Privacy Policy
Scope
This policy applies to HAWNA’s public website only — an informational site with no user accounts, no online forms, no payments and no subscriptions. It explains what personal data may be collected or processed when you visit the website, the purposes and legal basis of that processing, how long it is kept, and your rights and how to exercise them, in accordance with the Personal Data Protection Law, its Implementing Regulations and the Regulation on Personal Data Transfer Outside the Kingdom issued by the Saudi Data and Artificial Intelligence Authority (SDAIA).
The controller and contact
The controller of the data processed through this website is Hawna fi alwusul Establishment, a Saudi sole establishment, owner of the HAWNA brand, with registered activity of educational transport and commercial registration number 7055295427, based in Riyadh, Saudi Arabia. The email for enquiries, rights requests and complaints is info@hawna.com.sa.
Data that may be collected through the website
As it stands, the website is a static informational site that collects no personal data from visitors directly: no input forms, no accounts, no registration, no payment, and no analytics or tracking tools. What may be processed is limited to two things: technical connection data the server receives when you request a page, in order to deliver it and protect the site, which may be recorded in its logs — including your Internet Protocol address, browser and operating system type, the page requested and the time of the request; and data you provide voluntarily if you email us, such as your email address, your name and the content of your message. You decide what you send, so please do not include data that is not needed for a reply, in particular sensitive data.
Cookies, tracking and browser storage
The website uses no cookies, no analytics tools, no tracking pixels and no third-party scripts, and it stores no data in your browser, so it shows no cookie consent banner. Fonts and logos are served from the website’s own domain and are not requested from any external party. The website collects no location data and does not access the camera or microphone, and it does not store your language preference — the language choice is simply a link to the corresponding page. If we add any such technology in the future, we will update this policy before enabling it and ask for your consent where the Law requires it.
How we collect data
The website has no forms or input fields, so the only direct collection is what you choose to provide in an email. Technical data is generated automatically by the way the Internet works when pages are requested, and is not used to build profiles of visitors. Providing any data by email is optional, and the only consequence of not doing so is that we cannot reply to you.
Purposes of processing
We process data only to make the website’s pages available and display them correctly, keep the site secure and stable and detect and respond to misuse; to receive and reply to your messages and follow up enquiries; and to meet our legal obligations and defend our rights where necessary. We do not use visitors’ data for direct marketing, we do not sell it, and we do not disclose it for advertising.
Legal basis
Technical data is processed to achieve a legitimate interest of the controller — operating and protecting the website — which does not prejudice your rights and interests and involves no sensitive data, as permitted by Article (6) of the Law. Correspondence data is processed to receive and reply to your enquiry on the basis of your own initiative in sending the message; where consent is the basis, you may withdraw it without affecting the lawfulness of processing before withdrawal. We also process data where a law in force requires it.
Disclosure and service providers
We do not disclose visitors’ data to any party for commercial purposes. To the extent required by the purposes above, access may be available to the provider that hosts the website’s servers and protects it against attacks, acting as a processor on our instructions under an agreement containing the safeguards the Law requires; to the provider that hosts the contact mailbox and processes incoming messages; and to the competent authorities in the Kingdom where the Law requires disclosure or on a lawful request, to the extent of that request. The website uses no third-party analytics or advertising tools.
Transfer of data outside the Kingdom
Data may be processed inside or outside the Kingdom depending on the location of the approved service providers. If operating the website or the email service requires personal data to be transferred outside the Kingdom, this will take place only in the cases and under the controls set out in the Personal Data Protection Law and the Regulation on Personal Data Transfer Outside the Kingdom, and the safeguards applied in the relevant case.
Retention and destruction
We keep data for as long as necessary to achieve the purpose for which it was collected, then destroy it or anonymise it in a way that prevents recovery, unless a law in force requires longer. Technical server logs are kept for a limited period for security and operational purposes and then deleted. Correspondence is kept for as long as needed to reply to and follow up your request, and to evidence what was communicated where necessary, and then deleted. You may request destruction of your data under your rights below.
Protection of data
We take the appropriate organisational, administrative and technical measures to protect data from loss, destruction or unlawful access, proportionate to the limited data the website processes — including an encrypted connection, restricting access to the logs and the mailbox to authorised persons, and keeping data to the minimum necessary. No system can guarantee absolute security; if a leak or unlawful access occurs that is likely to harm the data subjects, we will notify the competent authority and those affected as required by the Law and its Regulations.
Children’s and students’ data
This website is an informational site addressed to adults among families, schools and interested organisations. It is not a channel for submitting data about students or children, and it collects no data of that kind. Please do not send a child’s or student’s data, such as a name, school, address or photographs, through the general contact email unless it has been expressly requested from you through an authorised channel. If we receive such data unrequested, we will use only what is needed to reply and then delete it.
Your rights
The Law gives you the right to be informed of the basis and purpose of collecting your data, to access it, to obtain a copy in a clear format, to request its correction, completion or update, to request its destruction once it is no longer necessary (subject to any retention the Law requires), and to withdraw consent where consent is the basis. To exercise your rights, send your request to info@hawna.com.sa, stating the right and what is needed to verify your identity without providing excessive data. We will respond within no more than thirty days, extendable by a further thirty days in exceptional cases with notice to you, and exercising these rights is free unless a request is unreasonably repetitive.
Complaints and the competent authority
If you have a complaint about our processing of your data, or if we have not enabled you to exercise your rights within the prescribed period, please contact us first at info@hawna.com.sa and we will handle it within the same period. In all cases you have the right to lodge a complaint with the authority competent to supervise the Personal Data Protection Law, the Saudi Data and Artificial Intelligence Authority (SDAIA), through the National Data Governance Platform.
External links
As it stands, the website contains no links to external sites other than the email link, which opens your own mail application. If we add links to sites or services we do not operate, this policy does not apply to them, and we recommend reading those parties’ own privacy policies.
Updates to this policy
We may update this policy when the way the website works, the data it processes or the legal requirements change. The updated version is published on this page with the date of the last update, and we keep a record of material updates. If we add any new processing that requires your consent, we will ask for it before it begins.
Contact and effective date
For any question about this policy or the processing of your data: info@hawna.com.sa, Riyadh, Saudi Arabia. Effective date: 23 October 2026. Update record: Version 1.0 — 23 October 2026 — first version for the public website.