{"id":342502,"date":"2025-09-19T10:59:22","date_gmt":"2025-09-19T10:59:22","guid":{"rendered":"https:\/\/new.kaizen.sa\/?page_id=342502"},"modified":"2026-07-30T16:15:52","modified_gmt":"2026-07-30T16:15:52","slug":"privacy-policy-page-at-kaizen-consulting","status":"publish","type":"page","link":"https:\/\/staging3.kaizen.sa\/en\/privacy-policy-page-at-kaizen-consulting\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n

Privacy Policy<\/h1>\n<\/div><\/div>
<\/div><\/div>

Last updated: 18 September 2025<\/p>\n<\/div><\/div>

Kaizen Consulting (\u201cKaizen\u201d, \u201cwe\u201d, \u201cour\u201d, \u201cus\u201d) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use our websites (including kaizen.sa) and any related pages, forms, or services (the \u201cSite\u201d), attend our events, participate in our research, or interact with us.<\/p>\n

If you do not agree with this Policy, please do not use the Site.<\/p>\n<\/div><\/div><\/div>

\"Kaizen's<\/span><\/div><\/div><\/div>

Articles<\/h1>\n<\/div><\/div>
1. Who we are & how to contact us<\/h5>

Controller<\/strong>: Kaizen Consulting
Email<\/strong>: info@kaizen.sa
Address<\/strong>: P.O. Box 90987, Al Taawun District, Al Taawun Commercial Center, Riyadh 11623, KSA.<\/p>\n<\/div><\/div>

2. When we collect personal data<\/h5>

We collect personal data when you:<\/p>\n

    \n
  • \n
      \n
    • Register or create an account on our Site or community spaces.<\/li>\n
    • Subscribe to newsletters, insights, or updates.<\/li>\n
    • Register for or attend a Kaizen webinar, workshop, or event (virtual or in-person).<\/li>\n
    • Request information about our services, download materials, or book a demo\/meeting.<\/li>\n
    • Participate in Kaizen research (e.g., interviews, surveys, testimonials\/case studies).<\/li>\n
    • Apply for a job with Kaizen.<\/li>\n
    • Interact with our emails or our pages on social media.<\/li>\n
    • Browse the Site (via cookies or similar technologies).<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div><\/div>
      3. What personal data we collect<\/h5>

      Depending on your interaction with us, we may collect:<\/p>\n

        \n
      • \n
          \n
        • Identity & contact data<\/strong>: name, email, phone, job title, company\/organization, country, preferred language.<\/li>\n
        • Account & community data<\/strong>: profile info you add (e.g., role, interests), posts or comments you share in community spaces.<\/li>\n
        • Event data<\/strong>: registration status, attendance (virtual or in-person), session preferences, and\u2014only if you choose to provide them\u2014dietary or accessibility needs.<\/li>\n
        • Research data<\/strong>: your responses, availability, and recordings if you consent (for validation and quality).<\/li>\n
        • Career data<\/strong>: resume\/CV, work history, education, references (if provided).<\/li>\n
        • Technical & usage data<\/strong>: IP address, device\/browser info, log data, pages viewed, referral URLs, email opens\/clicks, and interactions with downloads or links.<\/li>\n
        • Public & social data<\/strong>: information you make public (e.g., LinkedIn) or provide via social sign-in.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n

          We do not knowingly collect personal data from children; you must be at least 18 to use the Site.<\/p>\n<\/div><\/div>

          4. Why we use personal data (purposes)<\/h5>

          We use your data to:<\/p>\n

            \n
          • \n
              \n
            • Provide and operate our services<\/strong>: Manage accounts, respond to inquiries, and process event registrations.<\/li>\n
            • Communicate with you<\/strong>: Send service messages (policy updates, security notices), confirmations, and event information.<\/li>\n
            • Research & thought leadership<\/strong>: Conduct interviews\/surveys; develop case studies or testimonials (with your consent for use\/attribution).<\/li>\n
            • Events (virtual & in-person)<\/strong>: Manage attendance, networking features, session access, and feedback.<\/li>\n
            • Security, compliance & improvement<\/strong>: Maintain Site security (e.g., IP logging, fraud prevention), comply with legal obligations, and analyze usage to improve Site performance and content.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div><\/div>
              5. Cookies & similar technologies<\/h5>

              We use:<\/p>\n

                \n
              • \n
                  \n
                • Necessary cookies to run core Site features and keep you signed in.<\/li>\n
                • Analytics cookies to understand usage, improve content, and fix issues.<\/li>\n
                • Preference cookies to remember your settings (e.g., language).<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n

                  Control cookies via your browser settings. Blocking some cookies may affect Site functionality.<\/p>\n<\/div><\/div>

                  6. When we share personal data<\/h5>

                  We may share personal data with:<\/p>\n

                    \n
                  • \n
                      \n
                    • Service providers (e.g., hosting, analytics, email delivery, event platforms, customer support) under contracts requiring confidentiality and security.<\/li>\n
                    • Event partners\/sponsors only when you opt in during registration or by explicit action (e.g., badge scan\/virtual sponsor engagement).<\/li>\n
                    • Professional advisers (legal, compliance, accounting) under confidentiality obligations.<\/li>\n
                    • Authorities where required by law or to protect rights, safety, or security.<\/li>\n
                    • Corporate transactions (e.g., merger, acquisition), subject to appropriate safeguards.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n

