Home /Privacy policy

Privacy policy

Last updated: 30 June 2026

Introduction and Scope

At Subul (subulagency.com), we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website, contact us, or engage our digital marketing and web development services.

This policy applies to all visitors to our website as well as our current and prospective clients. By using our website, you agree to the practices described here. We encourage you to read it carefully to understand your rights and our responsibilities toward your data.

What Data We Collect

We collect different types of personal data depending on how you interact with our website and services, including:

  • Contact details: your name, email address, phone number, and company or organization name.
  • Project details: information you share through our contact forms or quote requests, such as a description of your project, your requirements, and your estimated budget.
  • Newsletter and lead data: your email address and any preferences you provide when subscribing to our updates.
  • Technical and usage data: your IP address, browser and device type, operating system, the pages you visit, and time spent browsing, collected automatically through cookies and similar technologies.

How We Collect Your Data

We obtain your personal data through several sources, primarily:

  • Directly from you: when you complete a contact form, request a quote, subscribe to our newsletter, or email us.
  • Automatically as you browse: through cookies and analytics tools that record how you interact with our website.
  • From third parties: such as advertising and analytics platforms that may provide us with statistical data about the performance of our campaigns.

Purposes of Processing

We process your personal data for specific and legitimate purposes, including:

  • Responding to your inquiries and requests and providing quotes.
  • Delivering and managing our digital marketing and web development services.
  • Sending updates, marketing content, and newsletters based on your consent.
  • Analyzing website performance and improving user experience and content quality.
  • Measuring the effectiveness of our advertising campaigns and improving their targeting.
  • Complying with our legal and regulatory obligations in Saudi Arabia.

Legal Basis for Processing

We rely on clear legal grounds to process your data, in line with the Personal Data Protection Law (PDPL) of Saudi Arabia, including:

  • Your consent: when you subscribe to our newsletter or accept advertising and analytics cookies.
  • Performance of a contract: when we deliver the services you requested or take steps to enter into an agreement with you.
  • Legitimate interest: to improve our services and protect our website, without overriding your fundamental rights.
  • Legal obligation: where a legal requirement obliges us to process certain data.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience, analyze website performance, and measure the effectiveness of our advertising campaigns. Advertising and analytics tracking are activated based on your consent through the consent banner shown when you visit.

For full details about the types we use and how to manage them, please review our Cookie Policy.

Third-Party Services and Data Sharing

We do not sell your personal data to anyone. However, we may share it with trusted service providers who help us operate our website and deliver our services, for specific purposes and under safeguards that protect your privacy. These parties include:

  • Analytics and advertising platforms: Google (GA4 analytics and Google Ads), Meta (Facebook and Instagram), Snapchat, and TikTok, for performance measurement and campaign management.
  • Hosting and content delivery providers: such as Cloudflare, to ensure the security and speed of our website.

We also use server-side tracking (Conversions API) to measure conversions accurately, with match parameters activated only based on your consent.

Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described in this policy, or for any period required by the applicable laws and regulations in Saudi Arabia.

When your data is no longer needed, we securely delete or anonymize it. We may retain certain data for a longer period where there is a legal obligation or to protect our legitimate rights.

Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, disclosure, or alteration. These measures include encrypted communications, access controls, and regular reviews of our systems.

While we strive to apply best practices, no method of transmission over the internet can be guaranteed to be completely secure, and we encourage you to be cautious when sharing sensitive information.

Your Rights Under the PDPL

The Personal Data Protection Law (PDPL) of Saudi Arabia grants you a set of rights regarding your data, including:

  • The right to be informed: to know the legal basis and purposes for collecting and processing your data.
  • The right to access: to obtain a copy of the personal data we hold about you.
  • The right to correction: to request the amendment or update of inaccurate or incomplete data.
  • The right to deletion: to request the deletion of your data when it is no longer needed.
  • The right to withdraw consent: to withdraw your consent to processing at any time, without retroactive effect.
  • The right to object: to object to the processing of your data for certain purposes, such as direct marketing.

To exercise any of these rights, please contact us at [email protected], and we will respond to your request within the statutory period.

International Data Transfers

Some of your data may be processed or stored on servers belonging to service providers located outside Saudi Arabia, such as analytics, advertising, and hosting platforms.

In all cases, we ensure that any international transfer of data is carried out in accordance with the requirements of the PDPL and with appropriate safeguards in place to protect the privacy of your data.

Children's Data

Our website and services are intended for businesses and adults. We do not knowingly collect personal data from children under the legal age.

If we become aware that we have collected data relating to a child without the necessary parental consent, we will take the steps required to delete it as soon as possible.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or regulatory requirements. When we make material changes, we will publish the updated version on this page and update the last updated date.

We encourage you to review this page periodically to stay informed about how we protect your data.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise any of your rights, we would be glad to hear from you through: