Privacy & Data Governance Policy

Palm Hills Gulf Company Limited ("the Company", "we", "us", or "our") is dedicated to safeguarding the privacy and security of your personal and corporate information. This Privacy Policy applies to all visitors, clients, partners, and subcontractors interacting with our website and digital services across the Kingdom of Saudi Arabia and Egypt. This policy complies with the Saudi Personal Data Protection Law (PDPL) and applicable regulatory standards.

We collect information necessary to provide and manage our engineering, contracting, and development services: • Identity & Contact Information: Full name, job title, company name, corporate email address, and contact telephone number. • Project & Tender Inquiries: Project specifications, preliminary engineering drawings, geographical location, and bill of quantities submitted via our inquiry forms. • Technical & Usage Data: IP address, browser type, pages visited, and session duration gathered to ensure website performance, security, and optimization.

We process your data strictly for legitimate business and engineering operations: • Responding to technical inquiries, preparing formal tenders, and issuing engineering project proposals. • Executing and administering construction and infrastructure contracts in adherence to the Saudi Building Code (SBC). • Coordinating with approved engineering consultants, project owners, and suppliers for seamless site delivery. • Complying with regulatory obligations under Saudi Arabian and Egyptian law. • Enhancing user experience, optimizing site reliability, and preventing fraudulent or unauthorized access.

We implement robust technical and organizational security protocols to protect your personal and commercial data against unauthorized access, loss, alteration, or disclosure. This includes end-to-end SSL/TLS encryption, restricted access control limited to authorized personnel, and hosting on enterprise-grade secure infrastructure subject to routine security audits.

We do not sell, rent, or trade your personal or corporate information. Disclosures may occur only in the following specific circumstances: • Government, municipal, and regulatory authorities when legally mandated under Saudi or Egyptian statutory law. • Trusted engineering partners, cloud hosting providers, and logistical contractors bound by strict data confidentiality agreements.

Under the Saudi Personal Data Protection Law (PDPL) and international privacy frameworks, you retain the following rights: • Right to Information: Knowledge of the legal basis and explicit purpose of data collection. • Right of Access: Requesting a copy of your personal data processed by our systems. • Right to Rectification: Requesting correction or updating of incomplete or inaccurate records. • Right to Destruction: Requesting deletion of data when the primary business purpose concludes, subject to statutory retention mandates.