PDPL Compliance

Last updated: March 14, 2026

1. About PDPL

The Personal Data Protection Law (PDPL) is the Kingdom of Saudi Arabia's comprehensive data protection regulation, issued by Royal Decree M/19 dated 9/2/1443H. It establishes the rights of individuals regarding their personal data and the obligations of entities that collect and process such data.

2. Our Commitment

Influx|انسياب is fully committed to compliance with PDPL. As a Saudi-based ITSM platform, we recognize that protecting personal data is both a legal obligation and a core component of the trust our clients place in us.

3. Data We Process

Through our website, we collect and process the following personal data only when you submit a demo request:

  • Full name
  • Work email address
  • Mobile phone number
  • Company name and size

4. Legal Basis for Processing

We process your personal data based on:

  • Explicit consent — You provide consent through the checkbox on our demo request form before submission
  • Legitimate interest — To respond to your inquiry and provide the services you requested

5. Data Subject Rights

Under PDPL, you have the following rights which we fully honor:

  • Right to be informed — Know what data we collect and why
  • Right of access — Request a copy of the personal data we hold about you
  • Right to correction — Request correction of inaccurate or incomplete data
  • Right to deletion — Request deletion of your personal data when no longer necessary
  • Right to withdraw consent — Withdraw your consent at any time without affecting the lawfulness of prior processing
  • Right to data portability — Receive your data in a structured, machine-readable format
  • Right to object — Object to processing of your data for direct marketing purposes

6. Data Transfers

We use third-party services (MailerSend for email, Zoho CRM for lead management) that may process data outside the Kingdom of Saudi Arabia. Such transfers are conducted with your explicit consent and in accordance with PDPL requirements for cross-border data transfers.

7. Data Protection Measures

We implement the following measures to protect your personal data:

  • TLS encryption for all data in transit
  • Access controls limiting data access to authorized personnel only
  • Regular review of data processing activities
  • Secure deletion of data upon request or when no longer needed

8. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights, we will notify the Saudi Data and Artificial Intelligence Authority (SDAIA) and affected individuals in accordance with PDPL timelines and requirements.

9. Opt-Out

You can opt out of marketing communications at any time by visiting our unsubscribe page or contacting us directly.

10. Contact the Data Protection Officer

For any questions regarding PDPL compliance or to exercise your data subject rights, contact us at:

Email: privacy@influxsuite.com