Privacy
Privacy notice
Last updated: 5 November 2026
This notice explains what personal data this site handles, why, and what your rights are under the Saudi Personal Data Protection Law (PDPL). The short version: the site has no accounts, no tracking and no database.
- No cookies or tracking
- The site doesn't store form data
- I don't sell your data
Who is responsible for your data
Burooz is the controller of personal data sent through this site. You can find how to reach me at the end of this page.
What I collect
Only what you choose to write in the contact form: your name, your company if you add it, the services, budget and timeline you pick, and your message.
How your message reaches me
The form sends nothing to this site's server and stores nothing. When you press send, your browser opens WhatsApp or your email app with the message ready, and you decide whether to send it. Once sent, it falls under the privacy terms of WhatsApp or your email provider, and may be stored outside the Kingdom.
Why I use it
To reply to your enquiry, prepare a quote and, if we agree, deliver your project. The legal basis is your consent when you choose to send the message, then our agreement if we start working together. You can withdraw your consent at any time.
How long I keep it
I keep messages for as long as I need them to reply to you and, if we work together, for the length of the project and any records the law requires me to keep. After that I delete them, or sooner if you ask, unless the law requires me to keep them.
Who I share it with
I don't sell your data or share it for marketing. It only reaches the service provider that delivers your message, or a competent authority where the law requires it.
What your browser saves
The site uses no cookies, analytics, ads or third-party scripts, and its fonts load from the site itself. Your browser saves just two small settings: your light or dark theme choice, and a note that you've seen the opening animation this session. Neither leaves your device.
Server and security
The site runs over an encrypted connection (HTTPS), and its server is set up without visitor access logs. Your device's IP address is used only to deliver the page to you. If a breach affects your data, I will notify the Saudi Data & AI Authority (SDAIA) within 72 hours where the law requires it, and tell you if it could harm you.
Your rights
Under the law, you have the right to:
- Know the legal basis and purpose for collecting your data
- Access your data
- Get a copy of it in a clear, readable format
- Ask for it to be corrected, completed or updated
- Ask for it to be destroyed once it is no longer needed
- Withdraw your consent at any time
Send me your request and I will reply within 30 days.
Complaints
If you feel I have mishandled your data, please tell me first. You also have the right to complain to SDAIA, the authority that oversees the law.
Changes to this notice
If this notice changes, I update the date at the top of the page.