Privacy Policy

1. Who We Are

This Privacy Policy applies to Founders Zone ("we," "us," "our"), a serviced office and business centre operated under Absher Group, located at Lumer Center, G07–G08, Prince Turki bin Abdulaziz Al-Awal Road, Hittin, Riyadh 13513, Kingdom of Saudi Arabia (CR: 7035172233, VAT: 311663107800003).

This policy explains how we collect, use, and protect personal data submitted through our digital contract platform at contract.founders-zone.com ("the Platform").

2. Data We Collect

When you use the Platform to sign a service agreement, we collect:

• Full legal name, title, and company name
• Commercial Registration (CR) number and VAT number
• Email address and phone number
• Physical address and nationality
• Service selection, pricing, and contract start date
• Electronic signature (typed name as digital signature)
• IP address at time of signing (for audit and legal purposes)
• Date and timestamp of signature

3. How We Use Your Data

We use the personal data you provide exclusively for:

• Contract execution — to process and store your signed service agreement
• Agreement delivery — to email you a signed PDF copy of your agreement
• Onboarding — to contact you about your move-in date and workspace setup
• Billing — to issue monthly invoices in accordance with your agreement
• Legal compliance — to maintain records required under KSA commercial law
• Dispute resolution — as evidence in the event of a legal dispute

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

We process your personal data under the following legal bases in accordance with the Kingdom of Saudi Arabia Personal Data Protection Law (PDPL), Royal Decree No. M/19 dated 9/2/1443H:

• Contractual necessity — processing is required to execute the service agreement you have entered into
• Legal obligation — certain data must be retained to comply with KSA commercial, tax, and regulatory requirements
• Legitimate interest — to prevent fraud and ensure the security of our systems

5. Data Retention

We retain your contract data for a minimum of 10 years from the date of agreement, as required by KSA commercial law. Data may be retained longer if required for pending legal proceedings or regulatory compliance.

Log files (including IP addresses recorded at time of signing) are retained for 2 years and used solely for security and audit purposes.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction, including:

• Encrypted HTTPS connections (TLS 1.2/1.3) on all pages
• Access-controlled server storage with file-level permissions
• Admin access protected by secure credential management
• Contract data stored in isolated, non-publicly accessible directories
• Regular server security reviews

7. Your Rights Under KSA PDPL

Under the Kingdom of Saudi Arabia Personal Data Protection Law, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your data where retention is no longer legally required
• Objection — object to data processing in specific circumstances permitted by law
• Portability — receive your data in a commonly used, machine-readable format

To exercise any of these rights, please contact us using the details in Section 9. We will respond within 30 days. Please note that certain data may be required to be retained under KSA commercial and tax law regardless of a deletion request.

8. Cookies and Tracking

The Platform uses Google Tag Manager and Google Analytics 4 to measure website performance and user behaviour in aggregate. These tools may set cookies on your device to distinguish returning visits. We do not use tracking technologies for targeted advertising.

The contract signing pages (sign.php, success pages) do not carry any third-party advertising trackers.

9. Contact & Data Requests

For privacy-related enquiries, data access requests, or to exercise your rights under PDPL, please contact:

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page will be revised accordingly. Continued use of the Platform after any update constitutes acceptance of the revised policy.

This policy was last updated in March 2026.