Legal

Privacy Policy

What we collect when you request advisor introductions, why we collect it, and who we share it with.

Last updated: 27 September 2026

1. Who we are

Tadaful Advisory Network ("Tadaful", "we") is an introduction service connecting international companies with independent Saudi corporate, legal and financial advisory firms. We act as the data controller for the information you submit through this website.

2. Information we collect

When you submit a brief we collect: company name and website, your name, job title, work email address, phone number, head office country, industry, the services you need, preferred entity structure, timeline, budget range and any notes you add.

If you use the AI entry planner, we process the details you enter to generate your checklist. Advisor firms that sign in to their portal provide an account email and payment references.

We also collect limited technical data (such as browser type and pages visited) needed to run and secure the site.

3. Why we use it (lawful basis)

We process your brief on the basis of your explicit consent, given when you tick the consent box on the enquiry form, in order to verify your enquiry and introduce you to suitable advisors.

We check that your email uses a corporate domain so that only genuine business enquiries are passed on.

4. Who we share it with

Your brief is shared only with the advisory firm or firms we match to your requirements. Before a firm accepts your enquiry it sees a summary without your contact details; once it accepts, it receives your full brief and may contact you directly.

We use trusted service providers for hosting, email delivery and AI processing, who process data only on our instructions. We never sell your data.

5. Transfers outside Saudi Arabia

Some of our service providers may process data outside the Kingdom. Where this happens, we rely on appropriate safeguards as required by the PDPL and its implementing regulations.

6. How long we keep it

We keep enquiry records for up to 24 months after submission for introduction, billing and dispute purposes, after which they are deleted or anonymised, unless a longer period is required by law.

7. Your rights

Under the PDPL you may ask to be informed about, access, correct or delete your personal data, and withdraw your consent at any time. Withdrawing consent does not affect introductions already made; advisors who already received your brief are independent controllers of that copy.

To exercise these rights, reply to any email from us or contact us through the enquiry form. You may also complain to the Saudi Data & AI Authority (SDAIA).

8. Security

Access to enquiries is restricted to our administrators and to the firm assigned to your enquiry. We use encrypted connections and access controls to protect your data.

9. Changes

We may update this policy. The date at the top shows when it last changed.