Legal

Privacy Policy

Effective date: 30 October 2026

This policy explains how Blue Rain Global LLC (“Blue Rain”, “we”, “us”) collects, uses, stores, discloses and protects personal data connected with this website.

1. Controller and contact details

The controller is Blue Rain Global LLC, Hital Tower, King Fahd Branch Road, As Sahafah District, Riyadh 13315, Kingdom of Saudi Arabia. Privacy enquiries and rights requests may be sent to connect@bluerainglobal.com.

2. Personal data we collect

For enquiry forms, name, email address and message are required so that we can identify and respond to the request. Company, telephone number and area of interest are optional. For meeting requests, name, email address and meeting topic are required; company, preferred format, date and time are optional. Please do not provide confidential, privileged, financial, health or other sensitive personal data.

Our hosting and security systems may also process IP address, browser and device information, referral source, request time and basic server or security logs.

3. How data is collected

We collect personal data directly through the website forms, correspondence and meeting requests. Technical data is generated automatically when the website is accessed and is used only for operation, security and troubleshooting.

4. Purposes and legal bases

  • To review and respond to enquiries and meeting requests and take steps requested before a possible engagement.
  • To operate, secure, troubleshoot and improve the website based on Blue Rain’s legitimate interests, without overriding the rights of individuals.
  • To satisfy legal, regulatory and record-keeping obligations.
  • Where required by law, to process data on the basis of consent, which may be withdrawn without affecting earlier lawful processing.

Data submitted for an enquiry will not be used for unrelated marketing without the required consent.

5. Disclosure, processors and international processing

Personal data may be processed by Vercel for website hosting and form routing, and by Google Workspace and Google Apps Script for delivery and handling of enquiries. It may also be disclosed to professional advisers or public authorities where necessary or legally required. We do not sell personal data.

These providers may process data outside Saudi Arabia. Blue Rain uses contractual, organisational and technical safeguards designed to address applicable Saudi requirements for processors and international transfers.

6. Retention and destruction

Enquiry and meeting-request records are retained for up to 24 months after the last interaction and are then securely deleted, unless the request becomes a client engagement or a longer period is required for legal, regulatory, dispute or record-keeping purposes. Essential technical and security logs are retained only for the period reasonably necessary for security, troubleshooting and provider operations, and are then deleted or anonymised in accordance with provider settings and applicable requirements.

7. Security and data accuracy

Blue Rain applies proportionate administrative, organisational and technical safeguards and takes reasonable steps to keep personal data accurate and relevant. No internet transmission is completely secure. Where required, affected individuals and the competent authority will be notified of qualifying personal-data breaches.

8. Your rights

Subject to the Saudi Personal Data Protection Law and its Implementing Regulations, you may have the right to be informed, access your personal data, obtain it in a readable format, request correction, completion or updating, request destruction when it is no longer required, and withdraw consent where consent is the legal basis. Requests may be sent to connect@bluerainglobal.com. You may also submit a complaint to the competent Saudi data-protection authority.

9. Mandatory and optional information

Required fields are identified on the relevant form. If required information is not provided, Blue Rain may be unable to review or respond to the request. Optional fields help us route and prepare for the enquiry but are not required to submit it.

10. Cookies and similar technologies

The website currently uses only technologies necessary for operation and security. If non-essential analytics, advertising or marketing technologies are introduced, this policy and any required consent mechanism will be updated before their use.

11. Updates

We may update this policy when our processing, service providers or legal obligations change. The effective date above will be revised when an updated policy is published.