Privacy Policy

01Who we are

CAN International is an interior design, fit-out and exhibitions company based in Riyadh, Saudi Arabia. We are responsible for the personal data described on this page, and you can reach us using the contact details at the end of it.

02What we collect

We collect only the information you choose to give us, plus the limited technical data every website receives when it serves a page.

• Contact form: your name, email address and message, and, if you add them, your phone number and company name.
• Technical data: your IP address, browser type and the pages you visit. We use it to serve the site, block abuse and keep security logs.
• Bot check: when you use the contact form, our security provider examines technical signals from your browser to tell people from automated programs.

03How we use it

Each piece of information has a stated purpose, and we do not reuse it later for something you would not expect.

• To answer your enquiry and follow up on it.
• To protect the site and the contact form against spam, automated abuse and attacks.
• To find and fix faults on the site.

04Our legal basis

We rely on one of the following for each use of your information.

• Your request: answering an enquiry you chose to send us, and taking the steps you asked for before any agreement.
• Our legitimate interest in keeping the site secure, working and free of abuse.

05Cookies

A cookie is a small file your browser stores. This site uses only two, both necessary: one keeps your session and one protects our forms against forged requests. They are set on every visit because the site cannot work without them, and they expire two hours after your last visit. We use no analytics or advertising cookies.

06Who we share it with

We do not sell your personal data. A small number of service providers process it on our instructions so that the site and our replies can work.

• Hosting providers, which run the site and store its database.
• Email providers, which deliver the notifications sent from the contact form and host our mailbox.
• Security and network providers, which protect the site and run the bot check on the contact form.

07International transfers

Some of these providers process data outside Saudi Arabia, for example in the European Union, Singapore or the United States. When they do, we take the steps the applicable law requires for such transfers.

08How long we keep it

We keep information only as long as it serves the purpose it was collected for.

• Enquiries in our database: 24 months from the day we receive them, then deleted.
• Copies in our database backups and in our email provider’s logs: deleted automatically within 90 days of the enquiry itself.
• The notification email in our team mailbox: kept only as long as we need it to deal with your enquiry.
• Security logs: for a short period, then deleted automatically.

09Your rights

You have the following rights over the information we hold about you. To use any of them, contact us using the details below and we will reply within the period the law sets.

• Know how we collect your personal data and why we use it.
• Ask to see your data and receive a copy of it.
• Ask us to correct anything that is inaccurate or incomplete.
• Ask us to delete your data when we have no continuing reason to keep it.
• Withdraw any consent you gave, without affecting anything done before you withdrew it.
• Complain to the Saudi Data and AI Authority (SDAIA).

10How we protect it

The site is served over HTTPS. Enquiries are stored in a private database that only authorised staff can reach, and the contact form is protected against automated abuse by rate limits and a bot check.

11Children

This website is meant for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18.

12Changes to this policy

If we change this policy, we will update the date at the top of this page.

13Contact us

For any question about this policy, or to use any of the rights above, write to us at: