Privacy Policy
Introduction
third node — operated by Plain Form Holding LLC Commercial Registration: 7051103666 Riyadh, Kingdom of Saudi Arabia Contact: studio@third-node.com
Last updated: April 2026
This policy explains how we handle personal data submitted through this website. It applies to data collected via the contact form only. We do not process payments, run accounts, or collect data through any other means on this site.
Who we are
The data controller is Plain Form Holding LLC, trading as third node, registered in the Kingdom of Saudi Arabia (CR 7051103666), based in Riyadh.
For data-related inquiries, contact us at: studio@third-node.com
What we collect and why
When you submit the contact form, we collect your name, email address, and the content of your message.
We collect this data for one purpose only: to respond to your inquiry. We do not use it for marketing, profiling, or any other purpose without your separate consent.
The legal basis for processing is your consent, given at the point of form submission.
Providing this information is voluntary. If you choose not to submit the form, you can reach us directly by email.
How long we keep your data
We retain contact form submissions for as long as is reasonably necessary to respond to and follow up on your inquiry, and no longer than three years from the date of submission unless an ongoing business relationship requires otherwise.
Who may recieve your data
Your data is not sold or shared with third parties for commercial purposes. It may be processed by the following categories of service provider operating on our behalf:
Email and communication service providers
Website hosting and infrastructure providers
Where these providers are based outside the Kingdom of Saudi Arabia, we ensure appropriate safeguards are in place in accordance with the Personal Data Protection Law and its Transfer Regulations.
Cross-border transfers
Our website and communication infrastructure may involve servers or services located outside Saudi Arabia. Where personal data is transferred internationally, we apply contractual safeguards consistent with the requirements of the PDPL Transfer Regulations issued by SDAIA.
Your rights
Under the Personal Data Protection Law (Royal Decree No. M/19, as amended), you have the following rights regarding your personal data:
Access — You may request a copy of the personal data we hold about you.
Correction — You may request that we correct inaccurate or incomplete data.
Deletion — You may request that we delete your data when it is no longer needed for the purpose it was collected.
Restriction — You may request that we limit processing while a correction request is pending.
Portability — You may request your data in a readable, structured format.
Objection — You may object to processing at any time.
Withdrawal of consent — You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Complaint — You have the right to file a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA) at sdaia.gov.sa.
Compensation — You may seek compensation through Saudi civil courts for material or moral damages resulting from a violation of the PDPL.
To exercise any of these rights, contact us at hello@third-node.com. We will respond within 30 days.
Data security
We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or disclosure. No method of transmission over the internet is entirely secure; we cannot guarantee absolute security.
Breach notifaction
In the event of a data breach that poses potential harm, we will notify SDAIA within 72 hours and inform affected individuals without undue delay, in accordance with our legal obligations.
Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of this website after an update constitutes acceptance of the revised policy.
Governing law
This policy is governed by the laws of the Kingdom of Saudi Arabia, including the Personal Data Protection Law and its Implementing Regulations.