Last updated: July 2026
Data we may collect
This may include name, organization, commercial registration number, phone, email, enquiry content, assessment responses, notes, uploaded files, and technical data required to operate and secure the service.
Purposes of processing
- Responding to enquiries and contact requests.
- Providing consulting services and defining scope.
- Operating the readiness portal and saving drafts or files.
- Improving and securing our digital services.
- Meeting contractual and legal obligations.
Legal basis
Depending on the situation, processing may be based on consent, contractual necessity, legal obligations, or legitimate interests that do not override the data subject’s rights.
Data sharing
We do not sell personal data. Limited sharing may occur with hosting and technology providers, advisers supporting the service, or competent authorities where a lawful basis exists.
International transfers
Where technology services involve processing outside Saudi Arabia, transfers are handled in line with applicable personal-data transfer requirements.
Retention and disposal
Data is retained only as long as needed for the stated purpose and relevant contractual, professional, and legal obligations, then securely deleted or anonymized.
Security
We apply appropriate organizational and technical measures to reduce the risk of loss, damage, unauthorized access, or disclosure.
Your rights
Subject to applicable law, individuals may request information, access, correction, a copy, deletion, or withdrawal of consent where consent is the processing basis.
Cookies and technical services
The website may use essential cookies for operation and security. Any non-essential measurement tools will be managed in accordance with applicable consent requirements.
Requests and contact
For privacy requests, contact info@istmrar.com. We may verify the requester’s identity before acting.
Policy updates
We may update this policy as services or legal requirements change. The latest update date will be shown on this page.