Privacy Policy — How Riyadh 2030 Collects, Uses, and Protects Your Personal Information

Effective Date: March 23, 2026

Last Updated: March 23, 2026

Riyadh 2030 (“we,” “us,” “our”), a publication of The Vanderbilt Portfolio, is committed to protecting the privacy and personal information of individuals who visit, subscribe to, or otherwise interact with the riyadh2030.ai website and associated services (collectively, the “Platform”). This Privacy Policy explains in detail what information we collect, why we collect it, how we use it, with whom we share it, and what rights you have regarding your personal data.

We encourage you to read this Privacy Policy carefully and in its entirety. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.

1. Information We Collect

We collect information from and about our users through several mechanisms, each serving distinct and legitimate purposes in supporting the operation, improvement, and security of the Platform.

1.1 Information You Provide Directly

When you interact with the Platform, you may voluntarily provide personal information through various channels:

Contact Form and Email Submissions: When you contact us at info@riyadh2030.ai or through any contact form on the Platform, you provide your email address and any additional personal information included in your message, such as your name, professional affiliation, phone number, or physical address. We collect this information solely for the purpose of responding to your inquiry and maintaining records of our communications.

Newsletter Subscriptions: When you subscribe to our newsletters or email updates, you provide your email address and, optionally, your name, professional title, organization, and areas of interest. This information enables us to deliver tailored content that aligns with your interests in Saudi Arabia’s transformation landscape.

Account Registration: If you create an account on the Platform, you provide registration information including your name, email address, and a password. Professional subscribers may additionally provide their organization name, job title, industry sector, and geographic location. This information enables us to manage your account, deliver personalized services, and tailor content recommendations.

Premium Subscriptions and Purchases: When you purchase premium content or subscribe to paid services, you provide payment information through our third-party payment processor. We do not directly collect or store credit card numbers, bank account details, or other sensitive financial information — this data is handled entirely by our payment processing partners under their own privacy policies and security standards.

User Comments and Feedback: When you submit comments, corrections, feedback, or other content to the Platform, you provide any personal information included in those submissions. We collect this information to facilitate community engagement, improve our content, and address factual corrections.

1.2 Information Collected Automatically

When you access the Platform, certain information is collected automatically through cookies, web beacons, log files, and similar technologies:

Device and Browser Information: We collect information about the device and browser you use to access the Platform, including device type (desktop, mobile, tablet), operating system and version, browser type and version, screen resolution, and language preferences. This information helps us optimize the Platform’s performance and user experience across different devices and browsers.

Usage Data: We collect data about how you interact with the Platform, including pages visited, articles read, time spent on each page, scroll depth, click patterns, search queries entered, dashboard interactions, and navigation paths. This usage data helps us understand which content resonates with our audience, identify areas for improvement, and inform our editorial planning.

IP Address and Location Data: Your IP address is automatically logged when you access the Platform. From your IP address, we can derive approximate geographic location information at the city and country level. We use this data for analytics, content localization, security monitoring, and compliance with geographic restrictions on certain content.

Referral Data: We collect information about how you arrived at the Platform, including the referring URL, search engine and search terms used (where available), social media platform, email campaign, or other source that directed you to our site. This data helps us understand our audience acquisition channels and optimize our distribution strategy.

Cookies and Similar Technologies: We use cookies and similar tracking technologies as described in our separate Cookie Policy. These technologies enable core Platform functionality, remember your preferences, provide analytics data, and support advertising operations. You can manage your cookie preferences through your browser settings and through the cookie consent mechanism on our Platform.

1.3 Information from Third Parties

We may receive information about you from third-party sources that supplements the data we collect directly:

Analytics Providers: Google Analytics and similar services provide aggregated and individual-level data about Platform usage patterns, audience demographics, and interest categories.

Advertising Partners: Google AdSense and other advertising partners may provide data about ad interactions, including impressions, clicks, and conversion events associated with your browsing activity.

Social Media Platforms: If you interact with our content on social media platforms, we may receive data from those platforms about the interaction, subject to the platform’s privacy policies and your privacy settings.

Public Sources: We may collect information about professional contacts from publicly available sources such as LinkedIn profiles, company websites, conference speaker lists, and published articles, for the purpose of building and maintaining our professional network.

2. How We Use Your Information

We use the information we collect for the following purposes, each supported by a legitimate legal basis:

2.1 Platform Operations and Service Delivery

• Delivering content, newsletters, and data products you have requested
• Processing premium subscriptions and managing account access
• Responding to your inquiries, comments, and support requests
• Maintaining and securing user accounts
• Processing payments through our third-party payment partners

2.2 Platform Improvement and Analytics

• Analyzing usage patterns to improve content quality, relevance, and presentation
• Conducting audience research to understand reader demographics, interests, and preferences
• Testing new features, layouts, and functionality
• Monitoring Platform performance, uptime, and technical health
• Identifying and fixing bugs, errors, and technical issues

2.3 Personalization

• Tailoring content recommendations based on your reading history and stated interests
• Customizing newsletter content to align with your preferences
• Displaying relevant advertising based on your interests and demographics
• Remembering your preferences, settings, and consent choices

2.4 Advertising

• Serving display advertisements through Google AdSense and other advertising networks
• Measuring advertising performance including impressions, clicks, and conversions
• Supporting interest-based advertising that delivers relevant ads to our audience
• Generating advertising revenue that sustains our editorial operations

2.5 Communication

• Sending newsletters, editorial updates, and content alerts you have subscribed to
• Notifying you of changes to our Terms of Service, Privacy Policy, or other policies
• Sending administrative communications related to your account
• Contacting you about partnership opportunities, events, or premium offerings (with your consent)

2.6 Legal and Security

• Protecting the Platform against fraud, abuse, and security threats
• Enforcing our Terms of Service and other policies
• Complying with legal obligations, court orders, and regulatory requirements
• Defending our legal rights and responding to legal claims

3. Legal Basis for Processing

Depending on the context and your jurisdiction, we process your personal information under one or more of the following legal bases:

Consent: Where you have given explicit consent for specific processing activities, such as subscribing to newsletters or accepting cookies. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Contractual Necessity: Where processing is necessary to fulfill our obligations under a contract with you, such as delivering premium subscription services or processing your account registration.

