Privacy Policy

Who we are

Thoughts House (بيت الأفكار) is the controller responsible for the personal data described in this policy. Address: King Khaled St, Al 'Adamah, Dammam 32242, Saudi Arabia. Email: sales@thoughtshouse.com. Phone: +966 54 102 2995.

What we collect

Contact form: your name, company name (optional), email address and the message you write.

WhatsApp, email and phone: if you contact us this way, we receive the details you share, such as your name, number and message.

Technical data: like any website, our hosting provider processes your IP address and basic request information (such as browser type and the page requested) to deliver the site and keep it secure.

We do not use cookies, advertising or analytics trackers. The chat assistant on this site gives preset answers inside your browser; it does not send or store what you type.

We do not ask for sensitive data. Please do not include it in your messages.

How we collect it

Directly from you, when you submit the contact form, email us, call us or message us on WhatsApp, and automatically through the hosting provider when you visit the site. We do not buy personal data or collect it from other sources.

Why we use it

We use the information you send us only to answer your enquiry, prepare quotations and proposals, and provide the services you ask for. The legal basis is your consent when you contact us, and our legitimate interest in responding to business enquiries.

We do not sell your personal data, use it for marketing without your consent, or use it for automated decision-making.

Who receives it

Contact form delivery: messages are delivered to our inbox by FormSubmit (formsubmit.co).

Website hosting: the site is hosted by Vercel.

Fonts and map: pages load fonts from Google Fonts, and the contact section shows an embedded Google Map, so your browser connects to Google's servers.

WhatsApp: messages you send us on WhatsApp are handled by WhatsApp (Meta) under its own privacy policy.

Some of these providers process data outside Saudi Arabia. We use them only for the purposes above and in line with the PDPL's requirements for transferring personal data abroad. We may also disclose data where Saudi law requires it.

How we store it

Enquiries are kept in our company email accounts and, when they lead to a project, in our business records. Access is limited to the staff who handle your enquiry.

How long we keep it and how we destroy it

If an enquiry does not lead to business, we delete it once it is resolved and no later than 24 months after our last contact with you. If it leads to a business relationship, we keep it for as long as the relationship lasts and as long as Saudi law requires us to keep related business and tax records.

When the retention period ends, we permanently delete the messages and their copies from our email accounts and records.

Your rights

Under the PDPL you have the right to be informed about how your data is processed, to access and obtain a copy of it, to have it corrected or completed, and to have it destroyed when it is no longer needed. You can also withdraw your consent at any time.

To make a request, email sales@thoughtshouse.com. We may ask you to confirm your identity, and we respond within 30 days. You may also raise a complaint with the Saudi Data & AI Authority (SDAIA).

Security

The website is served only over encrypted HTTPS connections with security headers, and access to enquiry messages is limited to the staff who need them. If a breach affects your personal data, we will notify SDAIA and, where required, you, as the PDPL requires.

Changes and language

We may update this policy. The date at the top shows when it last changed.

This policy is published in Arabic and English. If the two versions differ, the Arabic version prevails.