This policy explains how personal data is collected, used, and protected when visiting the company's website or communicating with it electronically. Additional notices or agreements may apply to project data and professional engagements.
1. Data We May Collect
- Identification and contact data such as name, phone number, email address, job title, and organization name.
- Service-request information, messages, and attachments voluntarily submitted by the user.
- Limited technical data required for website operation and security, such as browser type and error logs where enabled by the hosting provider.
- Cookie preferences and essential local storage.
2. Purposes of Processing
- Respond to inquiries and service requests and prepare initial communications.
- Manage the professional relationship and perform pre-engagement steps or agreed obligations.
- Improve website performance, protect systems, and prevent misuse.
- Meet applicable regulatory and professional requirements and retain records where required.
3. Legal Basis for Processing
Data is processed according to the nature of the case, including the data subject's consent, taking steps at their request before contracting, performing a contract, complying with a legal obligation, or pursuing a legitimate interest that does not conflict with their rights, in accordance with applicable laws.
5. Retention Period
Data is retained for as long as necessary to fulfill the purpose for which it was collected, for the duration of the professional relationship, or for applicable regulatory and professional retention periods. It is then deleted, destroyed, or anonymized when there is no longer a purpose or legal basis for retention. Contact requests submitted through the form are retained on the website server as an operational backup until they are processed, with access restricted.
6. Data Subject Rights
Subject to applicable legal conditions and controls, a data subject may request information about their data, access it and obtain a copy, correct, complete, or update it, and request its destruction where applicable. Exceptions may apply due to professional or legal obligations.
7. Protection & Security
Appropriate organizational and technical measures are applied according to the nature of the data and risks, including access restrictions, suitable transfer and storage methods, and permission reviews. However, no electronic method can be guaranteed to be entirely risk-free.
8. Transfer of Data Outside the Kingdom
Personal data is not intentionally transferred outside the Kingdom unless necessary and in compliance with applicable requirements governing data transfers, with appropriate safeguards implemented.
9. Contact & Requests
Privacy requests can be sent to info@almasartp.com or contact us at +966561430725. We may request information to verify the identity of the requester before responding.