Privacy Policy

1. Personal Data & Data Protection

This Privacy Policy explains how Q5 Arabia for Business Services (“Q5”, “we”, “us”, “our”) collects, uses, stores, discloses, and protects personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the Saudi Personal Data Protection Law (PDPL).
This policy applies to individuals who interact with Q5 globally, including website visitors, clients, business contacts, and partners, and specifically applies to individuals located in the Kingdom of Saudi Arabia (KSA) where PDPL is applicable.

1.1 Data Controllers at Q5

Controller Information

Q5 is the controller responsible for the processing of personal data described in this policy.

Contact: Email: dataprivacy@q5partners.com

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identification and contact details (e.g. name, email address, job title, company, address, city)
• Professional and business information
• Information submitted via forms, enquiries, or communications
• Technical and usage data (e.g. IP address, browser type, device data, cookies)
• Any other information voluntarily provided to us

Q5 does not collect any sensitive data through our website. In the event it is necessary to collect any sensitive data, we will obtain your explicit consent where required by law.

3. Means of Collection

Personal data is collected through the following means:

• Directly from you, when you contact us, submit a general enquiry form, vacancy form or engage with our services
• Automatically, through website technologies such as cookies and log files
• From third parties, where permitted by law, including business partners, service providers, or publicly available sources

4. Purposes of Processing and Legal Basis

We process personal data for the following purposes:

• Providing and managing our services
• Responding to enquiries and communications, including vacancy management.
• Managing client and business relationships
• Operating, securing, and improving our website
• Meeting legal, regulatory, and contractual obligations
• Protecting our legitimate business interests

Personal data is processed based on one or more lawful bases, depending on the applicable law, including:

• Your consent, where required (including under PDPL)Performance of a contract or pre-contractual steps
• Compliance with legal obligations
• Legitimate interests, provided such interests do not override your rights

Where consent is required, it is obtained in a clear, specific, and documented manner and may be withdrawn at any time, subject to legal or contractual restrictions.

For individuals located in the Kingdom of Saudi Arabia, personal data is processed primarily on the basis of consent, unless another legal basis applies under the Saudi Personal Data Protection Law and its Executive Regulations, including where processing is necessary to perform a contract, comply with a legal obligation, achieve legitimate interests that do not prejudice the rights of the data subject, or where otherwise permitted by law.

5. Cookies and Similar Technologies

We use cookies and similar technologies to ensure website functionality, analyse usage, and improve user experience. You may manage cookies through your browser settings. Where required by law, consent will be obtained prior to non-essential cookies being used.

6. Data Sharing

Q5 does not share your personal data with unaffiliated parties, but we may use your personal data to, among other things:

• Provide the information or service requested or otherwise respond to your inquiries
• Improve the content, navigation, and efficiency of the Site
• Make you aware of other benefits, products, services, or events offered by Q5 that may interest you

Therefore, we may disclose personal data to respond to your enquiry you submitted through the website.:

• Group companies and affiliates
• Service providers and professional advisers
• Technology, hosting, and analytics providers
• Regulatory or governmental authorities where required by law

All disclosures are subject to appropriate confidentiality, security, and data protection obligations.

7. Cross-Border Transfers

Personal data may be transferred to and processed in countries outside your country of residence, including outside the Kingdom of Saudi Arabia.
Where cross-border transfers occur, Q5 ensures that appropriate safeguards are in place in accordance with applicable law, including:

• Transfers to jurisdictions approved by competent authorities
• Contractual protections consistent with GDPR and PDPL requirements
• Technical and organisational safeguards to protect personal data

8. Data Security

Q5 implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include access controls, secure systems, internal policies, and staff training.

Access to personal data is restricted to authorised personnel on a need-to-know basis.

9. Data Retention and Destruction

Personal data is retained only for as long as necessary to fulfil the purposes described in this policy or as required by applicable law.
When personal data is no longer required, it is securely destroyed, deleted, or anonymised using appropriate methods in line with legal and operational requirements.

10. Personal Data Breaches

Q5 maintains documented procedures for identifying, managing, and responding to personal data breaches.
In the event of a breach that may pose a risk to individuals, Q5 will:

• Take appropriate remedial and containment measures
• Notify relevant authorities where required
• Notify affected individuals in accordance with applicable law, including GDPR and PDPL

11. Your Rights

Subject to applicable law, you may have the right to:

• Be informed about the collection and use of your personal data
• Access your personal data
• Request correction or completion of inaccurate data
• Request deletion or destruction of personal data when no longer necessary
• Withdraw consent where processing is based on consent
• Object to or restrict certain processing activities

Requests may be submitted using the contact details below. We will respond within legally required timeframes. Q5 has appointed a Data Protection Officer responsible for overseeing compliance with applicable data protection laws.

12. Complaints and Supervisory Authorities

If you have concerns about how your personal data is handled, you may contact us using the details below.

You also have the right to lodge a complaint with a relevant supervisory authority, including:

• The Saudi Data & AI Authority (SDAIA) for individuals in KSA
• Your local data protection authority within the EEA or other jurisdictions

13. Updates to This Policy

We may update this Privacy Policy from time to time. Any updates will be published on this page with the revised date.

Contact Us

If you wish to raise a complaint on how we have handled your personal data, you can contact Q5’s Data Privacy Lead at dataprivacy@q5partners.com who will investigate the matter.