Privacy Policy
Thobal Trading & Contracting is committed to protecting the privacy and security of personal and project information collected across our Saudi Arabia operations.
1. Information We Collect
Thobal Trading & Contracting collects information necessary to evaluate tender requests, deliver civil contracting services, and maintain executive communication with commercial and industrial partners across Saudi Arabia.
The types of information collected include:
- Contact & Identity Data: Full name, job title, corporate email address, phone number, and company name.
- Project & Engineering Data: Site location details, architectural drawings, BOQ documents, and RFQ specifications submitted through quote forms.
- Technical Telemetry: IP address, browser type, device identifiers, and session timestamps used strictly for cybersecurity and performance optimization.
2. Purpose of Data Processing
We process collected information in full compliance with the Kingdom of Saudi Arabia Personal Data Protection Law (PDPL) for legitimate business operations, including:
- Preparing technical proposals, cost estimations, and structural feasibility reviews.
- Communicating project milestones, tender updates, and procurement schedules.
- Enforcing Health, Safety, and Environment (HSE) site compliance and ISO 9001/45001 auditing.
- Protecting corporate infrastructure from unauthorized access, fraud, or cyber threats.
3. Information Sharing & Third-Party Transfers
Thobal Trading & Contracting enforces a strict policy against selling, renting, or monetizing client data. We only share information under the following limited circumstances:
- Authorized Subcontractors & Consultants: Sharing relevant site specifications with vetted engineering partners strictly required for project delivery.
- Regulatory & Government Authorities: Disclosing records as required by Saudi Arabian laws, ministry mandates, or court orders.
- Corporate Safety Compliance: Providing site personnel credentials to municipal and regulatory safety inspectors as required by site permits.
4. Data Security & Storage Architecture
We implement multi-layered technical, organizational, and physical safeguards to prevent loss, misuse, or unauthorized modification of project and corporate data:
- Encrypted Server Storage: Data is stored in secure KSA-compliant data centers utilizing AES 256-bit encryption.
- Role-Based Access Control: Strict authorization levels ensure only designated PMO and engineering personnel can access client records.
- Regular Security Audits: Systems undergo routine vulnerability testing and compliance reviews.
5. Data Retention & User Rights
We retain client data only for as long as necessary to fulfill contractual obligations and meet Saudi statutory record-keeping requirements.
Under KSA PDPL regulations, you hold the right to:
- Request confirmation and access to personal data held by Thobal.
- Request correction, updating, or completion of inaccurate records.
- Request destruction of data once contractual and legal retention obligations expire.