Last updated: 1 November 2026
At a glance
- We only collect what you choose to send us — through our forms, WhatsApp, email or phone — plus website statistics from Google Analytics.
- We use it to reply to you, prepare proposals, deliver our work and hire people. We never sell it.
- Our enquiry forms don’t store your message on our server: they open WhatsApp or your email app, so you see the message and send it yourself. The only exception is the consultation booking form, which saves your booking so we can hold your time and confirm it.
- You can ask to see, correct or delete your data at any time, and you can complain to the data-protection authority in your country.
- Questions? Email privacy@rx-designer.com.
01Who we are
RX Designer (“RX”, “we”, “us”) is a marketing and business solutions studio and a member of IYDEX Group. We work with companies and professionals in the Kingdom of Saudi Arabia, the Arab Republic of Egypt, the United Arab Emirates and the State of Qatar.
For the personal data described in this policy, RX Designer is the controller: we decide why and how it is processed. This policy covers rx-designer.com, its forms, and the conversations you have with us by WhatsApp, email and phone.
It does not cover the websites and social media accounts we build or manage for our clients. Each client is responsible for its own privacy policy.
02Information we collect
Information you give us
- Enquiries and project briefs: your name, role, company, email address, phone or WhatsApp number, country, website or social media links, the services you are interested in, timeline, budget range and your message.
- Consultation bookings: your name, email address, phone or WhatsApp number, company, what you would like to discuss, the type and time of the consultation you book, the price and currency shown to you, and your device’s time zone (used to show times and prices for your location). If you pay by transfer and upload your payment receipt, we keep the receipt file to confirm your payment. It is stored privately and only our team can open it.
- Job applications: through our application form: your name, email, phone or WhatsApp number, city and country, the role and type of work you want, languages, years of experience, current or last job title and company, availability, expected salary (optional), skills and tools, education, portfolio, LinkedIn and other links, your answers about your work, how you heard about us, and the CV and portfolio files you upload. If you apply by email, we keep the details and files in your email.
- Client work: when you hire us — for example to build or manage a LinkedIn profile — the information you provide for the work, such as your career history, achievements, photos and any account access you choose to give us.
Information collected automatically
- Website statistics through Google Analytics: pages viewed, time on page, how you reached the site, approximate location (city and country), device, browser and operating system, and actions such as clicking a WhatsApp, phone or email link or sending a form.
- Your country, from your IP address, on the consultation booking page only: we look up which country your IP address belongs to, using an IP-geolocation service (country.is, or ipapi.co as a backup), to show prices in your local currency. We keep only the country code for a short time and do not save your IP address with your booking.
- Technical and security logs kept by our hosting provider, such as IP address, browser, and the date and time of each request.
We do not ask for sensitive data — such as health, religious or financial information or government ID numbers — through this website. Please do not send it to us.
03How we use it, and on what basis
| Purpose | Basis |
|---|
| Reply to your enquiry and prepare a proposal or quotation | Your request, and steps you ask us to take before a contract |
| Deliver and manage the services you hire us for, invoice, and keep project records | Performing our contract with you or your company |
| Manage consultation bookings: hold your time, send payment and meeting details, check payment receipts against the payments we receive, prevent the same receipt being used twice, and run the session | Your request, and performing our agreement with you |
| Review job applications and contact candidates | Your consent, and steps before a possible employment contract |
| Understand how the website is used and improve it | Our legitimate interest in running a useful website, or your consent where the law requires it |
| Keep the website and our accounts secure and prevent misuse | Legitimate interest and legal obligations |
| Meet legal, tax and accounting requirements, and respond to lawful requests from authorities | Legal obligation |
| Send news or marketing messages | Only with your consent. You can opt out at any time |
We do not use your data to make decisions about you by automated means alone that have legal or similarly significant effects, and we never sell it.
04Cookies and analytics
When you first visit, a cookie panel asks for your choice. There are three categories: Essentials (always on: your choice is saved in your browser’s local storage, key rxck, for 12 months), Analytics (Google Analytics, off until you approve it) and Marketing (Google Ads, off until you approve it: it measures whether visits from our ads lead to an enquiry). Until you approve Analytics, Google Analytics runs in Consent Mode without setting cookies and only sends cookieless signals. You can change your choice at any time with “Cookie settings” at the bottom of every page. WordPress sets technical cookies only for people who log in to manage the website.
These cookies are set only after you approve the matching category:
| Cookie | Provider | Purpose | Expires |
|---|
_ga | Google Analytics | Tells visitors apart | 2 years |
_ga_VDEW2QHL3L | Google Analytics | Keeps the state of your visit (session) | 2 years |
_gcl_au | Google Ads (Marketing) | Links a visit from one of our ads to an enquiry | 90 days |
wordpress_*, wp-settings-* | WordPress | Logged-in website administrators only | Session to 1 year |
Our pages also load fonts from Google Fonts, so your browser connects to Google’s servers. You can block or delete cookies in your browser settings, or install Google’s opt-out add-on (tools.google.com/dlpage/gaoptout) to stop Google Analytics. The website works normally without optional cookies.
