Privacy Policy

Last updated: June 2025

1. Introduction & Data Controller

Devopark Team ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information about you when you visit devopark.team and interact with our services.

Data Controller: Devopark Team, Riyadh, Kingdom of Saudi Arabia. Contact: admin@devopark.com

2. Information We Collect

We may collect and process the following categories of personal data:

Contact forms: name, email address, phone number, and message content
RFP submissions: company name, sector, budget, timeline, project description, and attached documents
Job applications: full name, email address, phone number, cover note, and CV/resume files
Newsletter subscriptions: email address and source page of sign-up
Investor enquiries: name, firm/organisation, email address, and message content
Booking and demo requests: name, email address, company name, and message
Technical and usage data: pages visited, session identifiers, referring URLs, browser type, device information, and IP address (collected via cookies and server logs)

3. How We Use Your Information

We use personal data to:

Respond to enquiries, messages, and proposal requests
Process and evaluate job applications
Send newsletters and updates where you have provided consent
Process booking and demo requests
Operate, maintain, and improve our website and services
Ensure the security of the site and prevent fraud or abuse
Comply with our legal obligations

4. Legal Basis for Processing

Under the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations, we process your personal data on the following grounds:

Consent: where you have explicitly opted in (e.g. newsletter subscription, contact form)
Legitimate Interests: for operating and securing the website and responding to business enquiries
Contract Performance: where processing is necessary prior to entering into a contract (e.g. job applications, RFPs)

5. Sharing and Data Processors

We do not sell your personal data. We share it only with trusted service providers acting as data processors:

Hosting & Infrastructure: Vercel Inc. — website and API hosted on Vercel's global infrastructure
Database: Cloud-hosted PostgreSQL database
File Storage: Vercel Blob storage (for uploaded files such as CVs and images)
Analytics: where enabled and where you have provided consent (see Cookie Policy)

All processors are contractually bound to process personal data only on our documented instructions and to maintain appropriate security.

6. International Transfers

Our infrastructure is operated by Vercel, Inc., which may process and store data on servers located outside the Kingdom of Saudi Arabia. Where such transfers occur, we take steps to ensure appropriate safeguards are in place in accordance with PDPL requirements.

7. Data Retention

We retain personal data only as long as necessary to fulfil the purposes for which it was collected:

Contact and enquiry data: up to 2 years from submission
Job applications and CVs: up to 6 months after the position is filled or closed
Newsletter subscription data: until you unsubscribe or withdraw consent
Technical/usage data: typically up to 12 months

8. Your Rights Under the PDPL

Under the Saudi Personal Data Protection Law, you have the right to:

Access the personal data we hold about you
Correct any inaccurate or incomplete personal data
Request deletion of your personal data (subject to legal retention requirements)
Withdraw consent at any time where processing is based on your consent
Lodge a complaint with the Saudi Data & AI Authority (SDAIA)

To exercise any of these rights, contact us at admin@devopark.com.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure.

10. Cookies

We use cookies and similar technologies on our website. Please read our Cookie Policy for details.

11. Children's Data

Our website is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Changes and Contact

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the date above. For questions: admin@devopark.com