                      We do not sell personal data.<\/p>\n<\/div><\/div>

                      7. International transfers<\/h5>

                      Where required, we use appropriate safeguards (e.g., SDAIA-approved mechanisms, contractual clauses, risk assessments) to protect your data.<\/p>\n<\/div><\/div>

                      8. Data retention<\/h5>

                      We keep personal data only as long as necessary for the purposes described above, to comply with legal obligations, or to resolve disputes. Retention periods vary by data type and context.<\/p>\n<\/div><\/div>

                      9. Your rights<\/h5>

                      Subject to applicable law (including the Saudi PDPL and, where relevant, GDPR), you may have the right to:<\/p>\n

                        \n
                      • \n
                          \n
                        • Access your personal data and obtain a copy.<\/li>\n
                        • Rectify inaccurate or incomplete data.<\/li>\n
                        • Erase personal data where applicable.<\/li>\n
                        • Restrict or object to certain processing (including direct marketing).<\/li>\n
                        • Withdraw consent at any time (does not affect prior processing).<\/li>\n
                        • Data portability (where applicable).<\/li>\n
                        • Complain to the competent supervisory authority.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n

                          To exercise your rights, contact info@kaizen.sa. We may need to verify your identity.<\/p>\n<\/div><\/div>

                          10. Security<\/h5>

                          We use administrative, technical, and physical safeguards (including encryption in transit, access controls, and monitoring) to protect personal data.<\/p>\n<\/div><\/div>

                          11. Research recordings & calls<\/h5>

                          With your explicit consent, we may record interviews, webinars, or customer reference calls for quality and research validation. You can decline or ask us to stop recording at any time.<\/p>\n<\/div><\/div>

                          12. Community areas & user content<\/h5>

                          Public or shared areas (e.g., comments, community threads) may be visible to other users. Avoid posting sensitive personal data. We may moderate per our terms of use.<\/p>\n<\/div><\/div>

                          13. Third-party links & embedded content<\/h5>

                          Our Site may include links or embedded content from third-party sites or platforms. Their privacy practices are governed by their own policies. Please review them before interacting.<\/p>\n<\/div><\/div>

                          14. Changes to this Policy<\/h5>

                          We may update this Policy from time to time. We will post the updated version with a new \u201cLast updated\u201d date. Significant changes may also be communicated by email or a Site notice.<\/p>\n<\/div><\/div><\/div><\/div>

                          Saudi PDPL Guidance<\/h1>\n<\/div><\/div>
                          A. Roles & oversight<\/h5>
                            \n
                          • \n
                              \n
                            • Competent Authority: The Saudi Data & AI Authority (SDAIA) supervises PDPL implementation. We cooperate with SDAIA and maintain documentation to demonstrate compliance.<\/li>\n
                            • Data Protection Officer (DPO): Kaizen appoints a DPO (employee or external) to monitor compliance, oversee procedures, and receive data-subject requests.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div><\/div>
                              B. Lawful bases (PDPL)<\/h5>

                              We rely on the lawful bases recognized under PDPL\u2014including consent, contract performance, legal obligation, vital interests, public interest, and legitimate interests (subject to balancing tests and exclusions for sensitive data). Marketing relies on consent where required.<\/p>\n<\/div><\/div>

                              C. Special categories & minors<\/h5>
                                \n
                              • \n
                                  \n
                                • We apply heightened safeguards for sensitive personal data (e.g., health, genetic, biometric) and process only where a PDPL basis and conditions are met.<\/li>\n
                                • For children\u2019s data, consent must be given or authorized by a guardian.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div><\/div>
                                  D. Cross-border transfers<\/h5>

                                  Transfers outside the Kingdom are allowed only under PDPL\/Regulations conditions\u2014for example: adequacy findings, approved safeguards (e.g., standard clauses, binding rules), explicit consent (where permitted), and documented risk\/impact assessments for ongoing or large-scale\/sensitive transfers. Kaizen implements these safeguards and keeps records of transfer assessments.<\/p>\n<\/div><\/div>

                                  E. Transparency & privacy notices<\/h5>

                                  We provide clear notices at collection that state the purposes, lawful bases, retention periods, sharing categories, transfer safeguards (if any), and how to exercise rights\u2014consistent with PDPL.<\/p>\n<\/div><\/div>

                                  F. Data subject rights handling<\/h5>

                                  We maintain procedures to authenticate, log, assess, and respond to requests for access, rectification, erasure, restriction, objection, portability (where applicable), and withdrawal of consent within PDPL timelines.<\/p>\n<\/div><\/div>

                                  G. Security & breach notification<\/h5>

                                  We deploy technical\/organizational measures proportionate to risks. If a personal data breach could harm data or data subjects or conflict with their rights\/interests, we will notify SDAIA within 72 hours of awareness, and notify affected individuals without undue delay where required. We use SDAIA\u2019s breach portal and follow the procedural guide.<\/p>\n<\/div><\/div>

                                  H. Records, DPIAs & vendor management<\/h5>

                                  We maintain internal records of processing, conduct Data Protection Impact Assessments (DPIAs) when required, and ensure processors act under written instructions, apply PDPL-level security, and do not sub-process without safeguards\u2014per the Implementing Regulations.<\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div>

                                  <\/span>
                                  <\/div><\/div>

                                  Have Any Queries?<\/p>\n<\/div><\/div>

                                  Get a Free Consultation<\/span><\/h2>\n<\/div><\/div>

                                  One of our consultants will contact you soon.<\/p>\n<\/div><\/div>

                                  <\/div>