Privacy Policy

This policy explains the personal data that Shams Dubai Contracting Est. collects through its website, why we use it, how long we keep it, the rights of data subjects and how to exercise them.

1. Data Controller

Shams Dubai Contracting Est., Commercial Registration No. 1011020504. Address: Al Kharj, Building 2861, Postal Code 16439, Additional Number 7948. Email: info@sdce.sa.

2. Data We Collect

• Contact form: name, email address, phone number (optional), message, site language, and a record of your consent (the consent flag, the time of consent and the version of this policy you agreed to).
• Careers form: name, email address, phone number (optional), position applied for (optional), summary (optional), CV file (PDF or DOCX), and a record of your consent (the consent flag, the time of consent and the version of this policy you agreed to).
• Technical records: a salted hash of your IP address (not reversible), which is used to prevent abuse and limit request rates; the request time and type.

3. Purposes

• To respond to contact requests.
• To review job applications and communicate with applicants about them.
• To protect the website and prevent abuse and unlawful automated requests.
• To comply with legal requirements.

4. Legal Basis

We process data submitted through the website forms on the basis of your explicit consent, given when you submit the form. Security records are processed on the basis of our legitimate interest in protecting the website and of cybersecurity requirements.

5. Retention Periods

• Contact messages: 12 months after the last communication about them.
• Job applications and CVs: 6 months after the position closes, unless deletion is requested earlier.
• The consent record (the consent flag, the time of consent and the policy version) is kept with the request and deleted with it.
• Application logs: 30 days. Web server access logs: according to the hosting provider's policy.

6. Recipients and Service Providers

Data is available only to authorised people within the Establishment, according to their role. We use service providers to host the website and to send notification emails. They process data on our behalf and only for the purposes above. We do not sell personal data.

7. Storage and Transfer Outside the Kingdom

The website is hosted on servers located outside the Kingdom of Saudi Arabia, operated by our hosting provider. We require appropriate safeguards from the provider and restrict access to the data to what is needed.

8. Your Rights

• To access your personal data.
• To have your data corrected.
• To request deletion of your data when there is no legal obligation to keep it.
• To withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, write to info@sdce.sa and attach information that confirms your identity. We may ask for further information to verify your identity before acting on a request.

9. Security

The site uses an encrypted connection (HTTPS). Access to the administration panel is restricted. CVs are stored where they are not publicly accessible.

10. Cookies

The public website does not use marketing or tracking cookies.

11. Updates to This Policy

We may update this policy. The updated version is published on this page with its date of last update.