Privacy Policy

1. Who we are

Common Futures (“we”, “us”, “our”) operates this website and the membership it describes, based in the King Abdullah Financial District (KAFD), Riyadh, Kingdom of Saudi Arabia. For the purposes of the PDPL, we act as the data controller responsible for the personal data we process about you.

2. The personal data we collect

When you register interest, apply for a key, subscribe to updates, or contact us, we may collect: your name; contact details such as email address and phone number; your occupation and social profiles where you choose to share them; and any information you include in your message.

When you use the website, we may also collect limited technical information such as device and browser type and general usage data, where you have consented to non-essential cookies.

3. How we use your personal data

We use your personal data to respond to your enquiry, process and assess membership applications, keep you informed about openings and events where you have asked us to, operate and improve the website, and meet our legal and regulatory obligations.

4. Legal basis for processing

We process your personal data on the bases permitted by the PDPL, including your consent, the performance of a contract or steps taken at your request before entering into one, our legitimate interests in operating and growing Common Futures, and compliance with applicable law. You may withdraw consent at any time without affecting processing carried out beforehand.

5. Sharing your personal data

We do not sell your personal data. We may share it with service providers who process data on our behalf (for example, email, hosting, and customer-relationship tools) under appropriate confidentiality and data-protection terms, and with authorities or advisers where required by law.

6. International transfers

Some of our service providers may process personal data outside the Kingdom of Saudi Arabia. Where this happens, we take steps to ensure transfers comply with the PDPL and its implementing regulations and that your data remains appropriately protected.

7. How long we keep your data

We keep personal data only for as long as necessary for the purposes set out in this policy, or as required by law, after which it is securely deleted or anonymised.

8. Your rights under the PDPL

Subject to applicable law, you have the right to be informed about how your data is used, to access your data, to request correction of inaccurate data, to request deletion, and to withdraw consent. To exercise any of these rights, please contact us using the details below.

9. Cookies

The website uses essential cookies needed for it to function. Any non-essential or analytics cookies are used only with your consent, which you can manage or withdraw at any time through your browser settings.

10. Security

We apply appropriate technical and organisational measures to protect personal data against loss, misuse, and unauthorised access. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly to any incident.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the “last updated” date amended accordingly.

12. Contact and complaints

If you have questions about this policy or wish to exercise your rights, please contact us at info@commonriyadh.com. You also have the right to lodge a complaint with the competent supervisory authority in the Kingdom of Saudi Arabia, the Saudi Data and Artificial Intelligence Authority (SDAIA).