Privacy policy

Last reviewed: 2026-10-06

1. Controller and website purpose

Next Pro, Commercial Registration Entity No. 7054730812 operates this website to provide information about NEXT PRO services and to receive enquiries, consultation requests, complaints and suggestions. The controller name shown here must match the organisation’s registered legal name before launch.

2. Personal data we may collect

When using the consultation request form, you may enter your name, contact number, email address, organisation or project name, sector, project stage, activity and a description of your needs. The form identifies mandatory and optional fields. It works in your browser and does not store this information on the website server; the information is only transferred to us when you choose to send the prepared message through WhatsApp. Our hosting provider may also retain standard technical logs such as IP address, request time and browser information for security and operational purposes.

3. Purposes and legal basis

We use information you send to respond to your request, understand project needs, communicate about requested services, handle complaints or suggestions, and protect the website from misuse. Depending on the circumstances, the legal basis may be your consent to send the information, taking steps at your request before entering into an agreement or performing contractual obligations, complying with legal requirements, and legitimate interests that do not override your rights where applicable.

4. Collection and use

Data is collected directly from you when you enter it in the form or send it through our communication channels. We do not use consultation-request information for separate advertising purposes unless an appropriate legal basis and a separate clear notice are in place.

5. Disclosure and transfers outside Saudi Arabia

If you choose WhatsApp, information is transferred through WhatsApp/Meta under its own terms, privacy practices and technical infrastructure, which may involve processing outside Saudi Arabia. The hosting provider may also process technical logs required to operate the site. Current website hosting location: Saudi Arabia. We do not sell personal data.

6. Storage, retention and destruction

The website form itself does not store your entries on our server. Messages received through communication channels and records needed to follow up a request are retained up to 12 months unless applicable law requires longer retention. When there is no longer a legal or operational need, they are destroyed by secure deletion from operational systems and communication accounts when the purpose ends, with backup copies expiring under the service provider backup cycle.

7. Security

We apply technical and organisational measures appropriate to the nature of the data and limit access to communications on a need-to-work basis. HTTPS is used when the website is published on its official domain, and relevant service providers and security settings are reviewed.

8. Your rights

Under Saudi Arabia’s Personal Data Protection Law, depending on your circumstances, you have the right to be informed, access your personal data, request a readable copy, request correction/completion/update, request destruction when data is no longer needed, and withdraw consent where consent is the applicable legal basis and no other basis requires continued processing. We act on rights requests within no more than 30 days, subject to any extension permitted by the Implementing Regulation.

9. Cookies and analytics

This release does not enable third-party analytics or advertising tools by default. If non-essential cookies or measurement tools are added later, this policy and an appropriate consent mechanism must be updated before activation.

10. Privacy contact and complaints

To exercise your rights, ask a privacy question or raise a complaint, contact us through:

If your concern is not resolved appropriately, you may use the channels of the competent Saudi personal data authority, including the National Data Governance Platform operated by SDAIA, in accordance with its available procedures.