Privacy Policy

Effective date: 20/10/2026

This Privacy Policy explains how [LEGAL ENTITY NAME], trading as Melas ("Melas", "we", "us"), collects, uses, stores, shares and destroys personal data when you visit melasksa.com or contact us through it. It is published in accordance with the Personal Data Protection Law of the Kingdom of Saudi Arabia (PDPL) and its Implementing Regulations. Please read it before submitting any personal data.

1. Who we are

Melas is a hospitality staffing, recruitment, catering and consulting company based in Saudi Arabia. Melas is the controller of the personal data described in this policy.

• Legal name: [LEGAL ENTITY NAME]
• Commercial Registration No.: [CR NUMBER]
• Address: [ADDRESS], Riyadh, Kingdom of Saudi Arabia
• Contact for personal data requests: [PRIVACY EMAIL]

2. Personal data we collect

We only collect the personal data you choose to give us through our forms, plus limited technical data generated by your visit.

If you contact us as a client:

• Identity and contact details: first name, last name, email address, phone number
• Professional details: company name and role
• Details of your request: services needed, type and number of talents, preferred languages and regions, desired gender of talents, start date, duration, location, and any information you include in your message

If you apply as a talent:

• Identity and contact details: first name, last name, email address, phone number, address, city and region
• Profile details: age, gender, nationality, an official photograph
• Professional details: skills, years of experience, languages spoken, resume, and your presentation message

When you browse the website:

• Technical data such as IP address, browser type, device, pages visited and date and time of the visit, collected through strictly necessary cookies and, only with your consent, analytics cookies (see section 7)

Please do not include in your resume or messages sensitive data that we do not ask for, such as health information, religious beliefs, criminal records or financial details. If you do, we will process it only as far as needed to handle your application, or delete it.

3. Why we use your personal data

• To answer client requests, prepare proposals and deliver staffing, recruitment, catering and consulting services
• To assess talent applications, match talents with client assignments and contact candidates about opportunities
• To present a candidate's profile (name, photo, skills, experience, languages) to a client for a specific assignment, only after informing the candidate
• To manage our relationship with clients and talents, including scheduling and follow-up
• To operate, secure and improve the website
• To comply with our legal and regulatory obligations in the Kingdom

We do not sell your personal data. We will not send you marketing or advertising messages without your prior consent.

4. Legal basis for processing

We process your personal data on the basis of:

• Your consent, given when you submit a form or accept optional cookies. You may withdraw it at any time, without affecting processing already carried out.
• The performance of a contract with you, or steps you ask us to take before entering into one
• Compliance with a legal obligation
• Our legitimate interests in running and protecting our business, where they do not override your rights

5. How we collect and store your data

Data is collected directly from you through the forms on our website and, for talents, through [joinus.melasksa.com / OTHER PLATFORM]. It is stored on the secure servers of our service providers, including our website host Webflow, Inc. [LIST OTHER TOOLS: CRM, recruitment software, email provider]. Access is limited to Melas staff who need it for the purposes above.

6. Sharing your personal data

We may share your personal data with:

• Clients, when we propose a talent for an assignment (limited to the profile information relevant to that assignment)
• Service providers acting on our behalf (hosting, form handling, email, recruitment and CRM tools), bound by confidentiality and data protection obligations
• Competent public authorities, when required by law or a valid order

Some of our service providers, including Webflow, process data outside the Kingdom of Saudi Arabia. Such transfers are carried out only in accordance with the PDPL and the Regulation on Personal Data Transfer outside the Kingdom, and with appropriate safeguards.

7. Cookies

Our website uses strictly necessary cookies required for it to function and to remember your language. These do not require consent. With your consent only, we may use analytics cookies [and marketing cookies: NAME TOOLS] to understand how the website is used. You can accept or refuse them in the cookie banner and change your choice at any time through the "Cookie settings" link in the footer.

8. How long we keep your data

• Client requests and correspondence: for the duration of our business relationship and up to [X] years after, or longer if the law requires it
• Talent applications: up to [X] months after your last contact with us, so that we can propose you for future assignments, unless you ask us to delete them earlier
• Analytics data: up to [X] months

When data is no longer needed, we destroy it securely or anonymise it.

9. Security

We apply appropriate organisational, administrative and technical measures to protect your personal data against loss, misuse, unauthorised access, disclosure or alteration. If a personal data breach occurs that may harm you or your rights, we will notify the competent authority and, where required, you, in accordance with the PDPL.

10. Your rights

Under the PDPL, you have the right to:

• Be informed about how your personal data is collected and processed
• Access your personal data and obtain a copy of it in a readable format
• Request the correction, completion or update of your personal data
• Request the destruction of your personal data when it is no longer needed
• Withdraw your consent at any time

To exercise these rights, write to [PRIVACY EMAIL] from the email address you used with us, or provide information that allows us to verify your identity. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA).

11. Minors

Our website and services are intended for adults. We do not knowingly collect personal data from persons under 18. Talent applicants must be at least [18] years old.

12. Changes to this policy

We may update this policy from time to time. The updated version is published on this page with its new effective date.

13. Contact

For any question about this policy or your personal data: hello@melasksa.com