Legitimate Interests: Where processing is necessary for our legitimate business interests, provided that such interests are not overridden by your rights and freedoms. Our legitimate interests include operating and improving the Platform, understanding our audience, delivering relevant advertising, and maintaining Platform security.

Legal Obligation: Where processing is necessary to comply with applicable laws, regulations, or legal proceedings.

4. Information Sharing and Disclosure

We do not sell your personal information to third parties. We share your information only in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including web hosting, email delivery, payment processing, analytics, and advertising. These providers are contractually obligated to use your information only for the purpose of providing their services to us and to maintain appropriate security measures.

4.2 Advertising Partners

We share data with advertising partners, primarily Google AdSense, to support the delivery of relevant advertisements on the Platform. This sharing is governed by our advertising partners’ privacy policies and is subject to your cookie and advertising preferences.

4.3 Analytics Providers

We share data with analytics providers, primarily Google Analytics, to understand Platform usage and audience characteristics. This data is typically processed in aggregate or pseudonymized form.

4.4 Legal Requirements

We may disclose your information if required to do so by law, court order, subpoena, or other legal process, or if we believe in good faith that such disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

4.5 Business Transfers

If Riyadh 2030 or The Vanderbilt Portfolio is involved in a merger, acquisition, sale of assets, or bankruptcy proceeding, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4.6 With Your Consent

We may share your information with third parties when you have given explicit consent for such sharing.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

• Account data: Retained for the duration of your account plus 12 months following account closure
• Contact and inquiry records: Retained for 3 years from the date of last communication
• Newsletter subscription data: Retained until you unsubscribe, plus 6 months for suppression list purposes
• Analytics and usage data: Retained for 26 months from collection in accordance with Google Analytics data retention settings
• Payment records: Retained for 7 years to comply with financial reporting obligations
• Server logs: Retained for 90 days for security and operational purposes

When retention periods expire, personal data is either deleted or anonymized so that it can no longer be associated with you.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols
• Secure hosting infrastructure with regular security updates and patches
• Access controls that limit employee and contractor access to personal data on a need-to-know basis
• Regular security assessments and monitoring for vulnerabilities
• Incident response procedures for addressing data breaches promptly

While we strive to protect your personal information, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security, and you use the Platform at your own risk.

7. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

7.1 Right of Access

You have the right to request a copy of the personal information we hold about you and to receive information about how it is processed.

7.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information.

7.3 Right to Erasure

You have the right to request deletion of your personal information, subject to certain exceptions where retention is necessary for legal compliance, contract performance, or other legitimate purposes.

7.4 Right to Restrict Processing

You have the right to request that we limit the processing of your personal information in certain circumstances, such as when you contest the accuracy of the data or object to processing based on legitimate interests.

7.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another controller.

7.6 Right to Object

You have the right to object to processing of your personal information based on legitimate interests, including profiling and direct marketing.

7.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

7.8 Exercising Your Rights

To exercise any of these rights, please contact us at info@riyadh2030.ai with the subject line “Privacy Rights Request.” We will respond to your request within 30 days, or within such other period as required by applicable law. We may request additional information to verify your identity before fulfilling your request.

8. International Data Transfers

The Platform is operated from the United States. If you are accessing the Platform from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

Where we transfer personal information from the European Economic Area, United Kingdom, or Switzerland to countries that have not been deemed to provide an adequate level of data protection, we implement appropriate safeguards including standard contractual clauses approved by the European Commission.

9. Children’s Privacy

The Platform is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under the age of 18, we will take steps to delete such information promptly. If you believe that we may have collected information from a child, please contact us at info@riyadh2030.ai.

10. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information we collect and how we use it, the right to delete your personal information, the right to opt out of the sale or sharing of your personal information, and the right to non-discrimination for exercising your privacy rights.

We do not sell personal information as defined under California law. To exercise your California privacy rights, please contact us at info@riyadh2030.ai.

11. European Economic Area, United Kingdom, and Swiss Residents

If you are a resident of the European Economic Area, United Kingdom, or Switzerland, you have the rights described in Section 7 under the General Data Protection Regulation (GDPR) and equivalent national legislation. You also have the right to lodge a complaint with your local data protection supervisory authority.

Our data processing activities within the scope of the GDPR are conducted under the legal bases identified in Section 3 of this Privacy Policy.

12. Do Not Track Signals

Some browsers offer a “Do Not Track” (DNT) feature that sends a signal to websites you visit indicating that you do not want to be tracked. There is no uniform standard for how websites should respond to DNT signals. Currently, the Platform does not respond to DNT signals, but you can manage your tracking preferences through our cookie consent mechanism and your browser settings.

13. Third-Party Links

The Platform contains links to third-party websites and services that are not operated by us. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit to understand how they collect, use, and protect your information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will indicate the date of the most recent revision at the top of this page. Material changes will be communicated through a prominent notice on the Platform or via email to registered users.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us at:

Email: info@riyadh2030.ai

Subject Line: Privacy Inquiry

Publisher: The Vanderbilt Portfolio

We will endeavor to respond to your inquiry within 30 days. For privacy rights requests, we will respond within the timeframes required by applicable law.

Your privacy matters to us, and we are committed to handling your personal information responsibly and transparently. Thank you for trusting Riyadh 2030 with your information.