Privacy Policy

Introduction

Mabanina Contracting ("the Company", "we") respects the privacy of website visitors and clients. This policy explains how we collect, use, and protect personal data in accordance with the Saudi Personal Data Protection Law (PDPL) issued by Royal Decree No. (M/19) and its amendments.

Data we collect

We collect only data you voluntarily provide through:

• Contact form: full name, company name (optional), email, phone number, contact reason, and message body.
• Career applications: CVs are received directly via the email address listed on the careers page.
• Technical data: indirectly via server logs (IP address, browser metadata) for security and abuse prevention.
• Aggregate analytics (optional): if you consent to the performance analytics category in the cookie banner, we collect aggregate browsing data via Google Analytics 4 (with IP anonymization).

We do not collect sensitive data (health, religious, or financial information) through this website.

Purposes of use

We use your data only for:

• Responding to inquiries and quote requests within a reasonable timeframe.
• Reviewing job applications and contacting qualifying candidates.
• Improving our services and website content and measuring its performance in aggregate.
• Complying with legal and regulatory requirements in the Kingdom.

We will not use your data for any other purpose without your explicit consent.

Legal basis for processing

We rely on the following legal grounds:

1. Consent: when you voluntarily submit forms, or when you accept the analytics category in the cookie banner.
2. Contractual necessity: when delivering services or responding to consultation requests.
3. Legitimate interest: site security and service improvement.
4. Legal obligation: when requested by competent authorities under Saudi law.

Data sharing

We do not sell or trade your data. We may share limited information with:

• Trusted service providers: Cloudflare (site security), Google LLC (performance analytics via Google Analytics 4, when you consent), and email providers — all under confidentiality agreements.
• Government authorities: upon official request under Saudi regulations.
• Legal advisers: where necessary to protect our legal rights.

Google Analytics data may be processed on Google servers outside the Kingdom under approved safeguards (Standard Contractual Clauses) and as permitted under the PDPL.

Retention period

Contact-form data is retained for a maximum of two years from the last contact, after which it is securely deleted or anonymized. CVs are kept for one year unless the applicant requests otherwise. Google Analytics data is retained by Google according to our settings (default: 2 years).

Data security

We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, or damage — including encryption in transit (HTTPS), access restricted to authorized staff, and periodic security reviews.

Your rights

Under the PDPL you have the right to:

• Access the data we hold about you.
• Correct or update inaccurate data.
• Delete data when no longer needed.
• Object to processing or withdraw consent (including withdrawing analytics consent at any time).
• Lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA).

Cookies

This site uses cookies strictly necessary for security services (Cloudflare Turnstile), plus analytics cookies (Google Analytics 4) when you consent. See our Cookie Policy for details.

Updates

We may update this policy from time to time. Material changes will be announced here, with the "Last updated" date refreshed.

Contact

To exercise your rights or inquire about your data privacy, contact us at: [email protected].