Nuhaa AI
Legal

Privacy Policy

Privacy Policy

1. Introduction

Nuhaa AI is a sovereign AI advisory firm headquartered in Riyadh, Kingdom of Saudi Arabia. This Privacy Policy outlines how Nuhaa AI collects, uses, protects, and handles personal data obtained through our website, nuhaa.sa. We are committed to processing personal data in accordance with the Saudi Personal Data Protection Law (PDPL), issued by Royal Decree M/19 of 1443H, and its Implementing Regulations.

2. Data Controller

The data controller responsible for your personal data is Nuhaa AI, located in Riyadh, Kingdom of Saudi Arabia. Contact Email: hello@nuhaa.sa

3. Personal Data We Collect

We collect personal data solely through the briefing request form on our website. The data collected includes:

  • Full Name
  • Role
  • Organisation
  • Country
  • Prompt/Notes (any additional information voluntarily provided by the user)
  • Optional Preferred Briefing Format

We do not employ analytics cookies, tracking pixels, or process any payments directly on the website, and consequently do not collect associated personal data.

4. Purposes of Processing

The personal data collected is processed for the following purposes:

  • To respond to briefing requests and inquiries.
  • To facilitate communication regarding potential service engagements.
  • To understand the nature of the inquiry and prepare for requested briefings.

5. Lawful Basis under PDPL

Our processing of personal data is founded upon the following lawful bases as per PDPL:

  • Consent: By submitting a briefing request form, users explicitly consent to the processing of their personal data for the stated purposes.
  • Legitimate Interest: We process data to respond to legitimate business inquiries and to engage with prospective clients.

6. Data Sharing and Disclosure

Nuhaa AI does not sell, rent, or trade your personal data to third parties. Your personal data is not shared with any external entities except where necessary to fulfill the requested service (e.g., internal teams responsible for responding to briefing requests) or as required by law.

7. Cross-Border Data Transfers

As a Saudi-based entity, the personal data of Saudi residents is processed within the Kingdom of Saudi Arabia. For individuals residing outside the Kingdom, any potential cross-border transfers of personal data will be conducted in strict compliance with Article 29 of the PDPL and its Implementing Regulations. Such transfers will only occur under conditions that ensure an adequate level of protection for the personal data and where necessary safeguards are in place, such as adherence to binding corporate rules, standard contractual clauses, or other approved mechanisms.

8. Retention Period

Personal data collected via the briefing request form is retained for a period necessary to fulfill the purpose for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Once the data is no longer required, it will be securely deleted or anonymized.

9. Security Measures

Nuhaa AI implements robust technical and organizational security measures to protect personal data from unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and secure data storage practices, consistent with industry best practices and PDPL requirements.

10. Your Rights under PDPL

Under the PDPL, individuals possess the following rights regarding their personal data:

  • Right to be Informed: The right to know what personal data is being collected, the purpose of its collection, and whether it will be shared.
  • Right of Access: The right to request access to your personal data held by us.
  • Right to Request Correction: The right to request the correction of inaccurate or incomplete personal data.
  • Right to Request Destruction: The right to request the destruction of your personal data when its purpose has been achieved, or when your consent is withdrawn and there is no legal obligation for us to retain it.

To exercise any of these rights, please contact us at hello@nuhaa.sa.

11. Cookies and Tracking

The nuhaa.sa website does not deploy analytics cookies, marketing cookies, or any other tracking technologies that collect personal data. Our website is designed to provide information without intruding on user privacy through such means.

12. Children's Data

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete such information promptly.

13. Changes to this Policy

Nuhaa AI reserves the right to update this Privacy Policy periodically to reflect changes in our data processing practices or legal requirements. Any modifications will be posted on this page, and the "Effective Date" will be revised accordingly. We encourage you to review this Privacy Policy regularly.

14. Contact and Complaints

For any questions regarding this Privacy Policy or our data processing practices, please contact us at hello@nuhaa.sa. Should you believe that your rights under the PDPL have been violated, you have the right to lodge a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA).

15. Effective Date

This Privacy Policy is effective as of 22 April 2026.