Cookie Policy & Tracking Technologies

Last Updated: July 2025 | Version 2.1

Designed to comply with: GDPR, ISO 27001, Saudi Data Protection Law, ePrivacy Directive

ISO 27001:2013 Information Security ManagementGDPR Cookie Compliance FrameworkSaudi Data Protection Law (PDPL)ePrivacy Directive FrameworkSOC 2 Type II (planned)

This comprehensive Cookie Policy explains how Datalake ('we', 'our', 'us', or 'Datalake') uses cookies and similar tracking technologies when you visit our website. This policy is designed to comply with GDPR, ISO 27001, Saudi Data Protection Law, and the ePrivacy Directive.

1. Legal Framework & Compliance

Our use of cookies is designed to comply with: European General Data Protection Regulation (GDPR), Saudi Personal Data Protection Law (PDPL), ISO 27001 Information Security Management System, ePrivacy Directive (Cookie Law), and other applicable privacy regulations. We maintain records of cookie consent and processing activities.

2. What Are Cookies & Tracking Technologies?

Cookies are small text files stored on your device when you visit websites. We also use web beacons, pixel tags, local storage, and session storage. These technologies help websites remember information about your visit, such as your preferred language and other settings, making your next visit easier and more useful.

3. Legal Basis for Cookie Processing

We process cookie data based on: Consent (for non-essential cookies), Legitimate interests (for essential cookies), and Contract performance (for functional cookies). We implement appropriate consent management for any non-essential cookies.

4. Cookie Categories & Purposes

We categorize cookies as: Essential (required for website functionality), Performance (analytics and optimization), Functional (user preferences and features), and Marketing (advertising and targeting). Each category serves specific purposes and has different consent requirements.

5. Essential Cookies (Strictly Necessary)

Essential cookies are necessary for the website to function and cannot be switched off. They include: Authentication cookies, Security cookies, Load balancing cookies, and Session management cookies. These cookies do not store any personally identifiable information.

6. Performance & Analytics Cookies

Currently, we do not use performance or analytics cookies. If we implement such cookies in the future, we will update this policy and obtain appropriate consent before deployment.

7. Functional & Preference Cookies

Functional cookies enable enhanced functionality and personalization. They remember: Language preferences, User interface customization, Form data (temporarily), and Accessibility settings. These cookies improve your browsing experience.

8. Marketing & Advertising Cookies

Currently, we do not use marketing or advertising cookies. If we implement such cookies in the future, we will update this policy and obtain explicit consent before deployment.

9. Third-Party Cookies & Services

Currently, we do not use third-party services that set cookies. If we engage third-party services in the future, we will maintain agreements with all providers and update this policy accordingly.

10. Cookie Consent Management

For any non-essential cookies we may implement in the future, we will provide appropriate consent mechanisms that: Display cookie notices when required, Allow granular consent for different cookie categories, Remember consent preferences, and Provide easy consent withdrawal.

11. How to Control Cookies

You can control cookies through: Browser settings (Chrome, Firefox, Safari, Edge), Device settings (mobile browsers), and Third-party opt-out tools. Essential cookies cannot be disabled as they are necessary for website functionality.

12. Cookie Retention Periods

Cookie retention periods vary by type: Session cookies (deleted when browser closes), Persistent cookies (up to 2 years), Analytics cookies (up to 26 months), and Marketing cookies (up to 13 months). We regularly review and update retention periods.

13. International Cookie Transfers

Some cookies may transfer data internationally. We ensure adequate protection through: Standard Contractual Clauses (SCCs), Adequacy decisions, and Privacy Shield (where applicable). All international transfers are documented and monitored.

14. Security & Data Protection

We implement security measures for cookie data: Encryption of sensitive cookie data, Secure cookie transmission (HTTPS), Regular security assessments, and Access controls. Cookie data is processed in accordance with our ISO 27001 security framework.

15. Children's Privacy & Cookies

We do not knowingly use cookies to collect personal information from children under 16 without parental consent. If we become aware of such collection, we will take immediate steps to delete the information and obtain proper consent.

16. Policy Updates & Notification

We may update this policy to reflect: Legal changes, New cookie technologies, Service provider changes, or Improved practices. Material changes will be communicated through: Website notifications, Email communications, and Updated consent requests.

17. Contact Information & Complaints

For cookie-related inquiries: Email: privacy@datalake.sa, DPO: dpo@datalake.sa, Technical: tech@datalake.sa. You may lodge complaints with: Saudi Data Protection Authority, European Data Protection Authorities, or other relevant supervisory authorities.

Cookie Types

Essential Cookies

These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms.

Examples: Authentication, security, load balancing, session management

Retention: Session to 1 year

Consent: Not required (legitimate interest)

Performance Cookies

Currently not implemented. If implemented in the future, these cookies would allow us to count visits and traffic sources so we can measure and improve the performance of our site.

Examples: Not currently used

Retention: Not applicable

Consent: Not applicable

Functional Cookies

These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to our pages.

Examples: Language preferences, UI customization, form data

Retention: Up to 2 years

Consent: Required (opt-in)

Marketing Cookies

Currently not implemented. If implemented in the future, these cookies may be set through our site by our advertising partners for targeted advertising.

Examples: Not currently used

Retention: Not applicable

Consent: Not applicable

Back to Home
Policy Document - Legal Review Required