We ask for the least we need, use it only for what you asked, and never sell it. This policy explains how the Executive Newsletters Bureau processes your personal data under the Personal Data Protection Law of the Kingdom of Saudi Arabia.
Who we are and how to reach us
The Executive Newsletters Bureau is responsible for the data that reaches us through the website, email, WhatsApp, or while we provide a service.
- Legal name: Mini Series Company · Commercial registration: [ ]
- Address: Al Rayyan District, Riyadh
- Email: info@executiveletters.com
- WhatsApp: via the link at the foot of every page on the website
For any question or request about your data, email us at the address above with the subject “Request about my data”.
The data we collect
Email is the only required field in the website’s forms. We do not ask for sensitive data such as health or beliefs.
| Data | When we collect it | Required? |
|---|---|---|
| Email address | Every form on the site, and the newsletter | Yes |
| Name, organization, title, LinkedIn link and message text | Forms and messages | No |
| Mobile number | When you message us on WhatsApp or enter it yourself | No |
| Subscription data: package, add-ons, invoices and your organization’s VAT number | On subscribing and invoicing | Yes, to issue the invoice |
| Payment data | When paying by card | Entered directly in the payment gateway; we do not store card numbers |
| What you share to prepare content: ideas, interviews, drafts and recordings | While we provide the service | Depends on the service |
| Access to your accounts | Only if you order “Publishing and account management”, with written authorization | No |
| Basic technical data: IP address and browser type | Server logs when you visit the site | Collected automatically for site security |
If you share other people’s data with us, such as colleagues’ names in a draft, you are responsible for informing them and obtaining their consent where required.
Why we use it, and on what basis
We use your data for the purpose you gave it for, and not for any other purpose without telling you.
| Purpose | Basis |
|---|---|
| Answering your request: a trial post, a presence review, a quote or an inquiry | Your consent when you send the form |
| Providing the service you subscribed to and communicating about it | Performing our contract |
| Issuing e-invoices and keeping tax records | Legal obligation |
| Sending the newsletter and news of new guides | Separate, optional consent |
| Protecting the site from abuse and automated messages | A legitimate interest that does not affect your rights |
We do not sell your data or use it for automated decisions that affect you. We do not reveal that we write for you without your permission.
Who we share it with, and where it is kept
We share your data only with providers who work on our behalf under contracts that bind them to confidentiality, and only as far as their work requires:
- Website hosting: [provider and server location]
- Email and newsletter: [provider]
- Payment gateway: [provider]
- E-invoicing system: [provider]
- WhatsApp: when you message us there, WhatsApp’s privacy policy also applies.
We share it in only two other cases:
- At your request: for example, when you ask us to refer your content to one of the Bureau’s accredited legal partners for review.
- When the law requires: at the request of a competent authority, and only as far as the law obliges us.
Transferring personal data outside the Kingdom
The Bureau may use technical service providers to process, store or make personal data available from locations outside the Kingdom of Saudi Arabia, where the nature of the service requires it.
Where a transfer of personal data outside the Kingdom applies, the Bureau meets the relevant regulatory requirements and controls, including the safeguards needed to protect the data and the assessment of the level of protection and of risk, as the applicable laws and regulations require.
A transfer is made only to the extent needed for the specified purposes of processing, with appropriate measures to protect the personal data.
How long we keep it
The Executive Newsletters Bureau keeps personal data for as long as needed to achieve the purposes for which it was collected, or for the period required by the laws and regulations in force in the Kingdom of Saudi Arabia, as the case may be.
- Enquiries and commercial offers: for up to 12 months from the last relevant contact, unless commercial follow-up or regulatory requirements call for a different period.
- Client data and operational correspondence: for the whole contractual relationship, then for the period needed to handle claims and contractual obligations and to comply with regulatory requirements, under the Bureau’s approved retention schedule.
- Financial, accounting and tax documents: for the periods set by law, according to the type of document and the obligation concerned.
- Technical records and server logs: for a target operating period of 90 days, unless security requirements, incident investigation or regulatory obligations require keeping them longer.
- Newsletter subscribers: until you unsubscribe.
- What you type in the guide’s tools, and saved articles: in your browser only; it never reaches us.
When the purpose of keeping the data ends, the data is destroyed or anything identifying the people it concerns is removed, as the applicable laws and regulations allow, taking into account any regulatory obligation to keep it longer.
Data subject requests
A data subject may contact the Bureau at info@executiveletters.com to exercise the rights granted under the Personal Data Protection Law and its implementing regulations, including requesting access to their data, obtaining it, correcting it or having it destroyed, under the regulatory conditions and controls that apply to each right. You may also withdraw your consent to processing based on consent, without affecting what happened before.
The Bureau verifies the identity and standing of the person making the request, and assesses the request according to its nature and the relevant regulatory requirements. The Bureau aims to reply within no more than 30 days of receiving a complete request, unless the law sets a different period or allows it to be changed in the case concerned.
If a request cannot be carried out in whole or in part, the Bureau explains this to the requester as far as the law allows, giving reasons where the law requires them.
Making a request does not lead to the destruction of data that the Bureau must keep under a regulatory obligation or to protect a legitimate right under the applicable controls.
- Cost: there is no fee for these requests.
- Complaints: if you are not satisfied with our reply, you may complain to the Saudi Data and Artificial Intelligence Authority (SDAIA).
Marketing messages and browser storage
We send marketing messages only to people who agreed to them with a separate box that was not ticked in advance.
- Every marketing message has a one-click unsubscribe link.
- Service messages, such as invoices and drafts awaiting your approval, are not marketing and continue while the contract is active.
Browser storage: the site saves in your browser what you type in the handbook’s tools, your saved articles and your language choice. This stays on your device only, never reaches us, and you can clear it from the handbook or your browser settings.
Cookies: we use only the essential ones, such as keeping subscribers signed in. We do not use analytics or advertising tools that track you unless you agree.
Data protection and incidents
We protect data in line with its sensitivity:
- An encrypted connection to the site (HTTPS).
- Bureau staff access requests by role only, with passwords and two-factor authentication.
- Access to your accounts is kept in an encrypted password manager and is never sent by email or chat.
If an incident affects your data: we notify SDAIA within 72 hours of becoming aware of it where the law requires, and we tell you without delay what happened, what we did and what you can do.
Minors: our services are for professionals and organizations, and we do not knowingly collect data from anyone under 18.
Changes to this policy: we publish any change here with the edition date. If a change materially alters how we use your data, we tell you by email and ask for your consent where required.
Edition 1.0 · October 2026