Privacy Notice

This notice explains what personal data XYZEE Agency (“we”, “us”) collects when you visit www.xyzee-agency.com, why we collect it, and the rights you have over it under the Saudi Arabia Personal Data Protection Law and the Egyptian Personal Data Protection Law (Law 151 of 2020).

1. Who we are

XYZEE Agency is the data controller for personal data processed via this website. For any privacy enquiry, contact us at info@xyzee-agency.com.

2. What we collect

We process two categories of data:

• Site analytics (Google Analytics 4) — anonymized usage data: pages viewed, approximate location (city level), device and browser, referral source, time on page. IP addresses are anonymized before storage.
• Business identification (Apollo.io) — only when you accept on the consent banner. Apollo attempts to identify the company associated with your IP address so we can understand which businesses are exploring our services. Individual visitors are not personally identified to us.

The contact form additionally collects the name, email, and message you choose to submit. That data is used only to respond to your enquiry.

3. Legal basis

• Site analytics: legitimate interest in measuring and improving our website.
• Business identification (Apollo): your explicit consent, given via the on-site banner. You can withdraw consent at any time using the “Manage cookies” link in the footer.
• Contact form: performance of a request you initiated.

4. Who we share data with

We use the following sub-processors:

• Google LLC — Google Analytics 4 and Google Tag Manager.
• Apollo.io, Inc. — visitor identification, only when you have accepted.
• Resend, Inc. — email delivery for the contact form.
• Hostinger — website hosting.

These providers may process data outside Saudi Arabia and Egypt, including in the United States and the European Union. We rely on their published security and data-protection commitments for cross-border transfers.

5. How long we keep it

• Analytics data is retained for 14 months in Google Analytics, then deleted automatically.
• Apollo identification data is retained while it remains useful for business development, and is deleted on request.
• Contact-form messages are retained for up to 24 months after the conversation closes, unless you ask us to delete them sooner.

6. Your rights

Under KSA PDPL and Egyptian PDPL you have the right to:

• Be informed about how your data is processed (this notice).
• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Withdraw consent at any time (use the “Manage cookies” link in the footer, or email us).
• Lodge a complaint with the Saudi Data & AI Authority (SDAIA) or the Egyptian Personal Data Protection Center.

7. Cookies and similar technologies

We use first-party cookies for essential site functionality and Google Analytics measurement, and third-party scripts loaded by Google Tag Manager. The Apollo tracker only loads after you click “Accept” on the banner. You can change your choice at any time by clicking Manage cookies in the footer.

8. Contact

For any question about this notice or to exercise the rights above, write to info@xyzee-agency.com.