Privacy

What this site collects.

This is the privacy notice for redhaalayesh.com, run by Redha Alayesh, a marketing consultant in Riyadh. The short version: an email address, only if you type it in. The newsletter form is for Second Opinion. The Saudi Meta Copy form is a separate waitlist, and it also asks for a mobile number. Neither list is the other.

Last updated: 2026-09-23

Who

Who is responsible for your data.

Redha Alayesh, Riyadh, Saudi Arabia, is the data controller for this site. Any question about this notice, or any request under it, goes to r@redhaalayesh.com.

What

What is collected, and what is not.

Your email address, and a language tag recording whether you subscribed from the Arabic or the English page. Only if you submit the subscribe form. Nothing else on the form is stored, because there is nothing else on the form.
The Saudi Meta Copy waitlist, if you submit the form at /saudi-meta-copy/. That form stores your email address, your mobile number, the language of the page, an optional name, an optional role, the page you submitted from, the date, the IP address and the browser string. The mobile number is normalised to international form before it is stored. This row is not the newsletter list. Joining the waitlist does not subscribe you to Second Opinion, and subscribing to Second Opinion does not put you on the waitlist. There is no confirmation email: sending the form is the opt-in. The row is kept until you ask for it to be removed, and it is not passed to the newsletter sender.
Proof that you consented to the newsletter, stored on that row: the page you subscribed from, the date, the IP address and browser string at that moment, and the date you clicked the confirmation link. This exists so that if anyone ever asks why you are on the list, the answer is a record rather than an assurance. It is never used to profile you, and it goes when the address goes.
Ordinary web server logs, kept by the hosting provider: IP address, timestamp, the page requested, and the browser's user agent. These are generated by the server, not by this site, and they are used for security and for keeping the site up.

Analytics and advertising tags run here, and they load before you are asked. Google Tag Manager loads Google Analytics and advertising pixels belonging to Meta and LinkedIn. They set cookies. They can recognise you on other sites those same companies serve. That is what they are for: they tell me which piece of writing brought you here, and whether an ad was worth its money.

You were not asked, and there is no banner. That is a deliberate choice rather than an oversight, and stating it plainly here is the least it deserves: the tags load on the first page you open. If you would rather they did not, there is a switch further down this page that turns them off and keeps them off, and it works.

Two things are honoured without being asked for. If your browser sends Global Privacy Control or Do Not Track, nothing loads at all: those take effort to turn on, so whoever turned them on meant it. And the switch below also stops the half of this you cannot see, the measurement that happens on the server rather than in your browser, which is harder to notice and therefore worth naming.

Your address is still never sold and never rented. That one has not changed and is not going to.

Why

Why it is collected, and on what basis.

Your address is used for exactly one purpose: sending you the newsletter you asked for. The legal basis is your consent, given twice. Once when you submit the form, and again when you click the confirmation link in the email that follows. If you do not click it, no newsletter is ever sent and the pending record is discarded.

The language tag exists so an Arabic subscriber is not sent an English issue. It is not used for segmentation, scoring or targeting.

The waitlist address and mobile number are a separate purpose, and only if you submitted that form: to tell you when Saudi Meta Copy is ready to try, and to see who asked. They are not added to the newsletter, and they are not used to send Second Opinion.

Where

Who else handles it.

The list

The subscriber list is a table in the WordPress database on this site's own hosting, kept by the Redha Lists plugin. Submitting the form does not send your address anywhere else. That is deliberate: a list held inside somebody else's product is a list that moves, changes terms and gets exported on their schedule rather than mine. Confirming hands a copy to the sender in the next row, and nothing before that does.

Waitlist

A second WordPress table, not the newsletter table: email, mobile number, optional name, optional role. It is not copied to the newsletter sender. Submitting that form is consent to store it on the host, including the cross-border transfer in the next row.

Hosting

Hostinger runs the server. It serves the pages, holds the database the list lives in, and keeps the server logs described above. Its data centres are outside Saudi Arabia, so storing your address there is a cross-border transfer, and subscribing is your consent to it.

Sending

The confirmation email is sent from a mailbox on this domain. The issues themselves are sent by MailerLite, a newsletter service based in Lithuania, and a copy of your address is given to it at the moment you click the confirmation link, never before. That is a transfer of personal data outside Saudi Arabia, and confirming is your consent to it. It is a copy: the list here does not live inside MailerLite, and it has been replaced once already without a single address moving.

Fonts

All typefaces are served from this domain. No font CDN is contacted, so no third party learns you visited.

Nobody else. There is no CRM behind this site, no advertising platform, and no embedded third-party widget of any kind.

What runs, who it belongs to, and how to change your mind.

Google

Tag Manager, which loads the rest, and Analytics, which counts pages, referrers, countries and how far down a page people get. Cookies, and a transfer to Google in the United States.

Retention.

Your address is kept until you unsubscribe. When you do, the row is marked unsubscribed the same second and deleted within 30 days. It is marked first rather than deleted outright because a deleted row cannot stop an address being added back by a later import, and being re-mailed after opting out is the failure worth engineering against. Unconfirmed signups are deleted after 30 days by a job that runs daily, not by hand. Server logs are retained by the host on its own rolling schedule, which is short and measured in weeks rather than years. The Saudi Meta Copy waitlist is a different table. The email and the mobile number stay until you ask for the row to be deleted. Joining it does not start a mail you can click out of, so removal is a message to r@redhaalayesh.com.

Your rights

What you can ask for.

Under Saudi Arabia's Personal Data Protection Law, in force since September 2023 and fully enforceable since September 2024, you can ask to know what is held about you, to have it corrected, to have it deleted, and to withdraw your consent at any time. You can also ask for a copy of it in a readable format.

Withdrawing consent for the newsletter is the unsubscribe link at the bottom of every issue. It takes one click and no reason. Withdrawing it for the Saudi Meta Copy waitlist is an email to r@redhaalayesh.com, because that list sends no mail to click out of.
Everything else is an email to r@redhaalayesh.com. It is answered within 30 days, usually inside two working days. What is held is one row in the newsletter list and, if you joined it, one row in the waitlist.

If you are not satisfied with the answer, you can complain to the Saudi Data and Artificial Intelligence Authority.

Changes

If this notice changes.

The date at the top changes with it. If a change affects what is collected or who receives it, subscribers are told in an issue before it takes effect, rather than after.