Privacy Policy

Introduction

Mabanina Contracting ("the Company", "we") respects the privacy of website visitors and clients. This policy explains how we collect, use, and protect personal data in accordance with the Saudi Personal Data Protection Law (PDPL) issued by Royal Decree No. (M/19) and its amendments.

Data we collect

We collect only data you voluntarily provide through:

• Contact form: full name, company name (optional), email, phone number, contact reason, and message body.
• Career applications: CVs are received directly via the email address listed on the careers page.
• Technical data: indirectly via server logs (IP address, browser metadata) for security and abuse prevention.
• Aggregate visit statistics: aggregate figures about site usage (visit counts, most-viewed pages, device type, country, referrer) via Umami, which we host on our own servers. It sets no cookies and collects no data that identifies you.

We do not collect sensitive data (health, religious, or financial information) through this website.

And we collect no data about you through cookies. This site sets no analytics cookie, no advertising cookie, and no cross-site tracking cookie — neither ours nor any third party's. Details in the "Cookies" section below.

Purposes of use

We use your data only for:

• Responding to inquiries and quote requests within a reasonable timeframe.
• Reviewing job applications and contacting qualifying candidates.
• Improving our services and website content and measuring its performance in aggregate.
• Complying with legal and regulatory requirements in the Kingdom.

We will not use your data for any other purpose without your explicit consent.

Legal basis for processing

We rely on the following legal grounds:

1. Consent: when you voluntarily submit forms.
2. Contractual necessity: when delivering services or responding to consultation requests.
3. Legitimate interest: site security, and aggregate performance measurement that contains no personal data.
4. Legal obligation: when requested by competent authorities under Saudi law.

Data sharing

We do not sell or trade your data. We may share limited information with:

• Trusted service providers: Cloudflare (site security and contact-form protection) and email providers — all under confidentiality agreements.
• Government authorities: upon official request under Saudi regulations.
• Legal advisers: where necessary to protect our legal rights.

We share no analytics data with any third party — the measurement tool we use (Umami) is hosted on our own servers and its data never leaves them.

Your browser contacts no third party while you browse this site. Even the office location map on the Contact page is a static image we host ourselves, generated from OpenStreetMap data.

Retention period

Contact-form data is retained for a maximum of two years from the last contact, after which it is securely deleted or anonymized. CVs are kept for one year unless the applicant requests otherwise. Aggregate visit statistics remain on our servers and are not linked to any individual in the first place.

Data security

We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, or damage — including encryption in transit (HTTPS), access restricted to authorized staff, and periodic security reviews.

Your rights

Under the PDPL you have the right to:

• Access the data we hold about you.
• Correct or update inaccurate data.
• Delete data when no longer needed.
• Object to processing or withdraw consent.
• Lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA).

Cookies

We collect no data about you through cookies. This site uses no analytics cookies, no advertising cookies, and no cross-site tracking cookies, and we share no cookie with any advertising company.

The only cookie this site sets is mb_lang, which remembers your Arabic/English choice. Cloudflare Turnstile may add a short-lived technical file when you use the contact form, to block automated submissions. Both are strictly necessary to operate the site, and neither is used to identify you or track your behaviour.

Visit measurement is done with Umami, hosted on our own servers, which sets no cookies at all and collects no data that identifies you.

See our Cookie Policy for details.

Updates

We may update this policy from time to time. Material changes will be announced here, with the "Last updated" date refreshed.

Contact

To exercise your rights or inquire about your data privacy, contact us at: [email protected].