Privacy Policy

Last updated: August 7, 2026

At Craft Lot, your privacy matters to us. This Privacy Policy explains how we collect, use, and protect information when you visit our website or engage with our services, in compliance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia (Royal Decree No. M/19).

1. Who We Are

Craft Lot is a creative art team offering consultation, interior design, art direction, and events & exhibitions services based in the Kingdom of Saudi Arabia. Our website portfolio is located at craftlot.art and is hosted on Netlify. While we do not use a .sa domain, our operations and services are exclusively focused within Saudi Arabia. For any privacy-related concerns, please contact us via our Contact page.

2. Information We Collect

We may collect the following types of information:

  • Information you provide directly – When you contact us through our website or via email, we collect your name, email address, and any other details you voluntarily share (e.g., project brief, company name, phone number).
  • Usage data – We collect information about how you interact with our website, including pages visited, time spent, referral sources, and device/browser information. This is collected through Google Analytics (see Section 4).
  • Cookies and Local Storage – We use cookies and local storage (such as HTML5 localStorage) to understand website traffic, improve your experience, and manage user interface states (e.g., showing our intro animation). For full details, see our Cookie Policy.

3. How We Use Your Information

We use the information we collect to:

  • Respond to your inquiries and communicate about potential or ongoing projects.
  • Understand how visitors use our website and improve our content and user experience.
  • Analyze website traffic and performance through Google Analytics.
  • Comply with legal obligations where required.

We do not sell, rent, or trade your personal information to third parties for marketing purposes. All data processing is strictly limited to the stated purposes, pursuant to the data minimization principles under the PDPL.

4. Google Analytics

We use Google Analytics to collect anonymous data about how visitors interact with our website. Google Analytics uses cookies to track sessions, pages viewed, and general usage patterns. This data is aggregated and does not personally identify you.

Google may process this data in accordance with their own Privacy Policy. You can opt out of Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on.

Craft Lot complies with the Kingdom of Saudi Arabia’s Personal Data Protection Law (PDPL) issued by Royal Decree No. M/19. We process your data based on the following grounds:

  • Consent – When you accept cookies, you consent to analytics data collection.
  • Legitimate interests – We have a legitimate interest in understanding how our website is used to improve it, provided it does not override your rights and interests.
  • Contractual necessity – We process your contact information to respond to service inquiries and fulfill project agreements.

6. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this policy, or as required by law. Google Analytics data is retained for 14 months by default. Contact inquiry data is retained for as long as the relevant business relationship exists, or for a reasonable period thereafter.

7. Data Security & Hosting

Our website portfolio is hosted internationally on Netlify. While Craft Lot operates exclusively in Saudi Arabia, information collected through the website (such as analytics or contact inquiries) may be stored or processed on servers outside of Saudi Arabia by our hosting and analytics providers. We take reasonable technical and organizational measures to protect your information from unauthorized access, disclosure, alteration, or destruction. However, no method of internet transmission or electronic storage is completely secure.

8. Third-Party Services

Our website may use or link to third-party services including:

  • Google Analytics – for website analytics.
  • Google Fonts – for typography (fonts may be loaded from Google servers).

These services have their own privacy policies and we encourage you to review them.

9. Your Rights

Under the Saudi Arabian Personal Data Protection Law (PDPL), you have the following rights regarding your personal data:

  • The right to be informed about how your data is collected and used (Article 4 of the PDPL).
  • The right to access the personal data we hold about you (Article 4).
  • The right to request correction of inaccurate or incomplete data.
  • The right to request destruction of your data where it is no longer necessary (Right to Destruction, Article 4).
  • The right to withdraw consent at any time where processing is based on consent (Article 5).
  • The right to lodge a complaint with the Saudi Data & AI Authority (SDAIA).

To exercise any of these rights, please reach out through our Contact page.

10. Children’s Privacy

Our website is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has submitted personal information to us, please contact us so we can remove it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available on this page with the updated date. We encourage you to review it periodically.

12. Contact

For any questions about this Privacy Policy or your data, please contact us via our Contact page.