What we collect
Contact, inquiry, meeting-preference and newsletter information you choose to provide.
MANAFA AL KHAIR UNITED CO.
This notice explains how Manafa Al Khair United Co. collects, uses, stores and shares personal data through this website. It is designed around the principles of Saudi Arabia’s Personal Data Protection Law (PDPL) and the website’s actual services and data flows.
Privacy at a glance
Contact, inquiry, meeting-preference and newsletter information you choose to provide.
To respond to requests, communicate with you, operate the website and protect it from abuse.
Newsletter marketing is optional and requires consent separate from an inquiry.
You may have rights to be informed, access, obtain, correct or request destruction of your data.
01
Manafa Al Khair United Co. respects the privacy of customers, prospective customers, website visitors and newsletter subscribers. This notice applies to personal data processed through this website, its inquiry and meeting-request forms, newsletter functions, related email communications and authorized administration tools.
We aim to handle personal data responsibly, transparently and only for clear business, service, security and communication purposes. This notice should be read as a description of our current website practices, not as a guarantee that every processing activity is based on consent or that electronic systems can be risk-free.
02
Manafa Al Khair United Co. is responsible for deciding why and how personal data is processed through this website. Our contact address is Riyadh – Khurais Branch Road – Othaim Square, Saudi Arabia.
Privacy questions and requests may be sent to info@manafa-sa.com. Manafa has not published a separate Data Protection Officer contact on this website.
03
The categories below reflect information handled by the current website. Please avoid including unnecessary sensitive or confidential information in free-text messages.
Full name, email address, phone number and, if you provide it, company name.
Service interest, preferred contact method, request message, source page and chosen website language.
For Contracting and Manufacturing requests, a preferred date and time. These are preferences only and are not confirmed appointments.
Name, email, phone, language, consent wording and time, subscription status and unsubscribe or delivery-suppression records.
Hashed IP values, hashed submission tokens, limited user-agent details, source page and anti-spam or delivery-event information.
Inquiry status, assignment, internal notes, handling timestamps, campaign recipient and email-delivery records.
04
We collect information directly when you complete an inquiry, request a preferred meeting date and time, subscribe to the newsletter, unsubscribe, or communicate with Manafa. Authorized personnel may add handling notes, assignments and status updates while responding to a request.
The website also generates limited technical records when forms are submitted or emails are delivered, bounced or reported. Browser storage and cookies are used for the limited purposes described below; the current public website code does not install advertising or behavioral-analytics cookies.
05
We use personal data to receive, validate, store and respond to inquiries; discuss requested Catering, Contracting or Manufacturing services; record preferred meeting details; send receipt acknowledgements; route requests internally; and maintain operational records of follow-up.
06
Depending on the activity and as permitted by applicable Saudi law, processing may be based on your consent; steps you ask us to take in connection with an inquiry or requested service; legally permitted operational interests that do not override your rights; or compliance with legal obligations.
Consent is used where required, particularly for optional direct marketing. An inquiry can be submitted without newsletter consent. Withdrawing marketing consent does not prevent Manafa from handling an unrelated service request where another lawful basis applies.
08
The public website uses a locale cookie to remember the selected English or Arabic language. It also uses session storage to remember a newsletter-popup dismissal for the current visit, and local storage as a browser-side indication that a subscription was confirmed. A session-storage value is also used to avoid replaying the cinematic introduction during the same visit.
These small values are not used by the current implementation for advertising profiles. Authorized administrators use a secure, HTTP-only authentication cookie to access restricted management pages. Browser settings can clear local or session storage, although doing so may cause interface prompts or preferences to reappear.
10
Some technology providers may process or support access to information outside Saudi Arabia. The exact production region and every country from which these services operate are not published in this notice.
Where a transfer outside the Kingdom occurs, Manafa intends to handle it in accordance with applicable Saudi requirements governing transfers of personal data. This notice does not claim a particular transfer mechanism, country or contractual safeguard that has not been operationally confirmed.
11
Manafa retains personal data only for as long as reasonably needed for the purposes described in this notice and for applicable business, legal, recordkeeping, dispute-resolution and security needs. Relevant factors include whether an inquiry remains active, whether continued contact is expected, and whether a record is required to demonstrate consent or respect suppression.
When information is no longer required and no lawful reason requires retention, it should be securely deleted, destroyed or anonymized. Suppression information may be retained to prevent unwanted marketing from restarting. Manafa has not published fixed retention periods in this notice; those periods are governed by approved operational and legal practices.
12
The website uses measures including restricted authenticated administration, server-side validation, request-size limits, honeypot controls, rate limiting, duplicate-submission protection, hashed IP and token identifiers, and verified email-provider webhooks. Access should be limited to personnel and providers who need it for their work.
No website, transmission method or storage system can guarantee absolute security. If you believe information submitted through this website has been misused or exposed, please contact us promptly.
13
Subject to the PDPL, its implementing regulations and applicable exceptions, you may have the following rights. Their availability and scope can depend on the circumstances and legal basis for processing.
Know the purpose and legal basis for collecting and processing your personal data.
Request access to personal data held about you, subject to applicable legal limits.
Request available personal data in a readable and clear format where the law provides this right.
Ask us to correct, complete or update inaccurate or incomplete personal data.
Ask for destruction of data that is no longer needed, subject to lawful retention requirements and exceptions.
Withdraw consent where consent is the basis for processing, including newsletter marketing.
14
Email info@manafa-sa.com with a clear description of your request and the contact details you used with Manafa. We may ask for information reasonably needed to locate the relevant records, understand the request and verify identity where appropriate.
We will avoid requesting excessive identity material and will respond through an appropriate channel in accordance with applicable requirements. A request may be limited where the law permits or requires it, including to protect another person’s information.
15
Please contact Manafa first at info@manafa-sa.com so we can understand and address your concern. You may also have the right to approach the competent Saudi data-protection authority in accordance with applicable law.
Official information about Saudi personal-data rights and the PDPL is available through the Saudi Data and Artificial Intelligence Authority’s National Data Governance Platform.
Saudi data-protection information16
This is a corporate and service-request website and is not intentionally designed to collect children’s personal data. If a parent or guardian believes that a child submitted personal information improperly, they may contact us so the matter can be reviewed and appropriate action considered.
17
The website or its communications may link to external websites. Those third parties control their own privacy and security practices, and this notice does not govern their websites. Please review the relevant external notice before providing information there.
18
We may update this notice when website functions, processing practices or legal requirements change. The current version and update date will be published on this page. For material changes, we may provide additional notice where appropriate or required.
19
For privacy questions or requests, contact Manafa Al Khair United Co. at info@manafa-sa.com, or write to us at Riyadh – Khurais Branch Road – Othaim Square, Saudi Arabia.