Privacy Policy

Last updated: 9 November 2026

This Privacy Policy explains how STAMiNA collects, uses, shares and protects personal data when you visit stamina.sa, contact us, or apply to join our talent network. It is issued in line with the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations.

1. Who we are

Stamina Productions for Event Management (“STAMiNA”, “we”, “us”) is the controller of the personal data described in this policy.

Address: 6675 Al Olaya, 2628 Al Olaya District, Riyadh 12241, Kingdom of Saudi Arabia
Privacy contact: hr@stamina.sa

2. Personal data we collect

When you contact us

If you email or call us, we receive your name, email address, phone number and anything you include in your message.

When you apply to join our talent network

Our application form at stamina.sa/apply asks for:

  • Identity and contact details: title, full name, date of birth, gender, marital status, nationality, home address, mobile number, personal email and current location
  • Professional details: skills, qualifications, previous projects and positions, driving licence, first aid qualification, availability and expected monthly rate
  • Documents you choose to upload, such as your CV and certificates
  • Optional answers about your interests and how you heard about us

Fields marked with an asterisk are required to assess your application. If you do not provide them, we may not be able to consider you for opportunities. All other fields are optional.

Please do not send us sensitive personal data, such as health information or religious beliefs, unless we specifically ask for it.

When you browse our website

  • Technical data recorded by our hosting and security systems, such as IP address, browser type, device, pages requested, date and time. We use this to keep the website secure and working.
  • Usage data collected by Google Analytics, only if you accept analytics cookies. See our Cookie Policy.

3. Why we use your data and our legal basis

Purpose Legal basis
Replying to your enquiries and managing business relationships Our legitimate interest in responding to people who contact us, or steps you ask us to take before entering a contract
Assessing applications and contacting you about suitable events and projects Your consent, given when you submit the application form
Protecting the website against attacks, fraud and misuse Our legitimate interest in keeping our systems secure
Understanding how visitors use the website so we can improve it Your consent, given through our cookie banner
Meeting legal and regulatory requirements Compliance with laws that apply to us in the Kingdom

We do not use your personal data for automated decision making, and we do not sell it.

4. Who we share it with

We share personal data only where needed for the purposes above, with:

  • Our staff who need it for their role, such as HR and project teams
  • Service providers who process data on our behalf: website hosting (GoDaddy), website security (Wordfence), website analytics and form storage (Google), email (Microsoft 365) and website notification email (Mailjet)
  • Clients or event organisers, only where you are being proposed for a specific project and you have agreed to this
  • Government or judicial authorities where the law requires it

Our service providers may use personal data only on our instructions and must protect it.

5. Transfers outside the Kingdom

Some of our service providers store or process data outside Saudi Arabia, including in the United States and the European Union. Our website is hosted on servers in the United States, and application form submissions are stored using Google services. Where data is transferred outside the Kingdom, we limit it to what is necessary and apply the safeguards required under the PDPL and the Regulation on Personal Data Transfer Outside the Kingdom.

6. How long we keep it

  • Enquiries and business correspondence: up to 2 years after our last contact, unless a longer period is required for a contract or by law
  • Talent network applications: up to 2 years after you submit or last update your details, after which we delete them or ask whether you want to stay in our network
  • Security and server logs: for a limited period, usually no more than 90 days
  • Analytics data: no more than 14 months

When data is no longer needed, we delete it securely or make it anonymous.

7. How we protect it

We use technical and organisational measures to protect personal data, including encrypted connections (HTTPS), a website firewall and malware scanning, two step login for administrators, access limited to staff who need it, and regular backups.

8. Your rights

Under the PDPL you have the right to:

  • Be informed about how we collect and use your personal data
  • Access your personal data and receive a copy in a clear and readable format
  • Ask us to correct, complete or update your personal data
  • Ask us to destroy your personal data when it is no longer needed
  • Withdraw your consent at any time, without affecting processing that took place before withdrawal

To make a request, email hr@stamina.sa. We may ask you to confirm your identity. We will respond within 30 days, and will tell you in advance if we need up to 30 more days.

If you are not satisfied with our response, you can file a complaint with the Saudi Data and AI Authority (SDAIA).

9. Children

Our website and talent network are intended for adults. We do not knowingly collect personal data from anyone under 18. Applicants must be at least 18 years old.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. Significant changes will be highlighted on our website.