Cookies Policy

Version: 1.1

Effective Date: 25/08/2025

Last Update: 01/10/2025

1. Definition

Cookies are small text files stored in your browser/device when you visit our Website. They enable core functions, improve performance, personalize certain settings, and help us gather limited interaction data in accordance with applicable regulations. This Policy also covers similar technologies (LocalStorage, SessionStorage).

2. Scope

This Policy applies to all cookies and similar technologies operated through this Website and related sub domains. In case of a material conflict between this Policy and the Privacy Policy, the policy offering greater protection to your rights prevails.

3. Legal Bases

We rely on the following legal bases under the Saudi Personal Data Protection Law (PDPL):

  • Strictly Necessary Cookies: Contract performance or legitimate interest (without overriding your rights).
  • Preference/Functional Cookies: Explicit consent or legitimate interest only if low risk and not cross site tracking.
  • Analytics Cookies: Prior explicit consent (opt in).
4. Transparency & Consent
  • Analytics scripts are blocked until you expressly consent.
  • “Reject Non Essential” is equal in prominence to “Accept All”.
  • You may modify or withdraw consent anytime via [Cookie Preference Center].
  • We log (consent ID, categories granted, timestamp, policy version) solely for compliance.
5. Cookie Categories

Necessary / Strictly Necessary

  • Purpose: Core site operation (authentication, session continuity, CSRF protection, load balancing, fraud prevention).
  • Storage: Session or minimal functional duration.
  • Disabling: It cannot be disabled within the system because it is essential for providing the service.
  • Not used for analytics or marketing.

Preferences / Functional

  • Purpose: Remember language, display preferences, accessibility settings, UI configuration.
  • Storage: 1 month (or less, depending on actual need).
  • If disabled: Reverts to defaults.
  • Not used for analytics or marketing.

Analytics / Performance

  • Purpose: Measure visits, performance, error rates, popular pages, general usage patterns.
  • Collected (pseudonymized where possible): Masked IP, session/device identifier, timestamps.
  • Storage: 1 month (review periodically).
  • You can disable it via Cookie Preference Center
  • Not repurposed for marketing without separate consent.
6. How to Control Cookies
7. Data Sharing
  • We only share (or allow access to) cookie-derived data with service providers under binding data processing agreements ensuring confidentiality, restricted use, and security.
  • No data is sold.
8. Security
  • Encrypted transport (HTTPS/TLS).
  • Role-based internal access control.
  • Tag governance audits to prevent unauthorized scripts.
  • Data minimization (e.g., IP truncation for analytics).
9. Retention & Deletion

Each cookie is retained for a specific duration related to its function. After this period ends, it is automatically deleted upon expiration or regenerated after a new request.

10. Your Rights

According to PDPL you may:

  • Request information on categories of personal data processed.
  • Obtain a record of your consent preferences (within technical limits).
  • Request correction of inaccurate preference records.
  • Withdraw consent for optional categories.
11. Material Changes

We will notify you if we:

  • Add a new category.
  • Change an existing purpose incompatibly.
  • Introduce a new impactful third party. Renewed consent may be requested for material changes. Latest update date is shown at the top.
12. Contact / Data Protection Officer

For inquiries: [dpo@executech.sa]

13. User Responsibilities

You remain responsible for maintaining secure browser settings, safeguarding passwords, and reviewing this Policy periodically.