Privacy Policy
How STEP handles inquiries, optional analytics, cookie choices, 730-day inquiry retention and privacy requests. Manage your preferences anytime.
Last updated: · Version 1.0
STEP Events Management is the operating brand of مؤسسة خطوة تشغيل للمعارض و المؤتمرات. You can contact us at info@stepexhibitions.net, +966 50 533 2365, or https://stepexhibitions.net.
Our public operating office is at Imad Al-Deen Al-Katib Street, Al-Nahda District, Riyadh, Saudi Arabia. This office location is distinct from the entity’s registered National Address.
Inquiry forms collect your full name, company, email, telephone, requested service, project type, and message. Depending on the form and what you provide, we also collect the target/event date, city, estimated budget, venue status, design/execution requirement, audience type, and preferred contact method. We record the form language, form source, source page, and submission time. Please avoid including sensitive personal information that is unnecessary for your inquiry.
We use inquiry information to respond, understand project requirements, assess requested services, prepare follow-up communication, arrange commercial discussions, and maintain appropriate business records. The contact endpoint also uses limited technical information to protect the form from abuse. Submitting an inquiry does not subscribe you to a marketing mailing list.
We use optional Google Analytics to understand website performance. The analytics script does not load until you explicitly enable analytics. The application excludes common direct-identification fields such as name, email, telephone, company, and message text from event properties and removes URL query strings and fragments from application tracking. You can withdraw permission at any time through Cookie Settings; this stops future application analytics without reloading your page. Withdrawal does not erase information previously sent to Google.
Necessary technologies support core website functions and security. We store your choice in your browser’s local storage under step_privacy_consent_v1; the preference contains no inquiry information. If browser storage is unavailable, your choice applies to the current page session. Optional Google Analytics may set first-party analytics cookies after acceptance. Cookie Settings lets you change your choice and withdraw analytics permission; we then remove accessible first-party GA cookies. This implementation does not introduce advertising cookies.
The website uses HTTPS, server-side validation, prepared database statements, a spam honeypot, and submission rate limiting. IP addresses are processed temporarily for rate limiting, separately from permanent inquiry records, with a 24-hour application cleanup window. User-agent details are not stored with permanent inquiries. Hosting providers may separately process request/security logs under their operational settings; these are distinct from the inquiry database.
Service providers support website hosting, PHP/database infrastructure, business email, and optional analytics. Inquiry details may be copied into STEP’s configured business mailbox so our team can respond. A privacy request may therefore require review of both database records and email copies. STEP maintains an internal service-provider register; provider regions and contractual terms depend on the actual accounts and agreements.
Website inquiry records are normally retained for up to 730 days (approximately 24 months). Records may be held longer for an active project, contractual relationship, legal obligation, dispute, or another documented legitimate business requirement. Expired database inquiries are eligible for deletion under this policy; email copies and backups require separate operational handling. Temporary rate-limit records have a separate 24-hour cleanup window.
Contact info@stepexhibitions.net to request access, correction, or deletion where applicable. We may reasonably verify your identity before disclosing or changing inquiry information, and assess any obligations requiring continued retention. To withdraw optional website analytics, use Cookie Settings. An inquiry can still be submitted when optional analytics is disabled.
We may update this policy when website features or relevant practices change. The last-updated date and policy version below identify the current notice.