Your data rights

PDPL Articles 9–15. Submit a request below; our Data Protection Officer responds within 30 days.

2026-Q2.previewEffective at current version·PrivacyTermsCookiesDisclosures

Under the Kingdom of Saudi Arabia's Personal Data Protection Law (PDPL), you have the right to:

  • Access (Article 10) — a copy of the personal data we hold about you, in a machine-readable format.
  • Rectification (Article 11) — correct inaccurate or incomplete data.
  • Erasure (Article 14) — delete your data, subject to overrides like commercial-records retention or active legal holds.
  • Restriction of processing (Article 13) — pause non-essential use of your data while a dispute is resolved.
  • Objection / consent withdrawal (Article 12) — withdraw consent at any time.

Submit your request

Use the form below. We will contact you at the email address you provide to verify your identity before processing — do not include sensitive information in the description field.

Type of request

We will contact you at the email above within 24 hours. Do not attach documents or ID scans to this form — we will request them securely if needed.

What happens next

  • You will receive an acknowledgement email within 24 hours.
  • Our Data Protection Officer will verify your identity (reply-via-click challenge; Nafath KYC for high-sensitivity requests).
  • We process your request within 30 days. For complex cases we may extend once by 60 days with written notice before day 30.
  • If we cannot fulfil the request (overriding legal obligation, disproportionate scope), you will receive a written refusal explaining the reason + the complaint path to SDAIA.

Contact

For questions that are not a formal request, email dpo@aria.sa. If you are unhappy with our response you may lodge a complaint directly with SDAIA.