Privacy Policy

Oxon X is an AI compliance audit and advisory firm established in the Kingdom of Saudi Arabia — Commercial Registration No. [CR NUMBER]. For any privacy matter, contact us at contact@oxonx.sa.

This policy covers personal data processed in connection with this website. Personal data that we process in the course of professional engagements — for example, data contained in systems, datasets or documents we audit on behalf of clients — is governed by the engagement agreement and data processing terms concluded with each client, not by this policy.

This website does not collect personal data through forms. There is no contact form, no newsletter signup, and no account system.

When you email us. If you choose to contact us by email (for example via the address displayed on this site), we receive and process the information you decide to send us — typically your name, email address, company, and the content of your message — in order to respond to your enquiry. This correspondence is received and stored in our professional email system.

Technical data. We do not use analytics or advertising cookies; only technical data strictly necessary to serve the website is processed.

We do not share your personal data with third parties, except:

• Email service provider. Our professional email system is provided by Google (Google Workspace), acting as our processor under Google's data processing terms.
• Website hosting provider (Emergent Labs Inc., USA), which serves this website but does not receive or store your correspondence.
• Public authorities, where disclosure is required by applicable law.

Email enquiries are kept in our professional mailbox for 36 months after our last exchange, unless an engagement follows (in which case engagement records are kept as required by applicable law). We then delete them.

This website uses only cookies strictly necessary for its operation. We do not use advertising or tracking cookies.

Under the PDPL, you have the right to be informed about the processing of your personal data; to access it and request a copy; to request correction of inaccurate data; to request deletion, subject to legal retention requirements; and to object to or restrict certain processing.

To exercise any of these rights, write to contact@oxonx.sa.

We apply technical and organizational measures appropriate to the nature of the data we process, including encryption in transit, access restrictions, and vendor due diligence.