1. Introduction

2. Scope of Application

This Privacy Policy applies to Personal Data processed by NUI in relation to:

• - Visitors and users of our website;
• - Business partners, vendors, contractors, and suppliers;
• - Clients and prospective clients;
• - Individuals communicating with NUI;
• - Job applicants and candidates (where applicable);
• - Any other individuals whose Personal Data is processed in the course of NUI’s business operations.

3. Definitions

4. Personal Data We Collect

We may collect and process the following categories of Personal Data:

4.1 Personal Data Provided Directly by You

• - Full name
• - Email address
• - Phone number
• - Job title and company name
• - Any other information you voluntarily provide through forms, emails, or communications

4.2 Personal Data Collected Automatically

When you use our website, we may automatically collect:

• - IP address
• - Browser type and version
• - Device and operating system information
• - Date and time of access
• - Pages visited and interaction data
• - Referring URLs and technical identifiers

5. Purposes of Processing

We process Personal Data for legitimate and lawful purposes, including:

• - Responding to inquiries and communications;
• - Providing requested information or services;
• - Managing business relationships and contractual obligations;
• - Improving website functionality and user experience;
• - Ensuring information security and preventing fraud or misuse;
• - Complying with applicable legal and regulatory obligations;
• - Any other purpose permitted under the PDPL.

Personal Data shall not be processed in a manner inconsistent with these purposes unless permitted by law or with your explicit consent.

6. Legal Basis for Processing

We process Personal Data in accordance with the PDPL based on one or more of the following legal bases:

• - Your consent;
• - Performance of a contractual obligation to which you are a party;
• - Compliance with a legal obligation;
• - Protection of vital interests;
• - Legitimate interests pursued by NUI, provided such interests do not override your rights and interests.

7. Sensitive Personal Data

NUI does not intentionally collect or process Sensitive Personal Data as defined under the PDPL unless:

• - Required by applicable law; or
• - Explicit consent is obtained from the data subject; and
• - Appropriate safeguards are implemented in accordance with PDPL requirements.

8. Disclosure and Sharing of Personal Data

We may disclose Personal Data only where necessary and in the following circumstances:

• - To authorized service providers and processors acting on our behalf, subject to contractual confidentiality and data protection obligations;
• - To governmental or regulatory authorities where required by applicable laws or regulations;
• - To third parties where you have provided explicit consent;
• - As otherwise permitted or required under the PDPL.

All third parties are required to implement appropriate technical and organizational measures to protect Personal Data.

9. Cross-Border Transfers of Personal Data

Personal Data is stored and processed within the Kingdom of Saudi Arabia, unless a cross-border transfer is permitted in accordance with the PDPL.

Where Personal Data is transferred outside the Kingdom:

• - An adequate level of data protection must be ensured in the receiving jurisdiction; and
• - Necessary approvals or other competent authorities shall be obtained where required; and
• - Appropriate safeguards shall be implemented.

10. Data Retention

We retain Personal Data only for as long as necessary to:

• - Fulfill the purposes for which it was collected;
• - Comply with applicable legal, regulatory, or contractual requirements.

Retention periods are determined based on:

• - The nature of the Personal Data;
• - The purpose of processing;
• - Applicable legal obligations.

Upon expiration of the applicable retention period, Personal Data is securely deleted, anonymized, or destroyed in accordance with applicable laws and best practices.

11. Data Security

NUI implements appropriate technical and organizational measures to protect Personal Data against:

• - Unauthorized or unlawful access;
• - Loss, misuse, alteration, or destruction;
• - Unauthorized disclosure.

These measures include access controls, security monitoring, and internal data protection policies. However, no method of electronic transmission or storage is completely secure.

12. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to:

• - Enhance website functionality;
• - Analyze website traffic and usage;
• - Improve user experience.

Where required by law, we obtain your consent before using non-essential cookies. You may manage or disable cookies through your browser settings, noting that certain features of the website may be affected.

13. Data Subject Rights

In accordance with the PDPL, you have the right to:

• - Be informed about the collection and processing of your Personal Data;
• - Access your Personal Data;
• - Request correction or updating of inaccurate or incomplete Personal Data;
• - Request deletion or destruction of Personal Data when it is no longer necessary;
• - Withdraw consent at any time, without affecting prior lawful processing.

Requests may be subject to identity verification and applicable legal limitations. We will respond to verified requests within the timeframes prescribed under the PDPL.

If you are not satisfied with our response, you have the right to lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA).

14. Personal Data Breach Notification

In the event of a Personal Data breach that may affect your rights or interests, NUI will take appropriate remedial actions and notify SDAIA and affected individuals in accordance with PDPL requirements.

15. Personal Data Controller & Contact Details

Data Controller:
Nesma United Industries

Personal Data Protection Officer (PDPO):
Email: CyberSecNui@nesma.com
(Subject: Personal Data Protection – Inquiry / Request / Complaint)
Phone: +966 13 829 8234

16. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, regulatory, or operational changes. Updated versions will be published on our website with the revised effective date.