OCTOPUSPrivacy Policy
Last updated: [render publish date]
Your trust matters to us, and privacy is part of how we work, not an afterthought. This page explains, in plain language, what we collect when you use octopusmena.com, why we collect it, how we look after it, and the rights you have over it. If anything here is unclear, please ask us. Our contact details are at the bottom.
Who we are
Octopus (full name Octopus Mena) is an AI integration and AI powered marketing agency in the Kingdom of Saudi Arabia. We were founded in January 2026 by Nasser Charkas and Ahmed Mashhadi.
Octopus operates under the legal entity WATAN ENTERTAINMENT CO, a company registered in Saudi Arabia. For anything you send us through this website, WATAN ENTERTAINMENT CO is the data controller. That means it is the party responsible under the law for how your personal data is handled.
- Legal entity: WATAN ENTERTAINMENT CO (شركة وطن للفعاليات الترفيهية)
- Commercial registration: 7043605711 [Arwa and legal to confirm before publish]
- Registered address: Building 7834, Saad Ibn Ayoub Street, Al Nuzha District, Riyadh 12474, Kingdom of Saudi Arabia [Arwa and legal to confirm current national address before publish]
We handle your personal data in line with the Saudi Personal Data Protection Law (PDPL) and its regulations, overseen by the Saudi Data and AI Authority (SDAIA).
What we collect, and why
We only collect what you choose to give us through the forms on this site. We do not ask for more than we need. Depending on which form you use, this can include:
- Your name
- Your work email address
- Your company name and your role
- Anything you write in the free-text fields, for example what you want AI to change in your business, or the answers you give in our discovery questionnaire
We use this information for a short and specific list of reasons:
- To reply to your message or request
- To prepare for and follow up on a discovery conversation with you
- To understand what you need so we can suggest work that actually fits
The legal basis for this is straightforward: you are giving us your details so we can respond to you and, if it goes further, so we can work together. We do not use your data to make automated decisions that have a legal or similarly serious effect on you.
Cookies and local storage
We keep this simple, because our setup is simple.
We do not use tracking cookies, advertising pixels, or analytics tools on this website. We do not watch how you move around the site, and we do not build a profile of your browsing.
The site stores exactly one small item in your own browser, using local storage: a note that you have already seen our on-screen storage message, so it does not pop up again on every visit. That item stays on your device, it is not a tracking tool, and it is not sent to us or to anyone else. If you clear your browser storage, it simply comes back the next time you visit.
If we ever add analytics or any kind of tracking in future, we will update this policy first and ask for your choice through a proper consent banner before anything loads.
How we protect your data
Your form submissions come straight to our own company mailboxes on Google Workspace. Only the Octopus team members who need your information in order to respond to you can see it. We keep access limited, and we treat what you tell us as confidential.
We do not collect payment information through this website.
Who else is involved (third parties and hosting)
We keep the number of parties who touch your data as small as we can.
- We do not sell your personal data. Ever.
- We do not share it with third parties for their own marketing.
- The only outside provider that handles your data is Google (Google Workspace), which hosts the email and workspace where your submissions arrive. Google processes it strictly on our behalf, under its own security and confidentiality terms.
- We may share your data where the law requires us to, for example a valid request from a competent authority.
Because Google Workspace runs on global infrastructure, some of your data may be processed on servers outside the Kingdom of Saudi Arabia. Where that happens, we take the steps PDPL requires to keep your data protected during the transfer. [Legal to confirm the transfer basis and any SDAIA conditions before publish.]
How long we keep your data
We keep your information only for as long as we genuinely need it: to respond to you, and to manage a possible or active engagement with you. After that, we keep it only for any period the law requires, and then we delete it.
[NASSER: confirm the exact retention period to state here, for example "we delete enquiry data within 24 months of last contact unless you become a client." Legal to confirm.]
Your rights under PDPL
Saudi PDPL gives you clear rights over your personal data. You have the right to:
- Be informed about how we collect and use your data (this page is part of that)
- Access the personal data we hold about you
- Request correction of anything inaccurate or incomplete
- Request deletion of your data, within the limits the law allows
To use any of these rights, just contact us using the details below. We will confirm your identity, respond within the period the law requires, and we will not charge you for a normal request. If you feel we have not handled your data properly, you also have the right to raise it with SDAIA.
How to contact us
For any privacy question, or to exercise any of your rights, reach us at:
- Email: [NASSER: confirm privacy inbox, for example privacy@octopusmena.com, and make sure it is monitored]
- Or through the contact page on this website: octopusmena.com/contact
We would rather you ask us than wonder. If something about your data is on your mind, send us a note.
Changes to this policy
If we change how we handle your data, we will update this page and change the “last updated” date at the top. If a change is significant, we will make it easy to notice. We suggest checking back here from time to time so you always know where you stand.