العربية Get Started

Privacy Policy

Last updated: 14 October 2026

1. Who we are

Crop Media Establishment ("Crop Media", "we", "us"), Unified National Number 7050959886, is a marketing and business growth agency in Al Khobar, Kingdom of Saudi Arabia. We are the party responsible (the "controller") for the personal data described in this policy. This policy explains what we collect through cropmedia.net and our other channels, why, who we share it with, how long we keep it, and the rights you have under the Saudi Personal Data Protection Law (PDPL) and its regulations issued by the Saudi Data & AI Authority (SDAIA).

Questions or requests: info@cropmedia.org · WhatsApp / phone +966 58 165 6149.

2. What we collect

a) Through the forms on this website

  • Quotation request (Pricing page): first and last name, company or business name, mobile / WhatsApp number, email, the services you are interested in, a short description of your business, your main goal, estimated monthly budget, preferred start date, preferred language, and how you heard about us.
  • Consultation booking (Contact page): first and last name, company, mobile / WhatsApp number, email, meeting type, preferred date and time, the topic you want to discuss, and preferred language.
  • With each request we also record the page it was sent from and the website language you used.

Please do not include sensitive personal data (for example health, religious or financial account details) in these forms. We do not ask for it.

b) When you contact us directly

Messages and details you send by WhatsApp, phone, email or social media, and the answers you give in our discovery questionnaire before a proposal.

c) Collected automatically

  • Analytics: pages visited, time on site, approximate location (country / city), device and browser type, and how you arrived, through Google Analytics. This is not used to identify you personally.
  • Security data: to block spam and password-guessing attacks, your IP address is converted into a one-way code and kept for up to 15 minutes. We never store your IP address in your request.
  • Server logs: our hosting provider keeps standard technical logs (IP address, time, page requested) for security and reliability.
  • Preferences on your device: your choice of night or day mode is saved in your own browser (local storage). It is not sent to us.

d) As part of client work

When we manage advertising or social media accounts for a client, we access performance and audience data inside those platforms (Google, Meta, TikTok, Snapchat and others), under our contract with that client and the platforms' own terms.

3. Why we use it and on what basis

  • To reply to your request, prepare a quotation or proposal, and book your consultation. Basis: steps you asked us to take before a contract.
  • To deliver contracted services, report on results, and handle invoices. Basis: performance of a contract.
  • To keep the website secure and understand how it is used so we can improve it. Basis: our legitimate interest, balanced against your rights.
  • To meet legal, tax and accounting obligations in Saudi Arabia. Basis: legal obligation.
  • To send news or offers about Crop Media. Basis: your consent only. You can withdraw it at any time.

We do not use your data for automated decisions that have legal or similar effects on you.

4. Who we share it with

We do not sell, rent or trade your personal data, and we never pass your request to other companies for their own marketing. We only share it with:

  • Website hosting: Hostinger, which hosts this website and stores form requests in our website database.
  • Email: our email provider, which delivers form notifications to our team and the confirmation email to you.
  • Google: Google Analytics (website statistics), Google Maps (the map on the Contact page), YouTube (video thumbnails load from YouTube's image servers, and the player loads in privacy-enhanced mode only when you press play), Google Fonts (website typefaces), and Google Workspace / Google Forms (our discovery questionnaire).
  • Meta: WhatsApp, when you choose to message us. If we enable the Meta Pixel for advertising measurement, we will list it here first.
  • Our team and trusted collaborators (for example photographers or videographers) who need specific details to deliver your project, under written confidentiality obligations.
  • Professional advisers (accountants, lawyers) where necessary, and authorities where Saudi law or a valid legal request requires it.

Each provider may only use the data to provide its service to us.

5. Data stored outside Saudi Arabia

Some of the providers above (including our hosting, email and Google services) may store or process data on servers outside the Kingdom. When this happens we rely on the conditions for cross-border transfer set by the PDPL and its Transfer Regulation, use providers with recognised security standards, and transfer only the minimum data needed.

6. How long we keep it

  • Website requests that do not become a client relationship are deleted automatically 12 months after we receive them.
  • Client records (contracts, invoices, project correspondence) are kept for as long as the relationship lasts and then for the period required by Saudi commercial and tax law.
  • Security codes made from IP addresses: up to 15 minutes.
  • Analytics data: up to 14 months in Google Analytics.

You can ask us to delete your data earlier, unless the law requires us to keep it.

7. Cookies and similar technologies

  • Necessary: this website does not set its own cookies for visitors. Your day / night choice is kept in your browser's local storage.
  • Analytics: Google Analytics sets cookies (such as _ga) to count visits and understand usage.
  • Third-party content: Google Maps and YouTube may set their own cookies when their content loads.
  • Advertising: not active today. If we enable advertising pixels (for example the Meta Pixel) we will update this policy first.

You can block or delete cookies in your browser settings, or opt out of Google Analytics with Google's browser add-on at tools.google.com/dlpage/gaoptout. The website keeps working without cookies.

8. How we protect it

  • The whole website runs over encrypted HTTPS.
  • Form requests are visible only to Crop Media administrators inside the website dashboard. They are not public, not searchable and not available through the website's API.
  • Forms are protected against spam and abuse, and the login page locks after repeated failed attempts.
  • Access to client data is limited to the people who need it, and our team and collaborators are bound by confidentiality.

No system is completely secure. If a personal data breach could harm you, we will notify SDAIA within the time the PDPL requires and inform you without undue delay.

9. Your rights

Under the PDPL you have the right to:

  • be informed about how your personal data is collected and used;
  • access your personal data and receive a copy in a clear, readable format;
  • ask us to correct, complete or update it;
  • ask us to delete it when we no longer need it;
  • withdraw your consent at any time, where we rely on consent.

Send your request to info@cropmedia.org. We may ask you to confirm your identity, and we will reply within 30 days. If you are not satisfied with our answer, you can file a complaint with the Saudi Data & AI Authority (SDAIA).

10. Children

Our website and services are meant for businesses and adults aged 18 and over. We do not knowingly collect data from children; if you believe a child has sent us data, contact us and we will delete it.

11. Changes to this policy

We will update this policy when our practices or the law change. The date at the top shows the latest version. Material changes will be highlighted on this page.

12. Contact us

Crop Media Establishment · Unified National Number 7050959886
Prince Turkey Street, Al Kurnaish, Al Khobar 31952, Saudi Arabia
Email: info@cropmedia.org
Phone / WhatsApp: +966 58 165 6149