1. Definition
Cookies are small text files stored in your browser/device when you visit our Website. They enable
core functions, improve performance, personalize certain settings, and help us gather limited
interaction data in accordance with applicable regulations. This Policy also covers similar
technologies (LocalStorage, SessionStorage).
2. Scope
This Policy applies to all cookies and similar technologies operated through this Website and
related sub domains. In case of a material conflict between this Policy and the Privacy Policy, the
policy offering greater protection to your rights prevails.
3. Legal Bases
We rely on the following legal bases under the Saudi Personal Data Protection Law (PDPL):
-
Strictly Necessary Cookies: Contract performance or legitimate interest (without overriding
your rights).
-
Preference/Functional Cookies: Explicit consent or legitimate interest only if
low risk and not cross site tracking.
-
Analytics Cookies: Prior explicit consent (opt in).
4. Transparency & Consent
-
Analytics scripts are blocked until you expressly consent.
-
“Reject Non Essential” is equal in prominence to “Accept All”.
-
You may modify or withdraw consent anytime via [Cookie Preference Center].
-
We log (consent ID, categories granted, timestamp, policy version) solely for compliance.
5. Cookie Categories
Necessary / Strictly Necessary
-
Purpose: Core site operation (authentication, session continuity, CSRF protection, load
balancing, fraud prevention).
-
Storage: Session or minimal functional duration.
-
Disabling: It cannot be disabled within the system because it is essential for providing the
service.
-
Not used for analytics or marketing.
Preferences / Functional
-
Purpose: Remember language, display preferences, accessibility settings, UI configuration.
-
Storage: 1 month (or less, depending on actual need).
-
If disabled: Reverts to defaults.
-
Not used for analytics or marketing.
Analytics / Performance
-
Purpose: Measure visits, performance, error rates, popular pages, general usage patterns.
-
Collected (pseudonymized where possible): Masked IP, session/device identifier, timestamps.
-
Storage: 1 month (review periodically).
-
You can disable it via Cookie Preference Center
-
Not repurposed for marketing without separate consent.
6. How to Control Cookies
7. Data Sharing
-
We only share (or allow access to) cookie-derived data with service providers under binding data
processing agreements ensuring confidentiality, restricted use, and security.
- No data is sold.
8. Security
-
Encrypted transport (HTTPS/TLS).
-
Role-based internal access control.
-
Tag governance audits to prevent unauthorized scripts.
-
Data minimization (e.g., IP truncation for analytics).
9. Retention & Deletion
Each cookie is retained for a specific duration related to its function. After this period ends, it
is automatically deleted upon expiration or regenerated after a new request.
10. Your Rights
According to PDPL you may:
- Request information on categories of personal data processed.
- Obtain a record of your consent preferences (within technical limits).
- Request correction of inaccurate preference records.
- Withdraw consent for optional categories.
11. Material Changes
We will notify you if we:
- Add a new category.
- Change an existing purpose incompatibly.
- Introduce a new impactful third party.
Renewed consent may be requested for material changes. Latest update date is shown at the top.
12. Contact / Data Protection Officer
For inquiries: [dpo@executech.sa]
13. User Responsibilities
You remain responsible for maintaining secure browser settings, safeguarding passwords, and reviewing
this Policy periodically.