The DTV (Digital Technology Ventures) Portal is operated by DTV Ventures ("we", "us", "our"). We are the data controller responsible for personal data processed through this portal in accordance with the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations.
DTV Ventures has designated a Data Protection Officer (DPO) as required by the Saudi PDPL (Art. 30) and its Implementing Regulations. The DPO oversees data protection compliance, monitors processing activities, and is the primary point of contact for data subjects and the Saudi Data & AI Authority (SDAIA).
DPO contact: privacy@dtv.sa
Response commitment: We acknowledge every privacy / DSR enquiry within 2 business days and respond substantively within 10 business days, in line with the PDPL statutory window (Art. 18–23).
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full name, national ID number | Provided by you |
| Contact Data | Email address, phone/WhatsApp number | Provided by you |
| Business Data | Company name, CR number, business sector, pitch materials | Provided by you |
| Application Data | Programme application responses, documents, files | Provided by you |
| Technical Data | IP address, browser type, session tokens, login timestamps | Automatically collected |
| Communication Data | Messages, OTP delivery logs | Automatically generated |
| Data Type | Retention Period |
|---|---|
| Application records | 7 years from programme end |
| Session tokens | 24 hours (admin) / 7 days (portal) |
| Audit logs | 5 years (NCA ECC 3-4-1 requirement) |
| OTP codes | 10 minutes from issue, then purged |
| Consent records | 7 years from consent date |
| Uploaded documents | Duration of programme + 3 years |
As a data subject, you have the following rights under the Saudi Personal Data Protection Law:
To exercise any of these rights, submit a secure request via the Data Subject Request portal (email verification included), or contact: privacy@dtv.sa. We will respond within 10 business days.
We implement technical and organisational measures in compliance with NCA ECC-1:2018 and ISO 27001:2022, including:
We do not sell your personal data. We may share data with:
DTV Ventures safeguards personal data with encryption at rest (AES-256-GCM for sensitive fields) and in transit (TLS 1.3 + HSTS), consent and data-subject-rights controls, and a 72-hour breach-notification capability.
Storage location (current): The live platform is operated on Cloudflare's globally distributed edge, under Cloudflare's DPA. In parallel, a complete, nightly-refreshed copy of the production database is maintained on a dedicated server located in Riyadh, Saudi Arabia, with verified parity of application records. DTV Ventures is executing a phased migration to move primary data residency fully in-Kingdom.
Where service providers operate outside the Kingdom, all cross-border transfers comply with PDPL Chapter 6 and are subject to adequate data protection guarantees or contractual safeguards.
This portal uses strictly necessary session cookies (dtv_portal_token) for authentication. No advertising or analytics cookies are set. Session cookies expire automatically after 7 days of inactivity.
For privacy enquiries, or to reach our Data Protection Officer: privacy@dtv.sa
To exercise a data subject right, use the Data Subject Request portal (email-verified).
To file a complaint with the Saudi Data & AI Authority (SDAIA): sdaia.gov.sa