What we collect, and what we do with it.

Yalla Sales Pro Est., National Unified Number 7037943532, based in Jeddah, Saudi Arabia, decides how the personal data collected through this website is handled.

If you want to reach us about anything on this page, the contact details are at the bottom.

Through the contact form: your name, business name, sector, email address, phone number, and whatever you write in the message field.

Through the booking calendar: the same contact details, plus the date and time you select for a diagnosis call.

Through the Growth Scorecard: your answers to the assessment questions, and the name, business name, email address and phone number you give to see your full result.

Automatically: the standard technical information any web server receives, such as your IP address, your browser and device type, and the page you asked for. Your IP address is held briefly in the server's memory to stop the forms being flooded by automated submissions. It is not written to our database and it is not linked to your enquiry.

There is no analytics or advertising tracking on this site at present. If any is switched on later, this page will name it before it goes live.

To reply to you. This is the main reason, and for most visitors it is the only one.

To prepare for and run a diagnosis call you booked.

To produce and send your Growth Scorecard result.

To keep a record of enquiries so that no one is left without a response and we can see how quickly we reply.

In each case we are either taking steps you asked for before entering into an agreement, performing an agreement already in place, or acting on our legitimate interest in running and improving the business. Where we ever rely on your consent instead, we will ask for it plainly and you can withdraw it.

We do not sell your data, and we do not share it with advertisers or data brokers.

We do not add you to a marketing list because you sent an enquiry. If we ever offer a mailing list, it will be something you opt into deliberately.

We do not ask for financial details, identity documents or health information through this website. If a message or an email appears to come from us asking for any of those, it did not come from us.

Two, and only two. Both process data on our instructions only.

Hostinger hosts this website and the database behind it, so enquiries, bookings and Growth Scorecard responses are stored on their servers.

Google delivers our email. When we send you a booking confirmation, Google handles your name, your email address and the contents of that message.

Both may process data on servers outside Saudi Arabia.

There is nothing else. The typeface this site uses is served from our own domain rather than fetched from Google Fonts, so loading a page does not tell anyone else that you visited. The articles in Insights are stored in our own database, not with an outside publishing service. No advertising or analytics tool is running. If any of that changes, this section changes first.

An enquiry, booking or Growth Scorecard response that does not lead to an engagement is kept for twenty four months from our last contact with you, then deleted. Two years is long enough that we recognise you if you come back, and short enough that we are not holding contact details for a conversation that ended.

Where you become a client, we keep the records of the engagement for as long as it runs and for twenty four months afterwards, except where Saudi law requires a record to be kept for longer, which applies mainly to accounting and tax documents.

You can ask us to delete your data sooner than any of this, and we will, unless we are required to keep it.

Under Saudi Arabia's Personal Data Protection Law you can ask us what personal data we hold about you, ask for a copy of it, ask us to correct it if it is wrong, and ask us to delete it.

You can also object to how we are using it, and withdraw consent where our use of it rests on your consent.

Email us and we will respond. We will not make it difficult, and we will not charge you for it.

The site is served over HTTPS. Form submissions are checked on our servers before anything is stored, and every database query is written so that what you type is treated as data and never as a command.

The database has no public address and no browser-visible key. The only credentials that reach it live on our server, so there is no way to query it from a web page at all.

No system is perfect. If we ever become aware of a breach affecting your data, we will tell you and the relevant authority as required.

Browsing this site sets no cookies at all. There is no tracking cookie, no advertising cookie and no analytics cookie, which is why you are not being asked to dismiss a consent banner.

The one cookie this site can set belongs to the private area our own staff sign into. It only exists once someone signs in there, it holds a signed session and nothing about you, and an ordinary visitor never receives it.

If analytics or advertising tools are switched on later, this section will be updated and you will be asked for consent where the law requires it.

If we change how we handle personal data, we will update this page and change the review date at the top.