Privacy policy
How MERSAAD handles personal data collected through this website.
Last updated 6 September 2026
The short version
This website sets no cookies, uses no analytics, and makes no requests to any third party. Fonts and images are served from our own domain. Nothing about your visit is tracked or profiled.
The only personal data we ask for is what you choose to type into the contact form or the newsletter field. Neither form is connected to a system yet, so at the time of writing nothing you submit is transmitted or stored anywhere.
1. Who we are
This website is operated by MERSAAD Carbon Technologies, a carbon technology company based at Dhahran Techno Valley, Dhahran, Eastern Province, Saudi Arabia.
Our full legal entity is Mersaad Carbon Technologies, a company incorporated under the laws of the Kingdom of Saudi Arabia, commercial registration number 7052274508, registered at national address EDPC2331, Saudi Arabia.
For the purposes of the Saudi Personal Data Protection Law, Mersaad Carbon Technologies is the data controller for personal data collected through this site.
Questions about this policy or about your personal data should go to info@mersaad.com.
2. What this policy covers
This policy covers personal data collected through this website only. It does not cover MERSAAD's LinkedIn page, which is governed by LinkedIn's own privacy policy, nor any data you provide to us directly by email, in meetings, or under a separate agreement.
3. What we collect
We only collect what you actively give us. There is no hidden collection.
Contact form
| Field | Required | Why |
|---|---|---|
| Name | Yes | So we know who we are replying to |
| Email address | Yes | So we can reply |
| Organization | No | Helps us route the enquiry to the right person |
| Phone number | No | Only used if you would prefer a call |
| Enquiry type | No | Which product line or topic your enquiry concerns |
| Message | Yes | The substance of your enquiry |
The form also contains a hidden field that is invisible to people and only ever filled in by automated bots. It is an anti-spam measure. If you are a person, it stays empty and no data comes from it.
Newsletter
Your email address, and your explicit tick confirming you want to receive updates. Nothing else.
Server logs
Like any website, our hosting provider records standard technical information when a page is requested: IP address, browser type, the page requested, and the time. These logs exist for security and to keep the site running. The site is hosted by HOSTINGER, UAB (company code 302710386, Švitrigailos str. 34, LT-03230 Vilnius, Lithuania), and these logs are created and held by Hostinger on the server that runs the site, under Hostinger's own retention schedule. We do not export them, we do not combine them with anything else, and we do not use them to identify individuals. Our own daily backups are also held by Hostinger.
4. Cookies and tracking
We do not use any. This was verified rather than assumed:
- No cookies are set, of any kind, including analytics or advertising cookies.
- No data is written to your browser's local or session storage.
- No analytics, tag manager, pixel, or session recording tool is installed.
- No content is loaded from any third party. Fonts and images come from our own domain, so no external company sees your IP address as a result of your visit here.
Because we set no cookies and run no tracking, there is no cookie banner and nothing to opt out of. If this ever changes, we will update this policy and ask for your consent first.
5. Why we process it, and our legal basis
Under the Personal Data Protection Law we must tell you the specific purpose and the lawful basis for each use of your data.
| What we do | Purpose | Legal basis |
|---|---|---|
| Reply to your enquiry | To answer the question you asked us | Your consent, given by choosing to send the form. It also serves our legitimate interest in responding to business enquiries. |
| Send newsletter updates | To send occasional company updates you asked for | Your explicit consent, given by ticking the box. Withdrawable at any time. |
| Keep server logs | Security, fault diagnosis, and keeping the site available | Our legitimate interest in operating a secure website. |
We do not use your data to build a profile of you, we do not make automated decisions about you, and we never sell personal data to anyone.
