Last updated:
Who is responsible for your data
The controller is All Star Productions, Commercial Registration 7037719726, Muzzamah, As Salihiya, Ar Riyadh, Saudi Arabia. For any privacy question contact mahrus0murshed@gmail.com.
What we collect, and why
- Quote form: your name, email, the service you need and your message; optionally your company, phone, city and project date. We use these only to reply to your enquiry and prepare a quote.
- Online payment: the quote or invoice reference and the amount. Card details are entered on our payment provider's page and never reach us.
- Data requests: your email and the request you make, so we can find your records and act on it.
- Cookie choice: your consent decision, stored in your browser.
We do not ask for information we do not need, and we do not buy personal data from third parties.
Legal basis
We process enquiry data on the basis of your consent, given when you tick the box on the form. We process project, invoice and payment data to perform our contract with you and to meet legal obligations such as tax record-keeping. You can withdraw consent at any time.
Marketing emails
We send marketing emails only if you opted in by ticking the separate, unticked box. Every marketing email contains an unsubscribe link, and you can also stop them from the data request page. Unsubscribing never affects your projects or quotes.
Who we share data with
- Moyasar, our payment provider, to process card payments.
- Our website hosting and email providers, who store data on our behalf.
- Venues, organisers or subcontractors, only where a project you have approved requires it.
- Authorities, where the law requires it.
We do not sell personal data. If a provider stores data outside Saudi Arabia, we rely on the transfer conditions set by the PDPL.
How long we keep it
Enquiries that do not become projects are deleted within 12 months. Project and invoice records are kept for as long as Saudi tax and commercial law requires, then deleted or anonymised.
Your rights
- Know how your data is used.
- Get a copy of your data.
- Have inaccurate data corrected.
- Have your data deleted when it is no longer needed.
- Withdraw consent at any time.
Use the data request page or email us. We reply within 30 days. If you are not satisfied with our answer you may complain to the Saudi Data & AI Authority (SDAIA).
Children
This website offers business services and is not directed at anyone under 18. We do not knowingly collect children's data. If you believe a child has sent us personal data, contact us and we will delete it. Any event that would involve collecting data about minors requires the consent of a parent or legal guardian first.
Security and changes
We limit access to personal data to staff who need it and use encrypted connections on this site. If this policy changes we will update the date at the top of this page.