Privacy policy
What this website collects, why we use it, and how you can ask about your information.
Effective date: 21 October 2026
Who is responsible
Duvolks Company is responsible for the personal information it collects through this website for its enquiries and website operations.
Office No 09, Abdullah Al Hamdani St.Al Malaz, Riyadh 12836, Kingdom of Saudi Arabia
info@duvolks.com
This notice covers the public website. Client engagements and the separate DuVolks Connect portal may have additional notices and terms.
PDF downloads and optional follow-up
To download a DuVolks checklist or personalised report, we ask for your name and email. Company and phone are optional. Your contact details, requested resource, source page, request time, reference and follow-up choice are emailed only to info@duvolks.com. This helps us provide the download, know who used the resource and handle any follow-up you choose. The email is our request record; we do not keep a separate PDF-request database or automatically add PDF requests to Connect CRM.
These details are required for the download form; you can still read the website and use its on-page tools without submitting them. Downloading alone does not ask us to contact you or subscribe you to marketing.
If you choose optional follow-up, authorised staff may contact you about that request. For a personalised report, the limited summary displayed in the form is included in the email only when you select follow-up. The full PDF and other report inputs stay on your device and are not uploaded.
The download starts after our mail service accepts the request email. If we cannot confirm acceptance, the form shows an error and keeps your entries so you can try again. A retry after a connection interruption may create a duplicate email.
Service enquiries
When you contact us through a service form, we use your name, email, message, selected service and any optional company or phone information to understand your enquiry and respond. An enquiry may be recorded in our existing enquiry system and forwarded to DuVolks Connect for the team to manage the conversation. This is separate from the PDF-download process.
Send only what is needed. Do not include passports, Iqamas, passwords, bank or payment-card details, confidential documents or employee records in general forms. Agree an appropriate transfer method with us if a service needs documents.
Your choices and permitted use
You choose whether to submit an enquiry or download request. Optional follow-up and analytics are separate choices. We use the submitted information for the purposes explained at collection, not as blanket permission for unrelated marketing.
Where processing relies on consent, you may withdraw it. We may need particular information to carry out an agreed engagement or meet an applicable legal obligation. Those purposes and any separate retention requirements are addressed in the relevant engagement or notice.
Providers, recipients and processing locations
Relevant DuVolks staff and contracted technology providers process information needed for website hosting, request handling, email delivery and security. The PDF service uses Hostinger hosting and email services, without a PDF-request database. Our existing service-enquiry integrations use Supabase, DuVolks Connect and Resend. Optional analytics uses Google Analytics only after you accept it.
Hostinger's current website-hosting and backup arrangements include the United States. Other hosting, email, enquiry and analytics providers may also process information outside Saudi Arabia. Do not assume all website information stays in Saudi Arabia. Applicable transfer requirements and safeguards must be addressed for the services used.
Calendly, WhatsApp, maps and other external links take you to separate services. Their own notices apply to information you provide there. Disclosure to an authority or professional adviser must be limited to an appropriate purpose and lawful basis.
Retention and deletion
PDF request emails are normally kept for 12 months from receipt, then deleted through mailbox housekeeping. This is a staff-managed process, not an automatic website deletion job. A documented service, legal or dispute-related reason may justify a different period; requesting follow-up does not create an indefinite hold.
The PDF service briefly holds keyed identifiers and request acknowledgements in memory to limit abuse and duplicate submissions. These expire within approximately 16 minutes after processing; they are not a lasting contact record. Raw IP addresses are used to derive abuse-prevention identifiers but are not stored by this PDF-request handler.
Service enquiries, client records, hosting/security logs and backups have separate lifecycles. Deleting a request email does not instantly erase retained backups or copies already made. We consider these when handling a deletion request, subject to applicable obligations and technical backup expiry. We do not promise instant deletion from every system.
Business Brief
The DuVolks Saudi Business Brief is in preparation. There is no active subscription or launch-invitation form. A download or enquiry does not sign you up. Any future subscription will have its own clear opt-in and way to stop messages.
Privacy requests and your rights
Email info@duvolks.com with the subject “Privacy request” to ask about your information, stop optional follow-up, or request access, a copy, correction or deletion, subject to applicable law and exceptions. Please do not attach identity documents initially. We may need proportionate checks before releasing or changing information.
Withdrawing consent does not undo earlier lawful processing or remove a separate lawful retention requirement. We will explain any relevant limitation when responding. You may also raise a complaint with SDAIA through its Personal Data Protection Platform; contacting us does not remove your right to approach a competent regulator.
Security and changes
We use access restrictions and technical safeguards appropriate to the services we operate. No website, email or transmission method is completely secure. Material updates to this notice will be dated here. A revised notice alone does not give permission to use information for a new purpose.