Privacy Policy
1. Introduction & Scope
Development Solutions Company LLC, a company registered in the Kingdom of Saudi Arabia under Commercial Registration No. 1010858626, with its registered office at 4261 Abdullah Bin Al Arqam, Al Muhammadiyah District, Riyadh 12361, Saudi Arabia (Secondary No. 6999) (hereinafter referred to as “DSC”, “we”, “us”, or “our”), is committed to protecting the privacy and personal data of individuals who interact with our website at dsc.com.sa (the “Website”).
This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you access or use our Website, including when you submit inquiries through our Mandate Inquiry, Partnership Alignment, or General Contact pathways.
DSC operates a mandate-led business model involving cross-border trade, investment, capital deployment, and development execution. Given the nature of our engagements, we treat all information submitted through our Website with the highest levels of discretion, confidentiality, and care.
By accessing or using the Website, you acknowledge that you have read and understood this Privacy Policy.
2. Data We Collect
2.1 Data You Provide Directly
When you interact with our Website through our structured contact pathways, we may collect personal data through forms built using the MetForm plugin. The specific fields collected across our Mandate Inquiry, Partnership Alignment, and General Contact forms include but are not limited to:
- Full Name
- Email Address
- Organization / Institution Name
- Position / Title
- Nature of Inquiry / Area of Capability
- Country / Jurisdiction
- Message / Additional Details
Form submissions are stored in the WordPress MySQL database hosted on our dedicated server. No external storage or third-party integration is used.
2.2 Data Collected Automatically
When you visit our Website, the following data is automatically logged by our server infrastructure:
- IP address (anonymized after 7 days)
- HTTP method, requested URL, response code
- Browser User-Agent string
- Referring URL
- Timestamp
Server logs are stored locally on the dedicated server and are not shared with any third party. No third-party analytics, marketing pixels, or session recording tools are currently installed on the Website.
2.3 Special Categories of Data
DSC does not collect special categories of personal data (such as government-issued identification numbers, financial account details, or health information) through the Website. Such data is only collected where required post-engagement under controlled conditions and separate legal agreements.
3. Purpose of Data Processing
Purpose | Description |
Mandate Inquiry Assessment | To review the nature, scope, and alignment of submitted mandate inquiries with DSC’s operating model. |
Partnership Evaluation | To assess the capability, governance maturity, and alignment of potential delivery partners. |
General Communication | To respond to non-mandate correspondence, institutional introductions, and exploratory outreach. |
Legal & Regulatory Compliance | To comply with applicable laws, regulations, and legal processes. |
Security | To protect our Website, systems, and data from unauthorized access, misuse, or security threats. |
4. Lawful Basis for Processing
Legitimate Interest: Processing is necessary for DSC’s legitimate interests in evaluating mandate inquiries, assessing partnerships, and operating our business, provided such interests are not overridden by your rights and freedoms.
Consent: Where you have voluntarily submitted your data through one of our contact forms, your submission constitutes consent to processing for the stated purposes.
Legal Obligation: Where processing is necessary to comply with a legal obligation under the laws of the Kingdom of Saudi Arabia.
Contractual Necessity: Where processing is necessary for the performance or negotiation of a mandate engagement or partnership agreement.
5. Cookies & Tracking Technologies
Our Website uses the following cookies, all of which are essential or functional:
Cookie Name | Purpose | Type | Duration | Party |
wordpress_logged_in_[hash] | Authentication | Essential | Session | First-party |
wordpress_sec_[hash] | Security token | Essential | Session | First-party |
wp-settings-[userID] | UI preferences | Functional | 1 year | First-party |
PHPSESSID | Session management | Essential | Session | First-party |
No third-party analytics, marketing, or advertising cookies are currently in use. No cookie consent banner is currently implemented as only essential cookies are present. Should non-essential cookies be added in the future, a compliant cookie consent mechanism will be implemented prior to deployment.
You may disable cookies through your browser settings. Disabling essential cookies may affect Website functionality.
6. Third-Party Sharing
DSC does not sell your personal data. Currently, no third-party services access or process user data. All data processing occurs on our dedicated server.
Recipient Category | Purpose |
Email Service Provider | For sending automated email notifications related to form submissions. |
IT & Security Providers | For system maintenance, monitoring, and security assessments. |
Legal & Regulatory Authorities | Where required by law, regulation, or legal process. |
DSC does not share submitted inquiry data with external delivery partners without a formally executed Non-Disclosure Agreement (NDA) or mandate agreement.
7. Cross-Border Data Transfers
DSC is headquartered in Saudi Arabia. Our Website is hosted on servers located outside the Kingdom of Saudi Arabia (currently within the European Union). As a result, user data — including form submissions and server logs — is transferred to and processed outside Saudi Arabia.
Where such transfers occur, we ensure appropriate safeguards are in place, including:
- Binding data processing agreements with our hosting provider
- Encryption of data in transit and at rest
- Restricted access controls and regular security assessments
Such transfers are conducted in compliance with the Saudi Personal Data Protection Law (PDPL).
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
Scenario | Retention Period |
Declined / Inactive Mandate Inquiries | 12 months from date of submission |
Declined / Inactive Partnership Inquiries | 12 months from date of submission |
General Contact Submissions | 6 months from date of submission |
Active Mandate Data | Duration of the mandate plus 5 years for legal and regulatory record-keeping |
Upon expiration of the retention period, personal data is securely deleted or anonymized.
9. Your Rights
Under the Saudi Personal Data Protection Law (PDPL), you have the following rights:
Right of Access — to request a copy of the personal data we hold about you.
Right of Rectification — to request correction of inaccurate or incomplete data.
Right of Erasure — to request deletion of your personal data where there is no compelling reason to continue processing.
Right to Restrict Processing — to request that we limit how we use your data.
Right to Object — to object to data processing based on legitimate interests.
Right to Data Portability — to request your data in a structured, commonly used, machine-readable format.
Right to Withdraw Consent — to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise any of these rights, please contact us at: legal@dsc.com.sa
We will respond to your request within 30 calendar days of receipt.
10. Data Security
DSC implements appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit and at rest
- Role-based access controls limiting data access to authorized personnel
- Multi-factor authentication for administrator accounts
- Regular security assessments and monitoring
- Routine automated backups with periodic restore testing
- Confidentiality obligations for all employees and contractors with data access
Given the sensitive and high-consequence nature of information submitted through DSC’s mandate and partnership inquiry pathways, we apply heightened security protocols to this category of data.
While we take all reasonable precautions, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
11. Children’s Privacy
This Website is not intended for individuals under the age of 18.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The “Last Updated” date at the top will be revised accordingly. Material changes will be communicated through a prominent notice on the Website.
13. Contact Us
Development Solutions Company LLC
شركة حلول التنمية للخدمات التجارية
CR No. 1010858626
4261 Abdullah Bin Al Arqam, Al Muhammadiyah District, Riyadh 12361, Saudi Arabia (Secondary No. 6999)
Email: legal@dsc.com.sa
This Privacy Policy is governed by the laws of the Kingdom of Saudi Arabia.