05Who we share it with
We share personal data only when it is needed, and only with:
- IYDEX Group companies, when your project or application involves them.
- Service providers that run our tools for us: our website host and email provider (Hostinger), Google (Analytics, Fonts, and Google Sheets and Drive, where job applications and CVs are stored privately for our hiring team), Meta (WhatsApp) when you choose to contact us there, Zoom when we hold a consultation, an IP-geolocation service that tells us your country on the booking page, and the payment provider that processes your payment for a consultation. They process data under their own terms and security standards.
- Professional advisers such as accountants and lawyers, under a duty of confidentiality.
- Authorities, courts or regulators, when the law requires it.
We never sell or rent personal data.
Our portfolio shows client work, including the names, photos, job titles and public follower numbers of people whose LinkedIn profiles we manage. We show them with the permission of the client or the profile owner. If you appear on this website and want something changed or removed, contact us.
06Transfers outside your country
Our team works across Saudi Arabia, Egypt, the UAE and Qatar, and some of our providers, such as Google and Meta, store data on servers in other countries.
When personal data moves across borders, we only do so as the applicable law allows — for example on the basis of an adequate level of protection, standard contractual clauses, your consent, or the regulator’s approval where it is required. We expect every recipient to protect the data to a standard at least as high as this policy.
07How long we keep it
| Data | Kept for |
|---|
| Enquiries and proposals that do not become a project | Up to 2 years from our last contact |
| Client project records, contracts and invoices | For the length of the project, then as long as tax and commercial laws require |
| Consultation bookings | Up to 2 years from the consultation, or longer if it becomes a project or the law requires it |
| Job applications | Up to 12 months, unless you agree that we keep them longer |
| Google Analytics data | Up to 14 months |
| Hosting security logs | A limited period set by our hosting provider |
When we no longer need data, we delete it or anonymise it securely.
08How we protect it
The website uses encrypted (HTTPS) connections. Access to the website administration, our mailboxes and project files is limited to the people who need it, and we use established providers for hosting, email and analytics.
No system is completely secure. If a breach is likely to affect you, we will tell you and the competent authority within the time the law requires — for example, within 72 hours to the authority in Saudi Arabia and in Egypt.
09Your rights
Depending on the country you are in, you have some or all of these rights:
- To be informed about how and why your data is used — which is what this policy does.
- Access: see the data we hold about you and receive a copy.
- Correction: have inaccurate or incomplete data fixed.
- Deletion: ask us to delete or destroy data we no longer need or have no basis to keep.
- Withdraw consent at any time, for processing based on consent.
- Object or restrict: ask us to stop or limit certain processing.
- Portability: receive your data in a usable format, where the law provides for it.
- Complain to the data-protection authority in your country.
Exercising your rights is free of charge.
10Your rights by country
KSA
Saudi Arabia
- Law
- Personal Data Protection Law (PDPL) and its Implementing Regulations
- Authority
- Saudi Data & AI Authority (SDAIA)
- Key rights
- To be informed, to access your data and get a copy, to have it corrected, to have it destroyed, and to withdraw your consent.
- Requests & complaints
- We reply within 30 days. You can complain to SDAIA.
EG
Egypt
- Law
- Law No. 151 of 2020 on the Protection of Personal Data and its Executive Regulations
- Authority
- Personal Data Protection Center (PDPC)
- Key rights
- To know and access your data, to withdraw consent, to have it corrected, updated or erased, to restrict processing to a specific scope, to object, and to be told about any breach of your data.
- Requests & complaints
- You can complain to the PDPC.
UAE
United Arab Emirates
- Law
- Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data
- Authority
- UAE Data Office
- Key rights
- To information, access, portability, correction and erasure, to restrict or stop processing, and to object to decisions made by automated means.
- Requests & complaints
- You can complain to the UAE Data Office.
QA
Qatar
- Law
- Law No. 13 of 2016 on Personal Data Privacy Protection
- Authority
- National Cyber Security Agency (NCSA)
- Key rights
- To withdraw consent, to object, to request erasure and correction, and to access your data and be told how it is processed and of any inaccurate disclosure.
- Requests & complaints
- You can complain to the NCSA.
11How to make a request
Email privacy@rx-designer.com with the subject “Privacy request”, or message us on WhatsApp. Tell us what you would like us to do and which country you are in. We may ask you to confirm your identity before we act.
We reply as soon as we can and within 30 days at the latest, or sooner where the law in your country requires it. If we cannot fully meet a request — for example, because the law requires us to keep certain records — we will explain why.
12Children
Our services are for businesses and professionals. This website is not intended for anyone under 18, and we do not knowingly collect their data. If you believe a minor has sent us personal data, contact us and we will delete it.
13Links to other websites
Our pages link to other websites, such as the client websites we built, LinkedIn profiles, WhatsApp and our social media pages. Their own privacy policies apply when you visit them.
14Changes to this policy
We may update this policy when our services, our tools or the law change. The date at the top shows the latest version. For significant changes, we will add a clear notice on the website.