العربية
Book a consultation
45-minute strategy session
  • One-to-one on Zoom with our team
  • Clear next steps for your brand, marketing, website or LinkedIn
  • Full refund up to 48 hours before
See available times
Start a project
Privacy

Privacypolicy.

How RX Designer collects, uses, shares and protects personal data — written for the markets we work in: Saudi Arabia, Egypt, the UAE and Qatar.

Saudi ArabiaEgyptUAEQatar

Last updated: 1 November 2026

At a glance

  • We only collect what you choose to send us — through our forms, WhatsApp, email or phone — plus website statistics from Google Analytics.
  • We use it to reply to you, prepare proposals, deliver our work and hire people. We never sell it.
  • Our enquiry forms don’t store your message on our server: they open WhatsApp or your email app, so you see the message and send it yourself. The only exception is the consultation booking form, which saves your booking so we can hold your time and confirm it.
  • You can ask to see, correct or delete your data at any time, and you can complain to the data-protection authority in your country.
  • Questions? Email privacy@rx-designer.com.

01Who we are

RX Designer (“RX”, “we”, “us”) is a marketing and business solutions studio and a member of IYDEX Group. We work with companies and professionals in the Kingdom of Saudi Arabia, the Arab Republic of Egypt, the United Arab Emirates and the State of Qatar.

For the personal data described in this policy, RX Designer is the controller: we decide why and how it is processed. This policy covers rx-designer.com, its forms, and the conversations you have with us by WhatsApp, email and phone.

It does not cover the websites and social media accounts we build or manage for our clients. Each client is responsible for its own privacy policy.

02Information we collect

Information you give us

  • Enquiries and project briefs: your name, role, company, email address, phone or WhatsApp number, country, website or social media links, the services you are interested in, timeline, budget range and your message.
  • Consultation bookings: your name, email address, phone or WhatsApp number, company, what you would like to discuss, the type and time of the consultation you book, the price and currency shown to you, and your device’s time zone (used to show times and prices for your location). If you pay by transfer and upload your payment receipt, we keep the receipt file to confirm your payment. It is stored privately and only our team can open it.
  • Job applications: through our application form: your name, email, phone or WhatsApp number, city and country, the role and type of work you want, languages, years of experience, current or last job title and company, availability, expected salary (optional), skills and tools, education, portfolio, LinkedIn and other links, your answers about your work, how you heard about us, and the CV and portfolio files you upload. If you apply by email, we keep the details and files in your email.
  • Client work: when you hire us — for example to build or manage a LinkedIn profile — the information you provide for the work, such as your career history, achievements, photos and any account access you choose to give us.

Information collected automatically

  • Website statistics through Google Analytics: pages viewed, time on page, how you reached the site, approximate location (city and country), device, browser and operating system, and actions such as clicking a WhatsApp, phone or email link or sending a form.
  • Your country, from your IP address, on the consultation booking page only: we look up which country your IP address belongs to, using an IP-geolocation service (country.is, or ipapi.co as a backup), to show prices in your local currency. We keep only the country code for a short time and do not save your IP address with your booking.
  • Technical and security logs kept by our hosting provider, such as IP address, browser, and the date and time of each request.

We do not ask for sensitive data — such as health, religious or financial information or government ID numbers — through this website. Please do not send it to us.

03How we use it, and on what basis

PurposeBasis
Reply to your enquiry and prepare a proposal or quotationYour request, and steps you ask us to take before a contract
Deliver and manage the services you hire us for, invoice, and keep project recordsPerforming our contract with you or your company
Manage consultation bookings: hold your time, send payment and meeting details, check payment receipts against the payments we receive, prevent the same receipt being used twice, and run the sessionYour request, and performing our agreement with you
Review job applications and contact candidatesYour consent, and steps before a possible employment contract
Understand how the website is used and improve itOur legitimate interest in running a useful website, or your consent where the law requires it
Keep the website and our accounts secure and prevent misuseLegitimate interest and legal obligations
Meet legal, tax and accounting requirements, and respond to lawful requests from authoritiesLegal obligation
Send news or marketing messagesOnly with your consent. You can opt out at any time

We do not use your data to make decisions about you by automated means alone that have legal or similarly significant effects, and we never sell it.

04Cookies and analytics

When you first visit, a cookie panel asks for your choice. There are three categories: Essentials (always on: your choice is saved in your browser’s local storage, key rxck, for 12 months), Analytics (Google Analytics, off until you approve it) and Marketing (Google Ads, off until you approve it: it measures whether visits from our ads lead to an enquiry). Until you approve Analytics, Google Analytics runs in Consent Mode without setting cookies and only sends cookieless signals. You can change your choice at any time with “Cookie settings” at the bottom of every page. WordPress sets technical cookies only for people who log in to manage the website.

These cookies are set only after you approve the matching category:

CookieProviderPurposeExpires
_gaGoogle AnalyticsTells visitors apart2 years
_ga_VDEW2QHL3LGoogle AnalyticsKeeps the state of your visit (session)2 years
_gcl_auGoogle Ads (Marketing)Links a visit from one of our ads to an enquiry90 days
wordpress_*, wp-settings-*WordPressLogged-in website administrators onlySession to 1 year

Our pages also load fonts from Google Fonts, so your browser connects to Google’s servers. You can block or delete cookies in your browser settings, or install Google’s opt-out add-on (tools.google.com/dlpage/gaoptout) to stop Google Analytics. The website works normally without optional cookies.

