to give.

Changes to this notice

Dated, not silently rewritten.

This page carries the date it was last reviewed, at the top. When what we do changes — a new field on the form, a different provider, a system that stores enquiries rather than emailing them — the change lands here in the same release as the change itself, not at the next review.

This notice covers this website. It does not cover what happens to data inside a client engagement, which is governed by the contract and the data processing terms agreed for that engagement.

A question about your data?

Write to the same address the form delivers to. If you would rather not submit anything through this site at all, that is a reasonable position and email works just as well.

info@adtcs-sa.com Terms of use