Privacy Policy
Dynamics is operated by Wathib For Communications and Information Technology Company (Unified National Number 7032179660) of Riyadh, Saudi Arabia. In this policy "we" and "us" mean that company, and "the directory" means the site published at dynamics.sa.
We act as the data controller for the personal data described here, under the Personal Data Protection Law of the Kingdom of Saudi Arabia and its Implementing Regulations.
A directory deals with two kinds of information that are easy to confuse, so this policy keeps them apart:
- Information about you — what reaches us because you visited the site or sent us a form. Most of this policy is about that.
- Information published in the directory — the business and entity records the site exists to publish. That is covered under "What we publish about businesses and people" below, and in full in our copyright and sourcing policy.
What we collect from you
What you type into a form. The site has four public forms and each asks for only what it needs:
| Form | What it collects |
|---|---|
| Add a listing | Business name in Arabic and English, city, activities, description, address and map link, contact name, email, mobile, phone, fax, website and social profiles, and any logo, video or photographs you attach |
| Contact | Name, email, phone, subject and message |
| Report a listing | Name, email, phone, the listing URL, and what you are asking to be corrected or removed; if you report as the business owner, the entity's name and, if you add it, its landline |
| Advertise with us | Name, email, phone, your organisation's name, type and website, city, which services you are asking about, and your message |
What is recorded alongside a submission. Your IP address, your browser's user-agent string, the language you were using and the time it arrived. These are stored as private fields, are never published, and exist to make abuse of the forms traceable and to enforce our rate limits. They are not used to profile you.
Measurement data, and only after you agree. Nothing that measures your visit runs until you press Accept on the consent banner. Decline, and none of it loads at all — the site is static, so it works exactly the same either way. The measurement tools are named in the table further down.
What we do not collect. The directory has no accounts, no sign-in and no password. We do not ask for national ID numbers, dates of birth, payment card details or any of the data the Law treats as sensitive. We do not buy contact lists from data brokers, and we do not place advertising trackers.
Why we are allowed to process it
| What | Basis under the Law |
|---|---|
| Handling a listing, contact, report or advertising enquiry you sent us | Your submission is the request; processing it is necessary to answer you |
| Keeping the IP address and user-agent attached to a submission | Our legitimate interest in keeping the forms usable and abuse traceable, which does not override your rights |
| Analytics and session measurement | Your consent, given on the banner and withdrawable at any time |
| Publishing listing records | Legitimate interest in publishing a directory, together with the public availability of the underlying information — see the section on listings below |
Cookies and measurement
The pages themselves are static files and set no cookies of their own. One value is stored in your browser's local storage, named leap.consent, which records whether you accepted or declined. It contains nothing else and identifies nobody.
Pressing Accept allows these to load:
- Google Analytics 4, delivered through Cloudflare Zaraz, which measures visits, pages and rough location at city level. Zaraz loads it from Cloudflare's edge rather than from your browser, so Google receives less about you than a standard analytics tag sends.
- Microsoft Clarity, which records how pages are used — clicks, scrolling and session replays — so we can see where the directory is confusing. Its tag is never present in the page until you accept; it is injected only afterwards. Clarity masks text content by default, but a session replay is a recording of your visit, and you should decline if you would rather it did not exist.
Pressing Decline means neither is loaded and nothing is queued for later.
Changing your mind. Use the Privacy settings link in the footer of any page. It clears the stored choice and shows the banner again.
The third parties involved
These are every outside party involved in running the site. We sell your personal data to nobody, and we share it with nobody for their own marketing.
| Party | What it does | Does it run before consent? |
|---|---|---|
| Cloudflare | Hosts and delivers the site, and provides Turnstile, the challenge on our forms that separates people from bots | Yes — it is how the site is served and how the forms are protected |
| Cloudflare Zaraz | Loads Google Analytics 4 from Cloudflare's edge | No — consent only |
| Google Analytics 4 | Visit and page measurement | No — consent only |
| Microsoft Clarity | Interaction measurement and session replay | No — consent only |
| OpenFreeMap | Serves the map tiles on our map pages, from OpenStreetMap data | Yes, but only on pages showing a map, and only the tiles — no identifier is sent |
| Our email provider | Delivers the notification to our team and the acknowledgement to you | Yes, when you submit a form |
A note on Google Fonts. The directory is set in Cairo, which comes from Google Fonts — but the font files are downloaded when the site is built and served from dynamics.sa. Your browser never requests anything from Google's font servers, so no visit to this site sends your IP address to Google for a font.
We do not embed Google Maps. Where a listing offers directions, that is an ordinary link you choose to follow, and Google's own policies apply once you do.
Data leaving the Kingdom
Some of the parties above process data outside Saudi Arabia. Where that happens, we rely on the transfer conditions in the Law and its Implementing Regulations, and we restrict what leaves to what the service needs. The consent-gated tools transfer nothing at all unless you have accepted them.
How long we keep things
| What | How long |
|---|---|
| A published listing | For as long as it is published, and removed when you ask us to remove it |
| A submission that was not published | Kept while it is being reviewed, and for a reasonable period afterwards so we can show why a decision was made |
| IP address and user-agent on a submission | Retained with the submission, and not used for anything else |
| Analytics data | Held by the providers under their own retention settings, and not joined to anything you have sent us |
Your rights
Under the Personal Data Protection Law you may:
- be informed of why we hold your personal data and what we do with it — this page;
- access it, and request a copy in a readable form;
- request correction of anything inaccurate, incomplete or out of date;
- request destruction of personal data we no longer need for the purpose it was collected for;
- withdraw consent to the analytics at any time, through the footer link.
To exercise any of these, use the report form for anything about a listing, or email [email protected] for anything else. We answer within the periods the Law sets, and we may ask you for enough information to establish that the request is yours to make.
If you are not satisfied with how we have handled a request, you may complain to the Saudi Data and Artificial Intelligence Authority (SDAIA), the competent authority for the Law.
What we publish about businesses and people
The directory publishes records about organisations. Information about a company is generally not personal data — but some of it is, and we treat it that way: a sole trader whose business is their own name, a named contact person, a photograph with someone in it.
Those records are compiled from two sources only: what owners send us, and information already published openly where anyone can reach it without an account or a payment. We buy nothing from data brokers. The copyright and sourcing policy sets this out record by record, including how each listing states where it came from.
Two things follow, and we mean both of them:
- Nothing goes live unreviewed. A person reads every submission before it is published.
- A listing can be corrected or removed at the request of its subject, through the report form. A removal asked for in good faith is acted on rather than argued with.
Security
Submissions travel over HTTPS, reach a single hardened endpoint that validates everything it accepts, and are stored in an access-controlled system that only our team can read. The fields recorded alongside a submission are marked private and are never exposed through the public API that builds the site.
No system is perfectly secure, and we will not claim otherwise. If something does go wrong in a way that affects your personal data, we will notify you and the competent authority as the Law requires.
Minors
The directory is a business reference and is not directed at minors. We do not knowingly collect personal data from anyone under 18. If you believe someone under that age has sent us something, write to [email protected] and we will delete it.
Links to other sites
Listings link to the websites and social accounts of the organisations they describe. Those sites are not ours and are not covered by this policy. Once you follow a link, that site's own policy applies.
Changes
We update this page when the way we handle data changes, and the version published here is the one in force. Material changes will be announced on the site rather than made quietly.
How to reach us
The Dynamics team
Riyadh, Kingdom of Saudi Arabia
Email: [email protected]