Privacy Policy

1. Who We Are

This policy explains how Outlier X Company For Financial Consulting, operating under the trade name Outlier ("the Company", "we", "us"), collects personal data through its website ("the Website") and the contact channels listed on it, how we use, store and destroy that data, and your rights in relation to it. We comply with the Personal Data Protection Law of the Kingdom of Saudi Arabia and its Implementing Regulations, and we are the controller responsible for this data.

2. Scope

This policy applies to visitors to the Website, anyone who submits our Contact Us or Careers form, and anyone who contacts us directly by email, phone or WhatsApp.

It does not apply to data and documents that clients provide within valuation and financial advisory engagements, such as financial statements and shareholder or employee information. These are governed by our engagement agreements and the professional confidentiality duties that apply to accredited valuers and financial advisors. It also does not apply to third-party websites linked from ours.

3. Data We Collect

We collect form and contact data directly from you. Required fields are marked on each form; without them we may not be able to respond to your request.

We do not request sensitive data. Please do not send us your ID number or a copy of your ID, health information, religious beliefs, ethnic origin, or personal data about others without their knowledge.

4. How We Use Your Data

To respond to your inquiry, understand your needs, and prepare a technical and financial proposal at your request.
To check for conflicts of interest before accepting any engagement, in line with professional independence requirements.
To review job and internship applications and contact applicants.
To operate the Website, protect it against fraud and intrusion, improve its performance, and understand how visitors use it through aggregated statistics.
To comply with applicable laws and requests from competent authorities.
We do not use your data for any other purpose, and we do not send you marketing material without your consent. We do not make decisions about you based solely on automated processing.

5. Legal Basis for Processing

Consent: We process Website form data based on the consent you give by ticking the consent box when submitting. We process direct contact data because you chose to contact us.
Legitimate interest: We process technical data and Google Analytics data to operate, protect and improve the Website, having assessed that this does not override your rights and interests and involves no sensitive data.
Legal obligation: We process data where needed to meet a legal obligation.
You may withdraw your consent at any time by emailing us at the address below. Withdrawal does not affect the lawfulness of processing carried out before it.

6. Sharing Your Data

We do not sell or rent your personal data. We share it only to the extent necessary with:

Webflow, Inc., which hosts the Website and receives form submissions.
Google LLC, which provides Google Analytics to analyze Website usage.
Our email service provider, through which we receive and reply to your messages.
WhatsApp (Meta), if you choose to contact us there; that conversation is subject to WhatsApp's own privacy policy.
Our professional advisors, such as lawyers and auditors, where needed and under a duty of confidentiality.
Competent government, judicial and regulatory authorities, where required by law.

7. Transfers Outside the Kingdom

Webflow and Google are based in the United States, and Website, form and analytics data are stored with them outside the Kingdom; this may also apply to other providers. In such cases we limit the data to the minimum needed for the purpose and comply with the Regulation on Personal Data Transfer outside the Kingdom, including appropriate safeguards where required.

8. Retention and Destruction

When the period ends, we destroy the data, including copies held by service providers where possible, or securely anonymize it.

9. Data Security

We take appropriate organizational and technical measures to protect your data against unauthorized access, use or disclosure, including limiting access to authorized staff and using an encrypted (HTTPS) connection. However, no method of electronic transmission or storage is completely secure.

If a data breach occurs, we will notify the competent authority within the statutory period, and notify you without undue delay if it is likely to harm you.

10. Your Rights

Under the Personal Data Protection Law and its Regulations, you have the right to:

Be informed of how and why your data is collected and processed.
Access your data and obtain a copy in a clear format.
Request correction, updating or completion of your data.
Request destruction of your data, as permitted by law.
Withdraw your consent at any time.
To exercise any of these rights, email us at the address below. We may ask you to verify your identity first. We respond within 30 days, which may be extended by a further 30 days where necessary, after informing you of the reason.

You also have the right to file a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA) within 90 days of the incident or of becoming aware of it.

11. Cookies

The Website uses two types of cookies:

Necessary: to operate the Website and remember your language preference. These do not require your consent.
Analytics: through Google Analytics, provided by Google LLC, to understand how the Website is used, such as the most visited pages, traffic sources and device type. We use them based on our legitimate interest in improving the Website, and collect no sensitive data through them.
We do not use analytics data to identify you or for advertising, and we do not link it to form data. You can object to this processing at any time by disabling cookies in your browser settings or using the Google Analytics opt-out tool.

12. External Links

The Website links to third-party sites, such as the Saudi Authority for Accredited Valuers (TAQEEM), the Saudi Organization for Chartered and Professional Accountants (SOCPA), and our social media accounts. We do not control these sites, and they are subject to their own privacy policies.

13. Children's Privacy

The Website is intended for people aged 18 and over, and we do not knowingly collect personal data from anyone younger. If we learn that we have collected such data without a guardian's consent, we will destroy it.

14. Changes to This Policy

We may update this policy from time to time and will publish the updated version on this page with a revised "last updated" date. If an update materially changes how we process your data, we will highlight it prominently on the Website.

15. Contact Us

For any question or request about this policy or your personal data, you can reach our Personal Data Protection Officer at:

Email: contact@outlier.sa
Phone: +966 55 645 5582
Address: Outlier X Company For Financial Consulting, Riyadh, Kingdom of Saudi Arabia