Privacy and data
Privacy Policy
This policy explains how Dira Intellectual Property collects, uses, protects and retains personal information when you browse the website, submit a service request or book a consultation.
Data controller
مكتب درع الابتكار والإبداع للملكية الفكرية, trading as Dira Intellectual Property. Contact: info@diraip.sa or +966 58 118 0801.
Information we collect
We collect information you provide directly, including your name, mobile number, email, applicant type, business activity, protection territory, requested service, matter status, contact preferences, notes and requested attachments. Limited usage data includes the page, language, referral source, general country, device type and whether a request or consultation was started or completed.
Purpose and legal basis
We process information to review requests, communicate with you, prepare proposals, provide agreed services, manage appointments, protect the website and improve its operation. Depending on the circumstances, processing is based on consent, steps requested before engagement, performance of an agreement, a legal obligation, or a legitimate interest that does not override your rights.
Data minimisation and accuracy
We request information directly relevant to the service. Some fields are required for review and others are optional. Do not submit passwords, card information or documents unnecessary for the initial review, and ensure that the information you provide is accurate.
Attachments and WhatsApp
Requested attachments are stored privately. An attachment may be made available through a high-entropy request-specific link whose public access expires after 30 days, while authorised administrative access may continue when needed. A WhatsApp message is sent only after you confirm it in the app. WhatsApp is subject to its provider's policy and may involve processing outside Saudi Arabia.
Sharing and international processing
We do not sell personal information. Necessary information may be shared with hosting, communications or payment providers when enabled, relevant specialists, or competent authorities, subject to confidentiality and applicable law. Cloud service providers may host or technically process information outside Saudi Arabia in accordance with applicable transfer requirements.
Retention and deletion
Request records are retained during review or the professional relationship and afterwards for as long as needed to evidence the engagement, meet legal obligations and resolve claims. They are then securely deleted or anonymised. Unnecessary records are reviewed periodically, and privacy-preserving website analytics records are deleted after 60 months to support annual comparisons.
Your rights
Where applicable, you may request information about processing, access your information, obtain a copy, correct or complete it, request deletion, or withdraw consent. We may verify your identity and will respond within 30 days, subject to any permitted extension notified to you.
Security and incidents
We use technical and organisational safeguards including restricted administrative access, request and file validation, encryption in transit, limited-access links and activity records. No electronic method is entirely risk-free, and any incident will be handled under applicable requirements.
Rights requests and complaints
Email info@diraip.sa with the type of request and your preferred contact method. You may also complain to the competent authority where legally available.
Policy version: 7 September 2026. Material updates will be published on this page and apply from their stated update date.
Back to the website