6. Who we share it with
We do not sell, rent, or trade personal data. We share it only with service providers who need it to operate the site on our behalf, and only for that purpose. This is the complete list:
| Who | What they do for us | What they can see |
|---|---|---|
| HOSTINGER, UAB Vilnius, Lithuania |
Web hosting, the server that stores this website and its database, our info@mersaad.com mailbox, and the delivery network that serves the site's images and stylesheets | Everything you send us, because it is stored on their server, and standard server logs |
Hostinger in turn uses its own suppliers to run its service, named in its data processing addendum: Amazon Web Services, Google Cloud, Cloudflare, MailChannels, Proofpoint, Anthropic Ireland and Spectra Tech. The two that matter for your message are MailChannels and Proofpoint, which handle email delivery, so an enquiry you send us passes through them on its way to our mailbox.
That is the whole list, and it is short by design. The contact form and the newsletter are handled by this website's own software on our own hosting. There is no separate form service, no mailing list company, no analytics provider, and no advertising network receiving your data. When we reply to your enquiry, your message travels by ordinary email.
We may also disclose personal data where we are legally required to do so by a competent Saudi authority.
7. Transfers outside Saudi Arabia
The Personal Data Protection Law restricts transferring personal data outside the Kingdom and requires that we tell you when it happens. We will not leave you to guess, so plainly:
Yes, your data is stored outside Saudi Arabia. Our hosting provider is HOSTINGER, UAB, a Lithuanian company, and the server that holds this website, its database and our mailbox is currently located in Massachusetts, in the United States. Our daily backups are held separately in Boston, in the United States. Anything you send through the contact form or the newsletter box is therefore stored there, and our email is handled there.
We transfer only what is necessary to run the website and to answer you, we hold it under a written data processing agreement with Hostinger, and we do not permit it to be used for any other purpose. We keep the amount of data to the minimum needed, which is why this site sets no cookies, runs no tracking, and asks for nothing it does not need.
If the location of that server changes, we will update this section and the date at the top of this page.
8. How long we keep it
We keep personal data only as long as it serves the purpose it was collected for, then delete it. These are our periods:
| What | How long | Then what |
|---|---|---|
| Contact form enquiries | 24 months from the date you sent it | Deleted automatically by the website, without anyone having to remember |
| Newsletter address | Until you unsubscribe or ask us to remove you | Deleted. If you unsubscribe we keep no record of the address itself |
| Email correspondence | 24 months from our last exchange with you | Deleted from our mailbox |
| Server logs and backups | Held by Hostinger under its own schedule | Overwritten by Hostinger in the normal course |
The 24 month period is enforced by the website itself, which deletes older enquiries on a daily schedule. You do not have to wait for it: ask us and we will delete your data sooner.
9. Your rights
Under the Personal Data Protection Law, you have the right to:
- Be informed about what we collect, why, and on what legal basis. That is what this policy is for.
- Access your personal data that we hold.
- Obtain a copy of it in a readable, commonly used electronic format.
- Correct or update anything inaccurate or incomplete.
- Request destruction of your data when we no longer need it for the purpose it was collected for.
- Withdraw your consent at any time, without having to give a reason. Withdrawing consent does not affect processing that already happened before you withdrew it.
Exercising any of these rights is free, and we will not treat you differently for doing so.
10. How to exercise your rights
Email info@mersaad.com and tell us what you would like us to do. We may need to confirm your identity first, so that we do not disclose someone's data to the wrong person. We aim to respond within 30 days.
To unsubscribe from the newsletter, use the unsubscribe link in any update we send, or email us.
11. If you are not satisfied
If you believe we have handled your personal data improperly, please raise it with us first at info@mersaad.com so we have the chance to put it right.
You also have the right to complain to the Saudi Data and Artificial Intelligence Authority (SDAIA), which supervises the Personal Data Protection Law, and to seek compensation through the courts for harm caused by a violation.
12. How we protect it
The site is served over an encrypted HTTPS connection. We keep the number of people who can access enquiry data to those who need it to reply to you. No system is perfectly secure, but we reduce risk by collecting as little as possible in the first place, which is why this site sets no cookies and runs no tracking.
13. Children
This is a business website and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.
14. Changes to this policy
If we change how we handle personal data, we will update this page and change the date at the top. If a change is significant, such as introducing analytics or cookies, we will make that clear rather than relying on you to notice.