Legal

Privacy policy

This policy explains what personal data Noya collects through this website, why, and the rights you have under the Saudi Personal Data Protection Law (PDPL).

Draft legal text for review by Noya's legal counsel.Last updated 31 October 2026

1. Who we are

The controller of your personal data is شركة هالة الذوبان (Halat Aldhuban, trading as Noya), a company registered in the Kingdom of Saudi Arabia. Contact: orders@noyasa.com.

2. What we collect

Enquiry form: what your enquiry is about, your name, phone number, email address, city, event date and number of guests (both optional) and your message.
Consent record: the time, page and language when you submitted the form.
Technical data: essential cookies and basic server logs needed to run and secure the site.

3. Why we use it, and on what basis

To respond to your enquiry and prepare a proposal — based on your consent.
To keep the site secure and working — based on our legitimate interest in operating the service.
Analytics and marketing cookies — only with your consent through the cookie banner.

4. Required and optional fields

The event date, the number of guests and the city are optional. Without the other fields we cannot reply to your enquiry.

5. Who receives your data

The Noya team, and service providers acting on our instructions: website hosting, email delivery and, where used, a customer relationship management tool. We do not sell personal data.

6. Transfers outside Saudi Arabia

Some of our providers may process data outside the Kingdom. Where this happens we rely on the safeguards permitted by the PDPL and its Transfer Regulations, such as SDAIA Standard Contractual Clauses, and we transfer only what is necessary.

7. How long we keep it

Enquiries that do not lead to an order: deleted after 24 months.
Enquiries that become orders: kept with our commercial records for the period required by law.
Server logs: 90 days.

8. Your rights

To be informed about how your data is processed.
To access your data and receive a copy in a readable format.
To request correction of inaccurate data.
To request destruction of data we no longer need.
To withdraw your consent at any time.
To lodge a complaint with the Saudi Data & AI Authority (SDAIA).

To exercise any right, email orders@noyasa.com. We respond within 30 days.

9. Security

The site is served over HTTPS, access to enquiries is limited to named staff, and we protect forms against spam and abuse.

10. Changes and language

We will post any changes on this page with a new date. This policy is available in Arabic and English; the Arabic version prevails.