Last updated: Mon Apr 13 2026 00:00:00 GMT+0000 (Coordinated Universal Time)

Privacy Policy

Clause 1: Introduction

Ambitious Tale is a marketing agency based in Riyadh, Kingdom of Saudi Arabia. We are committed to protecting the privacy and confidentiality of the personal data of our website visitors, clients, prospective clients, and newsletter subscribers, in line with the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations.

This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit ambitioustale.com (the "Website"), contact us, engage our services, or subscribe to our communications. By using the Website or submitting your information to us, you acknowledge that you have read and understood this Privacy Policy.

Clause 2: The Data We Collect and the Purpose of Collecting It

First — Personal data we may collect

  • Full name
  • Email address
  • Phone number (optional)
  • Company or organization name (optional)
  • Job title (optional)
  • Message or inquiry content you submit through our contact or project-request forms
  • Newsletter subscription preferences
  • Technical data collected automatically when you visit the Website, such as IP address, browser type, device type, operating system, referring pages, and pages visited

Second — Purposes of collecting personal data

We collect personal data in order to:

  • Respond to inquiries, proposals, and project requests submitted through the Website
  • Deliver the marketing, branding, content, and digital services requested by our clients
  • Send newsletters, updates, and marketing communications to users who have opted in
  • Improve the performance, content, and user experience of the Website
  • Comply with applicable laws and regulations in the Kingdom of Saudi Arabia

Clause 3: Data Collection Methods

  • Directly from you when you fill in a contact form, request a proposal, subscribe to our newsletter, or otherwise communicate with us
  • Automatically through cookies and similar technologies when you visit the Website (see Clause 10 — Cookies & Analytics)
  • From our clients, where you are an employee, contractor, or representative of a client we are delivering services to

We do not purchase personal data from third-party data brokers.

Clause 4: Use of Personal Data

Personal data is used only for the purposes set out in Clause 2. We do not use your personal data for automated decision-making that produces legal effects on you, and we do not sell your personal data under any circumstances.

Clause 5: Storage and Destruction of Personal Data

  • Your personal data is stored on servers and cloud services that apply security controls aligned with the standards of the Saudi National Cybersecurity Authority (NCA) and recognized international frameworks.
  • We retain personal data only for as long as it is necessary to fulfill the purposes for which it was collected, or to comply with legal, accounting, tax, or contractual obligations.
  • When personal data is no longer required, it is destroyed or anonymized in a secure manner such that it can no longer be accessed or reconstructed.

Clause 6: Legal Basis for Collecting and Processing Personal Data

We collect and process personal data based on one or more of the following legal bases under PDPL:

  • Your explicit consent (for example, submitting a contact form or subscribing to our newsletter)
  • The performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract
  • Compliance with a legal obligation to which Ambitious Tale is subject
  • Our legitimate interests, provided such interests do not override your fundamental rights and freedoms

You may withdraw your consent at any time by contacting us at hello@ambitioustale.com, unless another legal basis requires us to continue processing.

Clause 7: Rights of the Personal Data Subject

In accordance with the Saudi PDPL, you have the following rights in relation to your personal data:

  1. Right to be informed — to know how your personal data is collected, the legal basis for its collection and processing, how it is processed, stored, destroyed, and with whom it is shared.
  2. Right of access — to request a copy of the personal data we hold about you, free of charge, within a reasonable period of receiving your request.
  3. Right to request rectification — to request the correction of any personal data you believe to be inaccurate, incomplete, or outdated.
  4. Right to request erasure — to request the deletion of your personal data when it is no longer necessary for the purposes it was collected for, unless we are required by law to retain it.
  5. Right to withdraw consent — to withdraw your consent to the processing of your personal data at any time, where consent is the legal basis for processing.
  6. Right to lodge a complaint — to submit a complaint to us at hello@ambitioustale.com, or to the competent supervisory authority in the Kingdom of Saudi Arabia, if you believe your rights have been violated.

To exercise any of these rights, please contact us at hello@ambitioustale.com. We will respond within seven (7) working days of receiving your request.

Clause 8: Sharing and Disclosure of Personal Data

We do not sell or rent personal data. We may share your personal data only with:

  • Service providers and processors who help us operate the Website and deliver our services — for example, website hosting, cloud storage, email delivery, newsletter platforms, analytics, customer relationship management (CRM), and project-management tools. These providers act on our instructions under written data-processing agreements.
  • Competent governmental, regulatory, or judicial authorities when required by applicable laws and regulations of the Kingdom of Saudi Arabia.
  • Professional advisors such as lawyers, auditors, and accountants, where reasonably required and under appropriate confidentiality obligations.
  • Third parties in connection with a business transfer, such as a merger, acquisition, or sale of assets, subject to the same privacy protections as this Policy.

Clause 9: International Transfers of Personal Data

Some of our service providers may store or process personal data outside the Kingdom of Saudi Arabia. Where this occurs, we only transfer personal data to jurisdictions or providers that maintain an adequate level of protection and apply appropriate safeguards in accordance with the PDPL and its Implementing Regulations.

Clause 10: Cookies & Analytics

The Website uses cookies and similar technologies to:

  • Ensure the Website functions correctly (essential cookies)
  • Remember your language and display preferences
  • Measure Website traffic and understand how visitors use the Website (analytics cookies)
  • Evaluate the performance of our marketing campaigns

You can control or disable cookies through your browser settings. Disabling essential cookies may affect the functionality of the Website.

Clause 11: Children's Data

The Website and our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at hello@ambitioustale.com and we will take appropriate steps to delete it.

Clause 12: External Links

The Website may contain links to third-party websites for the user's convenience. Ambitious Tale is not responsible for the content, privacy practices, or availability of those websites, and this Privacy Policy does not apply to them. We encourage you to review the privacy policies of any third-party website you visit.

Clause 13: Security Measures

We apply administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, disclosure, alteration, or destruction. These include access controls, encryption in transit, secure hosting environments, staff confidentiality obligations, and regular review of our security practices. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Clause 14: Exercising Your Rights, Complaints & Inquiries

If you have any questions, complaints, or requests regarding this Privacy Policy or the handling of your personal data, please contact us:

If you do not receive a response within seven (7) working days, or if you are not satisfied with our response, you may escalate your complaint to the competent supervisory authority in the Kingdom of Saudi Arabia.

Clause 15: Updates to This Privacy Policy

Ambitious Tale reserves the right to add to, amend, or update any provision of this Privacy Policy at any time. The updated version will be published on the Website with a revised "last updated" date. Your continued use of the Website after any update constitutes your acceptance of the revised Privacy Policy.

Clause 16: Governing Language and Law

This Privacy Policy is issued in both Arabic and English. In the event of any discrepancy or dispute arising from the interpretation of any clause, the Arabic version shall prevail. This Privacy Policy is governed by the laws of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL) and its Implementing Regulations.

Last updated: 2026-04-13