Privacy Policy
Xplere Consultancy · xplere.com
Effective date: October 5, 2026 · Last updated: October 15, 2026
This Privacy Policy explains how Xplere Consultancy (“Xplere”, “we”, “us”, “our”) collects, uses, shares and protects personal data when you visit https://xplere.com (the “Website”), contact us, or engage with us about our consulting and technology services for the sports, entertainment and tourism sectors.
The short version
- We collect the details you give us (for example through the contact form) and basic technical data from your browser.
- We use them to respond to you, run and secure the Website, and improve our services.
- We do not sell personal data. We share it only with service providers and others as described in section 5.
- You can ask us to access, correct or delete your data at any time: [email protected].
1. Who we are
Xplere Consultancy is a consultancy headquartered in Riyadh, Saudi Arabia, serving organisations in the MENA region. For personal data collected through the Website, Xplere Consultancy is the data controller.
Address: Al Aqiq District, Riyadh, Saudi Arabia
Phone: +966 9200 33213
Email: [email protected]
2. Data we collect
Category | Examples | Source |
Contact and enquiry data | Name, company, email address, phone number (optional), subject, and the message you write about your business challenge | You, via the contact form, email, phone or at events |
Business relationship data | Role, organisation, meeting notes, correspondence, consultation or demo bookings | You and our team |
Technical data | IP address, browser type and version, device type, operating system, pages viewed, referring page, date and time of visit | Automatically from your browser and our servers |
Cookie data | See section 4 | Automatically |
Application data (if you apply for a role) | CV, employment history, contact details | You |
Social media data | Public profile details and messages you send us on LinkedIn or Instagram | You, via those platforms |
We do not ask for, and ask that you do not send us, sensitive personal data (such as health, biometric or financial account information) through the Website. Where our client work involves personal data about fans, visitors or customers of our clients, we process it on the client’s behalf under a separate agreement, and that client’s privacy notice applies.
3. How and why we use data
Purpose | Basis |
Respond to enquiries, book consultations and demos, and follow up on your request | Your consent (given when you submit the form) and our legitimate interest in running our business |
Provide, secure and maintain the Website, including spam and abuse prevention | Legitimate interest |
Understand how the Website is used and improve it and our services | Legitimate interest or consent, where required for non-essential cookies |
Send news, insights or event information | Your consent; you can withdraw it at any time |
Recruit and assess applicants | Steps taken at your request; legitimate interest |
Comply with legal obligations and establish or defend legal claims | Legal obligation; legitimate interest |
We do not sell your personal data and we do not use it for automated decision-making that produces legal or similarly significant effects on you.
4. Cookies and similar technologies
Cookies are small files stored on your device. We use:
- Strictly necessary cookies that make the Website work and keep it secure (for example, security and load-balancing cookies, and cookies that record your cookie choices).
- Functional cookies that remember preferences and, where comments or login features are enabled, your session and the details you choose to save.
You can block or delete cookies in your browser settings; some parts of the Website may then not work properly. Embedded content from other providers (section 10) may set its own cookies.
5. Who we share data with
We share personal data only where needed and only with:
- Service providers (processors) that act on our instructions: website hosting and content-management providers, security and content-delivery services (such as Cloudflare), email and communication tools, analytics providers (if enabled) and spam-detection services.
- Professional advisers such as lawyers, auditors and insurers, under confidentiality duties.
- Group companies and business partners, only where you have asked us to involve them in your enquiry.
- Authorities, where required by law, court order or to protect our rights, safety or property.
- A successor business, if Xplere is involved in a merger, acquisition or sale of assets, subject to this policy continuing to apply.
We do not sell personal data or share it with third parties for their own marketing.
6. International transfers
Some of our service providers may store or process data outside Saudi Arabia. Where personal data leaves the Kingdom, we transfer it only as permitted by the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations, and put appropriate safeguards in place, such as contractual protections and checks on the recipient’s security practices.
7. How long we keep data
- Contact-form enquiries: up to 6 months after our last interaction with you, unless a business relationship follows.
- Client and contract records: for the duration of the relationship plus the period required by Saudi law and for the limitation period of potential claims.
- Technical logs: up to 6 months.
- Job applications: up to 6 months after the role is filled, unless you ask us to remove them sooner.
- Marketing preferences: until you withdraw consent.
When data is no longer needed, we delete or anonymise it.
8. Security
We use technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS), access controls, security monitoring and vendor due diligence. No online system is completely secure. If a personal data breach is likely to harm you, we will notify you and the competent authority as the PDPL requires. See also our Security page at https://xplere.com/security.
9. Your rights
Under the Saudi PDPL, and under other laws that apply to you, you may have the right to:
- be informed about how your data is collected and used;
- access your personal data and obtain a copy;
- ask us to correct inaccurate or incomplete data;
- ask us to delete or destroy data we no longer need to hold;
- withdraw consent at any time, without affecting processing already carried out;
- object to marketing communications.
To exercise a right, email [email protected]. We may need to verify your identity and will respond within the period required by law. If you are unhappy with our response, you can complain to the Saudi Data and Artificial Intelligence Authority (SDAIA), or to the data protection authority where you live.
10. Third-party sites and embedded content
The Website links to external sites such as LinkedIn and Instagram, and may include embedded content (for example maps, videos or social posts). Those providers may collect data about you, set cookies and track your interaction with their content as if you had visited their own site. We do not control them; please read their privacy policies.
11. Children
The Website is intended for business users and is not directed at children under 18. We do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. The “Last updated” date above shows the latest version. If we make material changes, we will take reasonable steps to tell you, for example by a notice on the Website.
13. Contact us
Questions or requests about this policy or your personal data:
Xplere Consultancy
Al Aqiq District, Riyadh, Saudi Arabia
Email: [email protected]
Phone: +966 9200 33213 (Sun–Thu, 9:00–18:00 AST)