Last updated: 28 September 2026
Business Elite Information Systems Technology Co. (شركة نخبة الأعمال لتقنية نظم المعلومات) (the “Company”, “we”, “us”) is committed to protecting your personal data in line with the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations issued by the Saudi Data and Artificial Intelligence Authority (SDAIA). This policy explains what data we collect through businesselite.sa, why, who we share it with, how we protect it and what your rights are.
1. Data controller
| Business name | Business Elite Information Systems Technology Co. (شركة نخبة الأعمال لتقنية نظم المعلومات) |
|---|---|
| Legal form | Limited Liability Company (one person) |
| Unified National Number (CR) | 7023372514 |
| VAT number | 310929825400003 |
| National address | 8477 Mahmoud Barri St, Al Rawdah, Jeddah, Saudi Arabia |
| islam@businesselite.sa | |
| Phone | +966 56 704 4363 |
| Website | https://businesselite.sa |
2. Data we collect
| Category | Data | Source |
|---|---|---|
| Consultation request | Name, company, job title, email, mobile, service of interest, description of the request and any file you attach | Contact form |
| Appointment booking | Name, email and chosen time | Google Calendar booking page |
| Payment | Name, email, mobile, company, VAT number, invoice number, amount, payment result, method and transaction number, and the masked card number returned by the gateway | Payment form and MyFatoorah |
| Technical data | IP address, browser type and security logs | Automatically when you use the Site |
Card data: entered entirely on MyFatoorah’s PCI DSS-compliant secure payment page. It never reaches our servers and we never store it.
Sensitive data: we do not request sensitive data (health, religious, credit, etc.); please do not include it in messages or attachments. In leadership assessments and workplace analysis, employee and candidate data is processed under a separate contract with the client organisation, which is responsible for informing them.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Responding to your request, scheduling the consultation and sending the meeting invitation | Your consent when submitting the request, and pre-contractual steps at your request |
| Processing payment, issuing receipts and tax invoices, and bookkeeping | Performance of the contract and legal obligations |
| Compliance with VAT, e-invoicing and anti-fraud requirements | Legal obligation |
| Triaging requests and preparing a first draft reply using Gemini | Legitimate interest in responding quickly, with human review of every reply before it is sent |
| Site protection and security | Legitimate interest and legal obligation |
We do not sell or rent your data, and we do not send marketing messages without your explicit consent. You can unsubscribe at any time.
Automated decisions: we make no decision affecting you on a fully automated basis. Gemini’s analysis supports our team; decisions and replies come from a person.
4. Who we share data with
We share only the minimum necessary with service providers bound by confidentiality and data protection obligations:
- MyFatoorah: to process payments.
- Google (Google Workspace and Gemini): email; storing requests and payments in Google Sheets and attachments in Google Drive; Calendar appointments and Meet meetings; and analysing request text with the Gemini API. We use business editions and paid services whose data is not used to train models.
- Our website hosting provider: to run the Site and its database.
- Our accounting system: to record payments.
- Competent government authorities: where legally required, such as ZATCA.
5. Transfers outside the Kingdom
Some data may be processed or stored on service providers’ servers outside the Kingdom of Saudi Arabia, such as Google, our hosting provider and the payment gateway. This is done in line with the Regulation on Personal Data Transfer outside the Kingdom, limited to what the purposes above require, and with providers that apply appropriate safeguards.
6. Retention
- Consultation requests that do not become an engagement: kept for no more than two years from the last contact, then deleted or anonymised.
- Payment data, invoices and accounting records: kept for the periods required by commercial and tax laws.
- Attachments: kept for the duration of the relationship and deleted on request unless there is a legal obligation to retain them.
7. Security
We use encrypted connections (HTTPS), access restricted to the staff concerned, and sign-in to our admin panel with the Company’s Google Workspace accounts. If a data breach or unauthorised access occurs, we will notify the competent authority and you within the periods and procedures required by law.
8. Your rights
Under the PDPL you have the right to:
- be informed how and why your data is collected and processed;
- access your data and obtain a copy in a readable, clear format;
- request correction, completion or updating of your data;
- request destruction of your data once it is no longer needed, unless we are legally required to keep it;
- withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.
To exercise these rights, write to islam@businesselite.sa. We respond within 30 days. You may also file a complaint with SDAIA if you believe your data is processed in breach of the law.
9. Cookies
The Site uses only essential cookies for the session, protecting forms against forged requests and remembering your language. We do not use third-party advertising or analytics trackers. When you open the embedded Google Calendar booking page or the MyFatoorah payment page, their own privacy policies apply.
10. Minors
Our services are aimed at organisations and their representatives, not at anyone under 18, and we do not knowingly collect their data.
11. Changes
We may update this policy from time to time and show the date of the last update at the top of the page. If the purposes of processing change materially, we will ask for your consent again where the law requires it.