This Privacy Policy explains how Consultancy Group ("CG", "we", "us", or "our") collects, uses, discloses, and protects personal data when you use our website cg.com.sa (the "Site"), contact us, or apply for roles via our careers pages. It also describes your rights under applicable laws, including the Saudi Personal Data Protection Law (PDPL).
By using the Site or providing your personal data to us, you agree to this Privacy Policy.
1) Who we are and how to contact us (Data Controller)
Consultancy Group (CG)
Riyadh HQ: 7530 At Takhassusi – Al Muhammadiyah Dist., Unit No. 3, Riyadh 12364–3466, Kingdom of Saudi Arabia
Cairo Office: 34 Hassan Maamoon St., Nasr City – Sixth District, Cairo, Egypt
Phone: +966-11-207-7777
Email: info@cg.com.sa
If you have any questions or wish to exercise your privacy rights, contact us at info@cg.com.sa. When contacting us, please specify your name, the nature of your request, and how we can reach you.
2) What we collect
We collect the following categories of personal data:
a) Data you provide directly
Contact forms: First name, last name, email, mobile number, company/organization, and message.
Careers / job applications: Name, email, phone, job title/role of interest, resume/CV, portfolio links, cover letter, and any other information you choose to submit.
Business communications: Emails, meeting notes, proposals, contracts, and billing details you or your organization share with us.
b) Data we collect automatically
Usage data: IP address, device/browser type, pages viewed, links clicked, time and date of visit, referring URLs, and general location derived from IP.
Cookies and similar technologies: Necessary cookies to enable the Site to function; and (if enabled) analytics and performance cookies.
c) Data from third parties
Public sources and partners: We may receive limited contact and company information from business partners, public directories, professional networks, or recruitment platforms.
3) Why we process your data (purposes)
We process personal data to:
Respond to inquiries and provide proposals/services.
Evaluate and manage job applications and recruitment.
Operate, maintain, and secure the Site (including troubleshooting and fraud prevention).
Improve our content, services, and user experience through aggregated analytics.
Send administrative notices and, where permitted, marketing communications.
Comply with legal obligations and protect our rights.
4) Our legal bases (PDPL)
Depending on the activity, we rely on one or more of the following bases permitted under PDPL and relevant regulations:
Consent (e.g., for certain cookies/marketing).
Contractual necessity (e.g., to respond to requests or perform a contract with you/your organization).
Legitimate interests (e.g., to secure our Site and improve services, balanced against your rights and expectations).
Legal obligations (e.g., recordkeeping, responding to lawful requests).
Where we rely on consent, you may withdraw it at any time (see Section 9).
5) Cookies and similar technologies
Strictly necessary cookies operate basic functions like page navigation and form submissions. These cannot be switched off.
Analytics/performance cookies help us understand how visitors use the Site and improve performance; these load only where consent is obtained (if in use).
You can manage cookies via your browser settings and, if present, the Site’s cookie banner/preferences center.
6) Sharing your data
We may share personal data with:
Service providers/processors that support our Site, IT, analytics, recruitment, or business operations (under contracts that limit their use of data to our instructions).
Professional advisers (lawyers, auditors) and insurers as needed.
Authorities where required by law, court order, or to protect rights, safety, and security.
We do not sell personal data.
7) Data retention
We retain personal data only as long as necessary for the purposes described in this Policy, including:
Contact inquiries: typically up to 24 months from last interaction.
Contract/engagement records: for the duration of the engagement and as required by law.
Job applicants: generally 24 months from application or last interaction (unless local law requires longer/shorter periods or you request earlier deletion).
We may retain data longer where legally required, for dispute resolution, or to enforce our agreements.
8) Security
We implement organizational and technical measures designed to protect personal data against unauthorized access, use, alteration, or loss. No system is 100% secure; we maintain procedures for assessing and responding to incidents.
9) Your rights
Subject to applicable law, you may have the right to:
Access your personal data and obtain a copy.
Correct inaccurate or incomplete data.
Request deletion where data is no longer needed or processed unlawfully.
Object to certain processing or restrict it in specific circumstances.
Withdraw consent where processing is based on consent.
Complain to the competent authority if you believe your rights are infringed.
To exercise your rights, contact info@cg.com.sa. We may need to verify your identity and, where applicable, confirm authorization if you act on behalf of another person.
10) Third‑party links and platforms
Our Site may link to third‑party websites/platforms (e.g., social media, publications). We are not responsible for their privacy practices. Please review their policies before providing personal data.
11) Changes to this Policy
We may update this Policy from time to time. We will post the updated version on this page with a new "Last updated" date. Material changes may also be communicated by notice on the Site.
12) How to contact us
For questions or requests about this Policy or your data:
Email: info@cg.com.sa
Phone: +966-11-207-7777
Postal (Riyadh HQ): 7530 At Takhassusi – Al Muhammadiyah Dist., Unit No. 3, Riyadh 12364–3466, KSA