PDPL Saudi ArabiaUAE Federal LawGDPRDPDP India

GDPR, PDPL & Data Protection

This page explains Noble Solutions' compliance with major data protection regulations including the EU General Data Protection Regulation (GDPR), Saudi Personal Data Protection Law (PDPL), UAE Federal Decree-Law No. 45 of 2021, and India's Digital Personal Data Protection Act 2023 (DPDP Act).

Last Updated: 1 June 2026

Effective Date: 1 June 2026

Noble Solutions Trading Establishment — Al Oraifi Industrial Area 35526, Jubail Industrial City, Kingdom of Saudi Arabia. Commercial Registration: Jubail Industrial City, KSA. Contact: info@noblesolutionsa.com | +966 50 290 2829

01Saudi PDPL Compliance

Noble Solutions complies with the Saudi Personal Data Protection Law (PDPL) issued by Royal Decree No. M/19 and supervised by the Saudi Data and AI Authority (SDAIA). Our commitments include:

Processing personal data only for specified, explicit, and legitimate purposes
Obtaining consent where required before processing sensitive personal data
Maintaining records of processing activities
Implementing appropriate technical and organisational security measures
Honouring data subject rights including access, correction, and deletion
Notifying SDAIA and affected individuals of data breaches within required timeframes

02UAE Data Protection Compliance

For data subjects in the UAE, Noble Solutions complies with Federal Decree-Law No. 45 of 2021 on Personal Data Protection and applicable free zone regulations (DIFC Data Protection Law 2020, ADGM Data Protection Regulations 2021). We:

Process UAE resident data lawfully with valid legal bases
Ensure cross-border data transfers meet adequacy or safeguard requirements
Respond to UAE data subject requests within legally required timeframes
Register with the UAE Data Office where required

03GDPR Compliance (EU/EEA Data Subjects)

Where Noble Solutions processes personal data of individuals in the EU or EEA, we comply with the General Data Protection Regulation (GDPR). This includes:

Valid legal basis for all processing activities (Article 6 GDPR)
Data subject rights: access, rectification, erasure, restriction, portability, objection
Standard Contractual Clauses (SCCs) for international data transfers
Data Processing Agreements (DPAs) with all sub-processors
72-hour breach notification to supervisory authorities
Privacy by design and default in all systems

EU data subjects may lodge complaints with their national supervisory authority or the relevant lead supervisory authority.

04India DPDP Act 2023 Compliance

For data principals (individuals) in India, Noble Solutions complies with the Digital Personal Data Protection Act 2023. Our obligations include:

Processing digital personal data with consent or other valid legal basis
Providing clear notice about data processing purposes
Honouring rights to access information, correction, erasure, and grievance redressal
Maintaining data accuracy and implementing security safeguards
Notifying the Data Protection Board and affected individuals of data breaches
Complying with cross-border data transfer restrictions as notified by the Central Government

05Data Processing Agreement

Enterprise clients who share personal data with Noble Solutions as part of service delivery can request a Data Processing Agreement (DPA). This agreement defines the roles of data controller and data processor, processing purposes, security obligations, sub-processor arrangements, and data subject rights mechanisms. Contact us at info@noblesolutionsa.com to request a DPA.

06Cross-Border Data Transfers

Noble Solutions may transfer personal data internationally as part of service delivery (e.g., cloud infrastructure in AWS/Azure/GCP). All cross-border transfers are conducted with appropriate safeguards: Standard Contractual Clauses (GDPR), adequacy decisions where available, contractual protections under PDPL and UAE law, and compliance with DPDP Act transfer restrictions. We will not transfer data to jurisdictions without adequate protections without explicit client consent and appropriate legal mechanisms.

07Your Rights & How to Exercise Them

To exercise your data protection rights, submit a request to:

Email: info@noblesolutionsa.com

Subject line: "Data Subject Request — [Your Right]"

Address: Noble Solutions Trading Establishment, Al Oraifi Industrial Area 35526, Jubail Industrial City, KSA

We will verify your identity before processing your request and respond within the timeframe required by applicable law (30 days under PDPL/GDPR, as applicable under DPDP Act). We will not charge a fee for reasonable requests.

This document was prepared in compliance with applicable data protection and privacy laws including the Saudi PDPL (Personal Data Protection Law), UAE Federal Decree-Law No. 45 of 2021, EU General Data Protection Regulation (GDPR), and India's Digital Personal Data Protection Act 2023 (DPDP Act). For questions regarding this document, contact info@noblesolutionsa.com.