Privacy Policy

1. Scope and controller

This policy applies to personal data processed by Event Plan through event-plan.com.sa and the communication channels connected to service enquiries. Event Plan is the controller of data it receives directly for these purposes.

It does not cover external platforms reached through our links, including WhatsApp, Instagram, or TikTok, which operate under their own privacy policies.

2. Data we may collect

• Identity and contact details you provide voluntarily, such as your name, mobile number, and email address if supplied.
• Service-enquiry details, including event type, city, expected date, guest count, and any information you choose to share.
• Correspondence and follow-up records needed to answer your enquiry, prepare a proposal, and manage the client relationship.
• Basic technical logs the hosting provider may make available for operation and security, such as IP address, browser type, and access time, subject to hosting settings.

3. How we collect data

We collect data directly when you contact us or use the proposal form. The current form prepares a message in your browser and opens WhatsApp so you can review and send it; the website does not automatically transmit the form data to Event Plan before you send it.

We may also receive data from an authorised representative acting for you or your organisation where needed for an event or project enquiry.

4. Purposes and lawful basis

Depending on the circumstances, processing relies on consent, performance of or steps before a contract, a legal obligation, or a legitimate interest that does not override your rights under applicable law.

• Answering enquiries, preparing service proposals, and communicating about requested projects.
• Performing contractual obligations or taking steps at your request before entering a contract.
• Improving service quality, securing the website, preventing misuse, and managing internal operations.
• Meeting legal or regulatory duties and protecting lawful rights or claims.
• Sending marketing only where consent or another appropriate lawful basis exists, with an opt-out.

5. Disclosure and service providers

We do not sell personal data. We may disclose only what is necessary to trusted providers supporting hosting, communications, and operations, or to professional parties helping deliver a service, subject to purpose limitation and appropriate safeguards where required.

We may disclose data when required by law, in response to a valid request from a competent authority, or to protect company rights or individual safety.

6. Transfers outside Saudi Arabia

Some external communication or hosting services—such as WhatsApp when you choose to use it—may process data outside Saudi Arabia. When Event Plan transfers personal data outside the Kingdom, it follows the PDPL and the Personal Data Transfer Regulations, including applicable safeguards and assessments.

7. Retention and disposal

We retain data only as long as needed for the purpose for which it was collected, to manage the relationship and claims, and to meet legal or contractual retention requirements. Once there is no lawful need, we securely destroy or anonymise it unless the law requires longer retention.

8. Data security

We apply organisational and technical measures appropriate to the nature of the data to reduce unauthorised access, loss, alteration, or disclosure. No internet transmission can be guaranteed completely secure, so please do not enter unnecessary sensitive data in the enquiry form.

9. Your rights

Under the Saudi PDPL, your applicable rights may include being informed of the basis and purpose of collection, access, obtaining a clear copy, correction or completion, destruction when there is no lawful retention need, and withdrawal of consent where consent is the basis for processing.

To exercise a right or raise an enquiry or complaint, email info@event-plan.com.sa. We may request reasonable identity verification and will respond under applicable statutory procedures and timeframes. If your complaint remains unresolved, you may contact the competent authority through its official channels.

10. Cookies and analytics

The website currently does not use advertising cookies or third-party behavioural analytics. Technologies strictly necessary to operate or protect the website may be used. If we later add analytics or marketing tools requiring consent, we will update this policy and provide an appropriate consent mechanism before activation where required.

11. Children’s data

The website and proposal service are intended for adults and organisational representatives. We do not target the collection of children’s data through the website. If you believe a child supplied data without suitable authorisation, contact us so we can take appropriate action.

12. Updates and contact

We may update this policy when processing activities or legal requirements change. The current version and update date will be posted here. Contact: info@event-plan.com.sa, +966 50000 4259, Olaya Street, Al Olaya, Riyadh 12211, Saudi Arabia.