Privacy Policy

1. Who we are and what this policy covers

saudikenz.com is operated by KENZ Saudi Commercial Ltd. Co. ("KENZ", "we", "us"). We are responsible for the personal data collected through this website.

This policy applies to this website only. Visits to our showrooms and project or supply contracts are covered by their own terms and documents.

2. The data we collect

The website has no user accounts and takes no payments. The personal data we receive directly is what you choose to send us through our forms:

• Contact form: your name, email address, phone number (optional), the subject you select and your message.
• Quotation and sample requests: your name, email address, phone number, company name (optional), your message, and the name, code and page address of the product you are asking about.

Technical data: on every visit, as with any website, our hosting provider (Vercel) processes your IP address and standard request logs (for example the page requested, time and browser type). We use this to keep the site secure and to prevent abuse, including limiting how often forms can be submitted from the same IP address.

In addition, when a page loads content from other services, those services receive your connection data (such as your IP address) directly from your browser: Google Maps and Vimeo embeds, and the image services Cloudflare and wsrv.nl. See Service providers and other parties.

3. How we use your data and on what basis

• Replying to your enquiry and preparing the quotations and samples you request: based on your request, our legitimate interest in answering it, and the steps needed before entering into a contract with you.
• Following up on a project: only within an ongoing enquiry, quotation or contract you have with us, never as open-ended marketing.
• Keeping the website secure and preventing abuse: based on our legitimate interest in protecting the site and its visitors.
• Keeping records required by law, for example for accounting: based on our legal obligations.

We do not sell your personal data, and we do not send you marketing messages unless you have separately consented to receive them.

4. How your data is sent and kept

When you submit a form, its contents are sent by email to our company inbox through Google's email service (Gmail / Google Workspace). Form submissions are not stored in a website database.

We keep enquiry emails for up to 24 months after our last communication with you. If an enquiry becomes part of a quotation or contract, we keep it for the period required by our contractual, accounting and legal obligations. At the end of the applicable period, the emails are deleted from our mailbox.

Security logs held by our hosting provider are kept only for the short period set by that provider.

5. Cookies and browser storage

This website sets no advertising or analytics cookies and runs no analytics or tracking pixels. It keeps only the following in your own browser:

• Your answer to the cookie notice, so it is not shown again.
• A list of products you recently viewed (local storage). It stays on your device and is never sent to us.
• Temporary filter and scroll position on product listings (session storage), cleared when you close the tab.

Some pages include content from other services, which connect to their provider as soon as the page loads and may set their own cookies: Vimeo video players, and Google Maps on the branches page. Their use of cookies is governed by their own privacy policies.

You can delete stored data or block cookies at any time in your browser settings. Blocking third-party cookies or content may stop the embedded maps or videos from working; the rest of the site keeps working.

6. Service providers and other parties

To run the website we rely on the following providers. Each one receives only what it needs to provide its service, which for most of them is your connection information (such as your IP address) when your browser loads content from them:

• Vercel: hosts the website and processes request logs.
• Google: delivers form submissions to our inbox by email, and provides the Google Maps embeds.
• Cloudflare: delivers our product images.
• wsrv.nl: an image-resizing service that loads product thumbnails; like any image host, it sees your IP address.
• Vimeo: plays the videos on our pages.
• Hugging Face and jsDelivr (a public content-delivery network): supply the image-analysis model and its runtime files that your browser downloads when you use the room visualizer with your own photo (your photo is not sent to them).
• WhatsApp (Meta): only if you choose to message us on WhatsApp, in which case WhatsApp's own terms and privacy policy apply.

The following providers may process data outside the Kingdom of Saudi Arabia, with hosting and processing that may take place in the United States, the European Union or other regions: Vercel, Google, Cloudflare, wsrv.nl, Vimeo, Meta (WhatsApp), Hugging Face and jsDelivr. Transfers are limited to what is necessary to provide the service you requested, and we will take the steps required by the PDPL and its implementing regulation for such transfers.

7. Room visualizer

If you upload a photo of your room to try a wallpaper, the photo is processed entirely inside your browser. It is not uploaded to our servers and we never receive it.

8. Your rights

Under the Personal Data Protection Law you have the right to:

• Be informed about how your personal data is collected and used (this policy).
• Access the personal data we hold about you.
• Obtain a copy of your personal data in a readable format.
• Ask us to correct data that is inaccurate, incomplete or out of date.
• Ask us to delete data we no longer need, unless the law requires us to keep it.
• Withdraw your consent at any time, where we rely on your consent.

To exercise any of these rights, email info@saudikenz.com. We will ask you to verify your identity only when this is reasonably necessary and proportionate. We respond within 30 days of receiving your request; where the law allows, this period may be extended by up to 30 more days, and we will tell you if it is.

If you have a complaint, you can raise it with us. You can also complain directly to the Saudi Data & AI Authority (SDAIA) through its personal data protection portal; you do not have to contact us first. Under the implementing regulation, complaints are generally to be filed within 90 days of the incident or of becoming aware of it.

9. Security

The website is served only over encrypted HTTPS connections. No method of transmission or storage is completely secure, but we take reasonable technical and organisational measures to protect your data.

10. Children

This website is not directed at children, and we do not knowingly collect personal data from them. If you believe a child has sent us personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this policy when the website or the law changes. The date at the top of this page shows when it was last updated.

12. Contact us

For any question about this policy or your personal data, contact us: