Your privacy is
our priority.

01 Introduction & Scope

Welcome to Trend Stream ("we," "us," or "our"). We are an AI-powered digital marketing agency based in Riyadh, Saudi Arabia. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website trendstream.com.sa, use our AI search optimization tools, or engage our marketing services.

We are committed to protecting the privacy of our website visitors, clients, and prospects. By accessing our website or using our services, you consent to the practices described in this policy. We comply with the Kingdom of Saudi Arabia's Personal Data Protection Law (PDPL) and applicable international data protection regulations.

02 The Data Controller

Trend Stream, headquartered in Riyadh, Saudi Arabia, acts as the "Data Controller" as defined under the PDPL. This means we are responsible for determining the purposes and means of processing your personal data.

For specific marketing campaigns where we process data on behalf of our clients (e.g., managing an email list for a Riyadh-based e-commerce store), the client acts as the Data Controller, and Trend Stream acts as the "Data Processor." We process this data strictly based on the documented instructions of our clients.

03 Personal Data We Collect

We collect various types of information to provide and improve our digital marketing services. The types of information we may collect include:

Personal Information

Information you voluntarily provide to us when you fill out a form, request a free audit, or subscribe to our newsletter:

• Contact Details: Full name, email address, phone number, and company name.
• Business Data: Website URLs, target audience profiles, and current marketing metrics shared during strategy consultations.
• Billing Information: Bank details, credit card information, and billing address required for invoicing and service payments (processed securely via third-party gateways).

Non-Personal & Technical Data

Information collected automatically as you navigate our website through cookies and server logs:

• Device & Browser Info: IP address, browser type, operating system, and screen resolution.
• Usage Patterns: Pages visited, time spent on pages, referring URLs, and click paths.
• Location Data: Approximate geographic location derived from your IP address to customize content for the Gulf region.

04 Special Categories of Data

As a digital marketing agency, we generally do not collect special categories of personal data (such as health records, racial or ethnic origin, religious beliefs, or biometric data) unless explicitly required for targeted ad campaigns (e.g., demographic targeting on Meta or Google).

If any such data is inadvertently shared with us, we will process it securely, strictly adhering to PDPL Article 20, which requires explicit consent for processing sensitive data. We will anonymize or delete such data immediately if it is not essential for the service requested.

05 How We Use Your Data

Trend Stream uses the collected data for legitimate business purposes necessary to deliver our AI-driven marketing solutions. Specifically, we use your information to:

• Service Delivery: To create marketing strategies, run PPC campaigns, execute SEO/AEO optimization, and build websites as requested by our clients.
• Communication: To respond to your inquiries, send updates about your campaigns, schedule meetings, and provide customer support.
• Analytics & AI Training: To analyze website traffic, optimize our AI algorithms for better search predictions, and improve user experience.
• Marketing: To send you newsletters, case studies, and promotional offers (you can opt out at any time).
• Legal Compliance: To comply with Saudi Arabian legal requirements, protect our intellectual property, and enforce our Terms of Service.

06 Legal Basis for Processing

In alignment with PDPL regulations, we process your personal data only when we have a valid legal basis. Our legal bases for processing include:

• Consent: When you explicitly provide consent by submitting a contact form, subscribing to emails, or accepting cookies.
• Contractual Necessity: When processing your data is required to fulfill a contract or service agreement you have signed with Trend Stream.
• Legitimate Interest: When processing is necessary for our legitimate business interests (such as website security, fraud prevention, or service improvement), provided your rights and freedoms do not override those interests.
• Legal Obligation: When we are required to process data to comply with local Saudi laws and regulations.

07 AI Processing & Automation

As an agency specializing in AI Search Optimization (AEO/GEO), we utilize advanced artificial intelligence tools to analyze search trends, optimize content, and predict consumer behavior. We may process your business data using these AI models to generate actionable marketing insights.

We do not use automated decision-making that produces legal or similarly significant effects on you without your explicit consent. Human oversight is always maintained over AI-generated strategies to ensure accuracy, fairness, and compliance with Saudi regulations.

08 Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies (web beacons, JavaScript, local storage) to monitor activity on our site and store certain information. Cookies help us provide a smoother, more personalized experience.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the website to function correctly (e.g., remembering your cookie preferences).
• Analytics Cookies: We use Google Analytics and similar tools to understand how visitors interact with the site, allowing us to improve our content.
• Advertising Cookies: Used by platforms like Google Ads and Meta (Facebook) to display relevant marketing ads to you across the web.

