Privacy Notice

1. Who controls your personal data

EDGE Holding USA, LLC is the controller of the personal data collected through the Website.

• Registered address: 131 Continental Drive, Suite 305, Newark, New Castle, Delaware 19713, United States
• Privacy contact: contact@exm-holding.com (subject: “Privacy”)

Where we appoint a data protection officer or a local representative in any country, we will publish their contact details in this section.

2. Personal data we collect

• Identity and contact data: full name, job title, organisation, work email address, telephone number (optional), country and city.
• Enquiry and business data: the type of organisation you represent; event requirements such as event type, preferred markets, date window, expected attendance, services needed and budget status; venue or company details, website, and programmes or capabilities of interest; and the content of your messages.
• Technical data: IP address, browser and device type, date and time of access and pages requested, recorded automatically in the server logs of our hosting provider.
• Cookie data: see our Cookie Policy.

We do not ask for sensitive personal data, such as data about health, religious belief or criminal records. Please do not include it in free-text fields.

3. How we collect it

• Directly from you, when you complete a form on the Website or email us.
• Automatically, when your browser connects to the Website.
• From the person who submits a form, where they give us a colleague’s details as a contact. That person must have the right to share those details with us.

4. Why we use it and our legal basis

• To review and respond to your requirement, enquiry or partner application, and to follow up by email — based on your consent given on the form and on steps you ask us to take before entering into an agreement.
• To assess how your requirement or application fits EXM programmes and venues, agencies and specialists — based on your consent and our legitimate interest in operating the marketplace.
• To operate, secure and improve the Website and to prevent spam, fraud and misuse — based on our legitimate interests.
• To comply with legal obligations and to establish, exercise or defend legal claims — based on legal obligation and our legitimate interests.

We do not send marketing communications unless you have separately agreed to receive them. Fields marked * are needed to handle your request; without them we cannot respond. We do not make decisions about you by automated means that produce legal or similarly significant effects, and we do not use personal data submitted through the Website to train artificial intelligence models.

5. Who we share it with

• Service providers that act on our instructions, such as website hosting, email and IT support providers.
• Venues, hotels, agencies and specialists in the EXM network, only where this is needed to respond to your requirement or application, and only to the extent necessary.
• Our affiliates, professional advisers and auditors, under duties of confidentiality.
• Courts, regulators and public authorities, where the law requires it.
• A buyer or successor in a merger, acquisition or reorganisation, under confidentiality obligations.

We do not sell personal data.

6. International transfers

EDGE Holding USA, LLC is organised in the United States, and our service providers may process data in other countries. Your personal data may therefore be transferred to, and stored in, countries other than the one where you are located, including countries outside the Kingdom of Saudi Arabia and the other Gulf states. We make such transfers only where applicable law permits them and with appropriate safeguards, such as contractual data protection clauses.

• Storage location: Singapore (our hosting provider’s servers for the Website and its forms)

You can ask us for information about the safeguards we use.

7. How long we keep it

• Requirements, enquiries and applications that do not lead to a business relationship: up to 24 months after our last contact with you.
• Data that forms part of a business relationship: for the duration of that relationship and afterwards for as long as the law requires or as needed to establish, exercise or defend legal claims.
• Server logs: for the period set by our hosting provider’s standard log rotation.

We then delete the data or make it anonymous.

8. How we protect it

We use appropriate technical and organisational measures to protect personal data, including encrypted (HTTPS) connections to the Website and access limited to authorised personnel with a business need. If a personal data breach occurs, we will notify the competent authority and the affected individuals where the law requires it, and within 72 hours of becoming aware of it where the law sets that deadline.

9. Your rights

Subject to applicable law, you have the right to:

• be informed about how we use your personal data;
• access your personal data and receive a copy;
• ask us to correct incomplete or inaccurate data;
• ask us to delete or destroy your data when it is no longer needed;
• object to, or ask us to restrict, certain processing;
• withdraw your consent at any time, without affecting processing carried out before withdrawal;
• receive your data in a portable format, where the law provides this right; and
• complain to a data protection authority.

To exercise a right, email contact@exm-holding.com with the subject “Privacy request”, or use the general enquiry form on the Contact page. We respond within 30 days and may need to verify your identity. We do not charge a fee.

10. Complaints

Please contact us first so that we can try to resolve your concern. You may also complain to the data protection authority in your country — for example, the Saudi Data and Artificial Intelligence Authority (SDAIA) in the Kingdom of Saudi Arabia.

11. Children

The Website is intended for business users aged 18 or over. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.

12. Other websites

The Website may link to websites operated by others. We are not responsible for their privacy practices; please read their own notices.

13. Changes to this notice

We may update this notice from time to time. The “Last updated” date shows when it last changed. Where a change is material, we will highlight it on the Website.

14. Language

This notice is published in Arabic and English, and both versions are intended to have the same meaning. Where applicable law requires the Arabic version to prevail, the Arabic version prevails.