05Who we share it with

We share personal data only when it is needed, and only with:

  • IYDEX Group companies, when your project or application involves them.
  • Service providers that run our tools for us: our website host and email provider (Hostinger), Google (Analytics, Fonts, and Google Sheets and Drive, where job applications and CVs are stored privately for our hiring team), Meta (WhatsApp) when you choose to contact us there, Zoom when we hold a consultation, an IP-geolocation service that tells us your country on the booking page, and the payment provider that processes your payment for a consultation. They process data under their own terms and security standards.
  • Professional advisers such as accountants and lawyers, under a duty of confidentiality.
  • Authorities, courts or regulators, when the law requires it.

We never sell or rent personal data.

Our portfolio shows client work, including the names, photos, job titles and public follower numbers of people whose LinkedIn profiles we manage. We show them with the permission of the client or the profile owner. If you appear on this website and want something changed or removed, contact us.

06Transfers outside your country

Our team works across Saudi Arabia, Egypt, the UAE and Qatar, and some of our providers, such as Google and Meta, store data on servers in other countries.

When personal data moves across borders, we only do so as the applicable law allows — for example on the basis of an adequate level of protection, standard contractual clauses, your consent, or the regulator’s approval where it is required. We expect every recipient to protect the data to a standard at least as high as this policy.

07How long we keep it

DataKept for
Enquiries and proposals that do not become a projectUp to 2 years from our last contact
Client project records, contracts and invoicesFor the length of the project, then as long as tax and commercial laws require
Consultation bookingsUp to 2 years from the consultation, or longer if it becomes a project or the law requires it
Job applicationsUp to 12 months, unless you agree that we keep them longer
Google Analytics dataUp to 14 months
Hosting security logsA limited period set by our hosting provider

When we no longer need data, we delete it or anonymise it securely.

08How we protect it

The website uses encrypted (HTTPS) connections. Access to the website administration, our mailboxes and project files is limited to the people who need it, and we use established providers for hosting, email and analytics.

No system is completely secure. If a breach is likely to affect you, we will tell you and the competent authority within the time the law requires — for example, within 72 hours to the authority in Saudi Arabia and in Egypt.

09Your rights

Depending on the country you are in, you have some or all of these rights:

  • To be informed about how and why your data is used — which is what this policy does.
  • Access: see the data we hold about you and receive a copy.
  • Correction: have inaccurate or incomplete data fixed.
  • Deletion: ask us to delete or destroy data we no longer need or have no basis to keep.
  • Withdraw consent at any time, for processing based on consent.
  • Object or restrict: ask us to stop or limit certain processing.
  • Portability: receive your data in a usable format, where the law provides for it.
  • Complain to the data-protection authority in your country.

Exercising your rights is free of charge.

10Your rights by country

KSA

Saudi Arabia

Law
Personal Data Protection Law (PDPL) and its Implementing Regulations
Authority
Saudi Data & AI Authority (SDAIA)
Key rights
To be informed, to access your data and get a copy, to have it corrected, to have it destroyed, and to withdraw your consent.
Requests & complaints
We reply within 30 days. You can complain to SDAIA.
EG

Egypt

Law
Law No. 151 of 2020 on the Protection of Personal Data and its Executive Regulations
Authority
Personal Data Protection Center (PDPC)
Key rights
To know and access your data, to withdraw consent, to have it corrected, updated or erased, to restrict processing to a specific scope, to object, and to be told about any breach of your data.
Requests & complaints
You can complain to the PDPC.
UAE

United Arab Emirates

Law
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data
Authority
UAE Data Office
Key rights
To information, access, portability, correction and erasure, to restrict or stop processing, and to object to decisions made by automated means.
Requests & complaints
You can complain to the UAE Data Office.
QA

Qatar

Law
Law No. 13 of 2016 on Personal Data Privacy Protection
Authority
National Cyber Security Agency (NCSA)
Key rights
To withdraw consent, to object, to request erasure and correction, and to access your data and be told how it is processed and of any inaccurate disclosure.
Requests & complaints
You can complain to the NCSA.

11How to make a request

Email privacy@rx-designer.com with the subject “Privacy request”, or message us on WhatsApp. Tell us what you would like us to do and which country you are in. We may ask you to confirm your identity before we act.

We reply as soon as we can and within 30 days at the latest, or sooner where the law in your country requires it. If we cannot fully meet a request — for example, because the law requires us to keep certain records — we will explain why.

12Children

Our services are for businesses and professionals. This website is not intended for anyone under 18, and we do not knowingly collect their data. If you believe a minor has sent us personal data, contact us and we will delete it.

14Changes to this policy

We may update this policy when our services, our tools or the law change. The date at the top shows the latest version. For significant changes, we will add a clear notice on the website.

15Contact us

RX Designer — a member of IYDEX Group

Contact us

Questions about
your data?