You can control or disable cookies through your browser settings at any time. However, disabling strictly necessary cookies may impact website functionality.

09 Data Sharing and Third Parties

Trend Stream does not sell your personal data. We only share information with trusted third-party vendors and partners who assist us in operating our website, conducting business, or servicing you. These third parties include:

• Cloud & Hosting Providers: Secure data storage and website hosting (e.g., AWS, Google Cloud).
• Marketing & Analytics Platforms: Google Analytics, Google Ads, Meta Business Suite, and CRM software (e.g., HubSpot).
• Communication Tools: Email platforms for delivering campaigns and internal messaging (e.g., Slack, WhatsApp Business).
• Legal & Financial Advisors: Auditors, banks, and legal counsel when necessary for compliance.

All third-party service providers are contractually obligated to handle your data securely and only for the purposes we specify.

10 Cross-Border Data Transfers

While Trend Stream is headquartered in Riyadh, Saudi Arabia, we may utilize cloud servers and third-party tools located in other countries (such as the United States or European Union) to deliver our digital services. When we transfer your data internationally, we ensure that:

• The receiving country provides an adequate level of data protection recognized by Saudi authorities, or
• We use standard contractual clauses (SCCs) approved by relevant authorities to safeguard the data transfer.
• We comply strictly with PDPL guidelines regarding cross-border data flows.

11 Data Security Measures

We take the security of your data seriously. As an AI-focused tech agency, we implement industry-standard technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction.

Our security practices include:

• Encryption: SSL/TLS encryption for data transmitted between your browser and our servers (HTTPS).
• Access Controls: Strict, role-based access controls ensuring only authorized Trend Stream personnel can access your data.
• Regular Audits: Periodic security assessments and vulnerability scans on our digital infrastructure.
• Incident Response: A documented response plan to address any potential data breaches swiftly, in accordance with PDPL notification requirements.

12 Data Retention & Deletion

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

• Client Data: Marketing campaign data and billing records are retained for the duration of our service agreement, plus up to 5 years thereafter for tax and legal compliance.
• Prospect Data: Information collected via lead generation forms is retained for up to 2 years unless you request earlier deletion.
• Website Analytics: Aggregated, non-identifiable analytics data may be stored indefinitely.

Once the retention period expires, we securely delete or anonymize your personal data.

13 Your Rights Under PDPL

Under Saudi PDPL and other applicable privacy laws, you have specific rights regarding your personal data. Trend Stream is dedicated to facilitating these rights:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): You can ask us to delete your personal data, subject to certain legal exceptions.
• Right to Restrict Processing: You can request that we limit the processing of your data under certain conditions.
• Right to Data Portability: You can request a machine-readable copy of your data to transfer to another provider.
• Right to Withdraw Consent: Where we rely on your consent to process data, you can withdraw it at any time.

To exercise any of these rights, please contact us using the details provided in Section 18.

14 Marketing Opt-Outs

If you are a prospect or client, we may send you marketing communications regarding our digital marketing services, AI insights, and industry updates. You have the right to opt-out of these communications at any time.

You can unsubscribe by clicking the "unsubscribe" link included in our emails, replying with "STOP" to our SMS/WhatsApp campaigns, or by contacting our Data Protection Officer directly. Opting out of marketing communications will not affect our ability to send you essential service-related notices.

15 Social Media Platform Data

When we manage social media campaigns on behalf of our clients (on platforms like Instagram, TikTok, Snapchat, X, and LinkedIn), we may have access to aggregated, non-personally identifiable data regarding audience engagement and ad performance.

We do not control how social media platforms collect or process your data. We encourage you to review the privacy policies of these respective platforms. Trend Stream only uses this data to optimize ad performance and report on campaign ROI to our clients.

16 Children's Privacy

Our services and website are intended exclusively for businesses, professionals, and adults. We do not knowingly collect personal information from children under the age of 18. If you believe a child has provided us with personal data, please contact us immediately, and we will take steps to delete such information in accordance with PDPL regulations.

17 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top.

We encourage you to review this page periodically to stay informed about how we protect your data. Continued use of our services after changes are posted constitutes your acceptance of the updated policy.

18 Contacting the Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please reach out to our Data Protection Officer (DPO):

• Company: Trend Stream
• Location: Riyadh, Kingdom of Saudi Arabia
• Email: info@trendstream.com.sa
• WhatsApp: +966 55 301 2244
• Contact Page: trendstream.com.sa/contact-us

We aim to respond to all privacy-related inquiries within 48 hours.