Privacy notice
How Initial Saudi Arabia handles personal data in the pest control operations platform.
Who is responsible
Initial Saudi Arabia (ISG) is the controller of the personal data in this platform. ISG decides what is collected and why; the service providers listed below process it only on ISG’s instructions.
What is held
- Client contact people — name, job title, business email and business phone, so service reports reach the right person and visits can be coordinated on site.
- ISG staff and technicians — name, work email, phone, and for field staff a Telegram account identifier used only to sign in to the technician app.
- Service evidence — photographs of treated areas taken during visits. Technicians are instructed not to photograph people.
- An audit trail — who changed what, and when, for accountability.
The platform does not collect national ID or passport numbers, payment card details, health data, or a person’s precise location.
Where it is processed
The database, authentication and file storage run on infrastructure in the European Union (Frankfurt, Germany), and application hosting and email delivery are also provided from outside the Kingdom. This is a cross-border transfer of personal data under the Saudi Personal Data Protection Law.
The transfer is made under appropriate safeguards: the Saudi Standard Contractual Clauses issued by SDAIA, supported by a transfer risk assessment. Data is encrypted in transit and at rest, access is restricted by role, and every record is reachable only by people whose role requires it.
How long it is kept
Contact and contract records are kept for the life of the commercial relationship and are archived rather than deleted where they are still referenced by service history. Visit photographs are deleted once the contract term has ended and the retention window configured by ISG has passed. Audit records are kept for the life of the platform.
Your rights
You may ask for a copy of the personal data held about you, ask for it to be corrected, or ask for it to be deleted where no legal or contractual duty requires ISG to keep it. ISG responds within 30 days.
How to contact us
Write to ISG’s privacy owner at privacy@initial.com.sa, or raise it with your ISG account manager. If you work at ISG, any administrator of this platform can route the request. Requests are logged and answered in writing.