Privacy Policy
Who we are
This website belongs to Expertise House Limited Company (Arabic: شركة اكسبرتس هاوس المحدودة), Commercial Registration No. 7034690904, a business-to-business printing, promotional gifts, exhibitions and signage company in Riyadh, Saudi Arabia. Expertise House Limited Company is the controller of the personal data described in this policy.
Privacy and personal-data requests: Privacy@expertishouse.com. Sales enquiries: sales@expertishouse.com, telephone +966 56 454 9048. Address: Expertise House, Riyadh, Al Malaz, University Street, Elegant Center.
This policy is written under the Saudi Personal Data Protection Law (PDPL) and its implementing regulations.
What this website is
A catalogue and a quotation channel for businesses. It does not publish prices, has no checkout, takes no payment and does not ask you to create an account.
What we collect, and when
Only when you send a request for quotation: your company name, your name, your email address, your telephone number, the message you write (up to 4,000 characters), the items in your Quote Basket, the language of the page, your confirmation that we may use these details to answer you, and any files you attach (up to 5 files of 10 MB: PDF, PNG, JPEG or WebP). We give your request a reference number.
For protection against abuse, the server also keeps a one-way hash of your network address (not the address itself) and your browser's user-agent text with each request, and counts recent requests per hashed address to stop flooding.
The Quote Basket lives only in your own browser (local storage, for up to 30 days) until you include it in a request. The assistant Orabi answers from our published pages inside your browser; what you type to it is not sent to us. If you ask Orabi to prepare a request, the details you give are held in your browser tab only until you open the request form, where you review them and decide whether to send.
We use no analytics, no advertising tags and no third-party scripts, and the site sets no cookies.
Why we use it, and our legal basis
To read your request, ask you questions about it, prepare a quotation and follow the enquiry up.
We rely on your consent, which you give by ticking the consent box before you send a request. You may withdraw it at any time by writing to Privacy@expertishouse.com; withdrawal does not affect processing already carried out, and afterwards we stop using your details for the enquiry unless the law requires or allows us to keep them.
To keep the website secure against abuse (the hashed network address and the request counts), we rely on our legitimate interest in protecting the service, which does not override your rights.
Who can see it
Our sales team receives each request by email and can read the saved copy. Our website hosting and email service providers process the data on our behalf. These providers may be located inside or outside the Kingdom; where the PDPL sets conditions for processing or transferring personal data outside the Kingdom, we apply them.
We do not sell your details and we do not send them to advertisers. We may disclose personal data to a competent authority where the law requires it.
How long we keep it
We keep a request, its attachments and our copies of it for two years from the last documented interaction concerning that specific request, and then delete them securely, unless the law requires us to keep records for longer. A new, unrelated request from you does not extend the retention of an earlier one.
These copies are the ones held on our servers, in our e-mail, in WhatsApp conversations about the request and on staff devices, and in backups. Backup copies are not restored for ordinary use and are replaced when they expire under the backup schedule of our hosting provider.
A Quote Basket in your browser expires by itself after 30 days; you can also clear it at any time.
Your choices and rights
You can ask to access, correct or delete the personal data you sent us by writing to Privacy@expertishouse.com and quoting your reference. We will respond within 30 days, subject to the rules the law sets (for example, records we are required to keep).
If you are not satisfied with our response, you may contact the competent authority for personal data protection in the Kingdom: the Saudi Data & AI Authority (SDAIA).
How we protect it
Requests are sent over an encrypted connection and saved in private storage that is not reachable from the web; attachments are checked by content and stored under generated names; access is limited to authorised staff. No system is perfectly secure, and we do not claim certification.
Links to other sites
Our pages link to social networks, maps, WhatsApp and our group companies' websites. Those services have their own policies.
Changes
This is version 1.0 of the Privacy Policy. It takes effect on the official launch of the website. We will update this page when what we do changes, and we show the date of the last update at the top of the page.