1. Home
  2. Privacy Policy

Legal

Privacy Policy

Your privacy matters to us. This policy explains what personal data we collect when you visit melodies.sa, why we collect it, how we protect it, and the rights you have under the Saudi Personal Data Protection Law (PDPL).

Last updated:

At a glance

  • We never sell your dataYour personal data is never sold or rented to anyone.
  • Protected in transitThe whole site runs over encrypted HTTPS.
  • CVs are not stored on the websiteApplications are sent straight to our recruitment team's mailbox.
  • You stay in controlAsk us at any time to access, correct or delete your data.

Who We Are

Melodies Company for Event Management (“Melodies”, “we”, “us”) is a Saudi event management company headquartered in Al Olaya District, Riyadh, Kingdom of Saudi Arabia. We are responsible for the personal data collected through melodies.sa and its pages (the “Website”).

We process personal data in accordance with the Personal Data Protection Law issued by Royal Decree No. (M/19) dated 9/2/1443H and its implementing regulations.

Information We Collect

Information you give us

  • Contact form: your name, email address, phone number and message.
  • Job applications: your name, email, phone number, city, field of specialization, years of experience, LinkedIn profile (optional), message, and the CV file you upload (PDF, DOC or DOCX, up to 10 MB).
  • Direct communication: anything you send us by email, phone or WhatsApp.

Information collected automatically

  • Usage data (Google Analytics): pages visited, time spent, device and browser type, approximate location (country/city), how you reached the Website, and interactions such as clicks on contact links or file downloads.
  • Google signals: aggregated demographic and interest reports from visitors who are signed in to Google and have enabled ads personalization. We only see aggregated reports, never individual identities.
  • Session insights (Microsoft Clarity): how visitors move through pages — clicks, scrolling and mouse movement — shown to us as anonymous session replays and heatmaps that help us improve the design. Everything you type in our forms is masked and never recorded.
  • Security data: to prevent spam, the application form keeps a one-way encrypted (hashed) form of your IP address for no longer than 24 hours. Our hosting provider also keeps standard server logs.

Information stored on your device

  • Preferences: your light/dark theme choice and, on the team page, your language choice are saved in your own browser (local storage). They are never sent to us.
  • Analytics cookies: Google Analytics uses cookies such as _ga and _ga_* to distinguish visits, and Microsoft Clarity uses cookies such as _clck and _clsk.

How We Use Your Information

  • To reply to your inquiries, prepare proposals and provide our event services.
  • To review job applications and contact candidates.
  • To understand how the Website is used and improve its content, design and performance — using aggregated statistics.
  • To protect the Website and our forms against spam, fraud and misuse.
  • To comply with applicable laws and lawful requests from authorities.

We do not sell personal data, and we do not make decisions about you based solely on automated processing.

Sharing and Service Providers

We share personal data only with trusted providers that help us run the Website, and only as far as needed:

  • Web3Forms — delivers contact-form messages to our email, protected by hCaptcha against spam.
  • Google — Google Analytics (usage statistics) and Google Fonts (website fonts).
  • Microsoft — Microsoft Clarity (anonymous session insights and heatmaps) and Bing Webmaster Tools (search indexing of our public pages).
  • Cloudflare (cdnjs) — delivers the icon library used on the Website.
  • Our web hosting and email providers — host the Website and deliver email, including job applications.
  • WhatsApp and LinkedIn — only when you choose to contact us or visit our profile through them; their own privacy policies then apply.
  • Authorities — when required by law or a valid legal request.

International Transfers

Some of our providers (such as Google, Microsoft, Web3Forms and hCaptcha) may process data on servers outside the Kingdom of Saudi Arabia. Where this happens, we rely on the safeguards and conditions set out in the PDPL and its regulations on transferring personal data outside the Kingdom, and we share only the minimum data needed.

How Long We Keep Data

  • Inquiries: kept for as long as needed to handle your request and our related business records, then deleted.
  • Job applications: kept for up to 12 months so we can consider you for suitable openings, unless you ask us to delete them sooner.
  • Analytics data: retained by Google Analytics for up to 14 months.
  • Session recordings: kept by Microsoft Clarity for 30 days; aggregated heatmaps and dashboards for up to 13 months.
  • Anti-spam records: hashed IP data is deleted automatically within 24 hours.

How We Protect Your Data

  • The Website is served only over encrypted HTTPS connections, with modern security headers.
  • Uploaded CVs are checked and sent directly to our recruitment mailbox — they are not saved on the Website's server.
  • Access to personal data is limited to staff who need it for their work.

No method of transmission or storage is 100% secure, but we take reasonable technical and organizational measures to protect your data.

Your Rights

Under the PDPL you have the right to:

  • Be informed about how your personal data is collected and used.
  • Access your personal data and obtain a copy of it.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of your data when it is no longer needed.
  • Withdraw your consent at any time.

To exercise any of these rights, email info@melodies.sa. We will respond within 30 days. If you are not satisfied with our response, you may file a complaint with the Saudi Data & AI Authority (SDAIA).

Cookies and Your Choices

Blocking cookies does not stop the Website from working.

Children’s Privacy

The Website is intended for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, please contact us and we will delete it.

Changes to This Policy

We may update this policy from time to time. The latest version is always published on this page, with the “Last updated” date shown at the top.

Contact Us

For any question about this policy or your personal data:

Back to Home

WhatsApp