Last Reviewed
June 18, 2025

1. Introduction & Controller
Kolaghassi Development Company ("KDC", "we", "us", or "our") operates globally, headquartered at 6786 Wadi Al Shohada, Ar Rabwah, Riyadh 12815, Saudi Arabia. This policy explains how we collect, use, protect, and share your personal data through our website kdevco.com and related services. KDC is the data controller.

 

2. Data Protection Contact
If you have questions or wish to exercise your data rights, contact us at:
Email: hello@kdevco.com
Mail: 6786 Wadi Al Shohada, Ar Rabwah, Riyadh 12815, KSA

 

3. Jurisdictional Scope & Legal Basis
We process personal data under one or more of the following grounds:
- Compliance with Saudi PDPL
- EU GDPR (for EEA and UK residents)
- U.S. privacy frameworks (as applicable)

 

4. Data We Collect
We collect:
- Identifiers
- Contact information
- Technical data
- Marketing preferences
- Event/recruitment data
- Background/compliance information
- Financial data

 

5. Collection Methods
We collect your data through direct interactions, automated technologies like cookies, and from third-party or public sources.

 

6. Purposes of Use
We use data to:
- Respond to inquiries
- Manage services and events
- Personalize communications
- Conduct client onboarding
- Recruit and manage applications
- Comply with law and mitigate risks

 

7. Cookies & Tracking
Our site uses cookies for analytics and personalization. You can manage cookie preferences via your browser or our cookie banner.

 

8. Disclosure of Data
We may share data with group companies, service providers, event organisers, successors, or legal/regulatory authorities. We do not sell your data.

 

9. International Transfers
Your data may be transferred internationally, with safeguards like Standard Contractual Clauses and local data protection requirements.

 

10. Security Measures
We apply security protocols, access restrictions, and encrypted storage. All access is on a need-to-know basis under confidentiality obligations.

 

11. Data Retention
We retain data only as long as necessary to meet legal, regulatory, and operational requirements.

 

12. Individuals’ Rights
You may request access, rectification, deletion, restriction, objection, and portability of your data. Rights vary by jurisdiction.

 

13. Special Categories
We process sensitive data (e.g., health or dietary needs) only with explicit consent and only for the specified purpose.

 

14. Children’s Data
Our services are not intended for children under 18. Data inadvertently collected will be deleted unless legally required.

 

15. Third-Party Links
Our website may link to third-party sites. Their data practices are not governed by this policy.

 

16. Policy Updates
We review and update this policy regularly. Significant changes will be notified on the website or via email.

 

17. Governing Law
This policy is governed by Saudi PDPL, EU GDPR, UK GDPR, and relevant U.S. law.