Privacy Policy

This policy explains how Allo Technologies handles personal data collected through allotechnologies.com. It is written to meet our obligations under Saudi Arabia's Personal Data Protection Law (PDPL), and applies to anyone who uses this website wherever they are located.

For questions, requests, or complaints about privacy, contact info@allotechnologies.com.

We only collect data you choose to give us, plus a small amount collected automatically.

When you submit a contact form

Your name, email address, and message, plus your company name and phone number if you provide them, and the page you submitted from.

When you complete an assessment or calculator

Your name, email address, and optionally your company, role, and phone number, together with the answers or inputs you entered, your resulting score and maturity tier, and the recommendations generated for you. Your answers are stored so we can discuss the results with you meaningfully.

When you subscribe to insights

Your email address only. We send a confirmation email first and add you to the list only when you click the link in it, so nobody can subscribe an address they do not control. If you never confirm, we delete the pending record and send you nothing else.

Automatically

Our hosting provider records standard server logs. We record your IP address briefly when you submit a form, purely to prevent spam and abuse; those records are deleted after 24 hours. We do not use your IP for profiling.

We do not collect special-category personal data through this website, and we do not ask for payment details here.

To reply to your enquiry, deliver the assessment results you requested, send insights you subscribed to, and follow up about services relevant to what you asked about. We also use aggregated, non-identifying analytics to understand which content is useful.

Our legal basis under the PDPL is your consent, given when you submit a form. Consent is the only basis we rely on for marketing contact, and you can withdraw it at any time without affecting anything you have already received. The one exception is the short-lived record of your IP address described above, which we keep to protect the service against abuse.

We do not sell personal data, we do not share it with third parties for their own marketing, and we do not use it for automated decision-making that produces legal effects about you.

We are based in Saudi Arabia, but the services we use to run this website are not. Personal data you submit is processed in Canada and the United States, as set out in the table below. Submitting a form therefore involves a transfer of your personal data outside the Kingdom under Article 29 of the PDPL.

We rely on your explicit, informed consent for that transfer, which is why the transfer is disclosed on every form and not only here. We have also carried out a documented assessment of the risk it creates, we hold data processing agreements with each provider, and we keep the data transferred to the minimum needed to answer you. Canada is recognised by the European Commission as offering an adequate level of protection for personal data. For providers in the United States we rely on the contractual protections in their data processing terms.

If you would prefer your details not to leave the Kingdom, do not use the forms on this site. Email or telephone us instead and say so, and we will handle your enquiry that way.

These providers act on our instructions and are not permitted to use your data for their own purposes, except as described in their own terms for providing the service. Web fonts are served from this website itself, so loading a page does not expose your IP address to a font provider.

We use Google Analytics 4 to count page views and measure which pages lead to enquiries. It sets cookies in your browser and records a truncated version of your IP address. We do not use advertising cookies, retargeting pixels, or cross-site trackers.

We also use Contentsquare to understand how pages are used: which sections people read, where they scroll, and where a layout causes difficulty. It records interactions with the page, not the content you type. Text entered into forms, including your name, email address, and phone number, is masked in your browser before anything is sent, so it never reaches Contentsquare.

Nothing is loaded until you agree. We ask on your first visit, and if you decline, neither the Analytics nor the Contentsquare script is ever requested and no cookie is set. Declining changes nothing else about how the site works. No cookies are required to read anything here or to use the assessment tools.

You can also block these cookies through your browser settings or by using the Google Analytics opt-out add-on. Blocking them does not affect your ability to use this site or its assessment tools.

• Enquiries and consultation requests: 24 months from your last contact with us, then deleted.
• Assessment and calculator submissions: 24 months from submission, then deleted.
• Newsletter subscriptions: until you unsubscribe, after which we keep only the fact that you unsubscribed so we do not email you again by mistake.
• Anti-abuse IP records: deleted after 24 hours.

You can ask us to delete your data sooner at any time, and we will.

Under the PDPL you have the right to:

• be informed about how and why your personal data is processed;
• request access to the personal data we hold about you;
• obtain a copy of it in a readable, clear format;
• request that inaccurate or incomplete data be corrected;
• request that your personal data be destroyed;
• withdraw consent to processing, where processing is based on your consent.

Every email we send about new guides also carries a one-click unsubscribe link, so you never have to write to us to stop hearing from us.

To exercise any of these, email info@allotechnologies.com and tell us what you need. We will respond within one business day and act on the request without undue delay. You may also complain to the competent Saudi supervisory authority if you believe we have handled your data improperly.

Access to submitted data is restricted to authorised personnel. The database enforces row-level access controls, form submissions are transmitted over HTTPS, and public endpoints are rate-limited against abuse. No system is perfectly secure, but if a breach affecting your personal data occurs we will notify you and the relevant authority as required by the PDPL.

This is a business-to-business website and is not directed at children. We do not knowingly collect personal data from anyone under 18.

If we change how we handle personal data we will update this page and the date above. Material changes affecting existing enquiries will be communicated directly.

Allo Technologies, info@allotechnologies.com. You can also reach us through our contact page.