Privacy Policy

---

Effective Date:    

1. Introduction

Altavireo (“we,” “our,” “us”) respects your privacy and is committed to protecting your personal data in accordance with the Saudi Personal Data Protection Law (PDPL), as enforced by SDAIA, as well as international frameworks such as the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

This Privacy Policy explains how we collect, use, store, and safeguard your information when you use our website https://altavireo.com or engage with our Investor Relations services.

2. Data We Collect

We may collect the following categories of personal data:

• Contact Information: name, email, phone number, company name, role/title.
• Usage Data: IP address, browser type, operating system, pages viewed, time      spent on site.
• Cookies and Tracking Technologies: necessary cookies, analytics cookies, and similar technologies (used only with user consent where required).
• Business Information: any reports, documents, or materials you share with us in connection with Investor Relations assessments and benchmarking.

3. Purpose of Processing

We use your personal data for the following purposes:

• To provide our Investor Relations (IR) assessments, benchmarking dashboards,      awards, and advisory services.
• To respond to inquiries and deliver customer support.
• To analyze usage trends and improve website functionality.
• To send updates, insights, and marketing communications (where consent has been given).
• To comply with applicable legal and regulatory obligations.

4. Sharing of Data

We do not sell your personal data. We may share it:

• With trusted third-party providers (e.g., hosting, analytics, communications  platforms).
• With regulators or authorities if required by Saudi law, GDPR, or other      applicable laws.
• During a business transaction (e.g., merger, acquisition) where safeguards are applied.

Any international data transfers outside Saudi Arabia or the EU will be safeguarded with Standard Contractual Clauses (SCCs) or equivalent protections.

5. Data Security

We implement technical, administrative, and organizational safeguards consistent with:

• Saudi National      Cybersecurity Authority (NCA) standards,
• GDPR data protection requirements.

While we use industry best practices, no system is 100% secure.

6. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this Policy or as required by Saudi or international law.

7. Your Rights

Depending on your jurisdiction (Saudi Arabia, EU, California, or otherwise), you have the right to:

• Access a copy of your personal data.
• Request correction, updating, or deletion.
• Withdraw consent for processing.
• Object to certain processing activities (e.g., marketing).
• File a complaint with SDAIA (Saudi Arabia), your local Data Protection      Authority (EU), or the California Attorney General (USA).

Requests should be submitted to at@altavireo.com.

8. Children’s Privacy

Our services are intended for business users and not for children under the age of 18. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, regulatory, or business changes. Updates will be posted on https://altavireo.com with a revised effective date.

10. Contact Us

If you have any questions, concerns, or requests regarding your personal data, please contact us:

at@altavireo.com
Altavireo, Riyadh, Kingdom of Saudi Arabia