At Saudi Elan, we are committed to protecting the privacy and security of our clients’ personal data. We recognize the importance of safeguarding information to prevent any harm to consumers in the future. We understand the concerns of our customers regarding data privacy and take every measure to ensure that information is collected and handled responsibly. In the event of any data breach, we will act promptly to address and mitigate any impact, and we strive to always maintain the highest standards of data protection.

Who We Are?

Saudi Elan (“Company,” “we,” or “us”) operates this website and provides comprehensive commercial kitchen and laundry solutions, including SPECIFI-led design, supply, installation, training, and 24/7 maintenance services to restaurants, hotels, hospitals, and camps within Saudi Arabia.

1.Scope

This policy applies to all personal data collected by Saudi Elan in connection with our business operations. This includes data gathered through our website interactions, newsletter subscriptions, telephone and WhatsApp communications, email exchanges, attendance at professional events, and any service or maintenance applications provided. The policy governs use, storage, and protection of such data, ensuring compliance with applicable Saudi data protection laws.

2.Data We Collect

We collect and process various categories of personal data, including:

• Identity and Contact Details: Full name, job title, company affiliation, email address, and telephone number, to identify and communicate with you.
• Business and Contract Information: Data related to inquiries, quotations, purchase orders, and service or maintenance logs necessary to fulfil contractual obligations and customer service.
• Technical Data: Internet Protocol (IP) addresses, device and browser specifications, cookies, and similar tracking technologies to manage site security, performance, and visitor analytics.
• Vendor and Candidate Data: Payment information, resumes, and professional references required to manage business relationships or recruitment processes.

We do not knowingly collect personal data from children under the legal age as defined by Saudi law.

3.Purpose of Data Processing

Your personal data is processed only for legitimate and explicit purposes:

• To respond effectively to your service requests, prepare quotations, execute and fulfil contracts, and provide ongoing after-sales support.
• To coordinate and dispatch 24/7 maintenance services and manage inventory and logistics of replacement parts.
• To operate, maintain, and enhance the functionality and user experience of our website, conduct usage analytics, and measure campaign success.
• To send professional marketing communications relevant to our services, allowing you to opt out anytime.
• To comply with legal obligations, prevent fraudulent activities, and ensure the security of our systems and data.

4.Legal Bases under PDPL

Our data processing activities comply with the PDPL, relying on:

• Consent: When required, which you may withdraw anytime without affecting the legality of prior processing.
• Contractual Necessity: Processing required to perform or negotiate contracts you enter into with us.
• Legal Obligations and Legitimate Interests: We process data to meet statutory requirements or pursue business interests balanced against your rights, excluding sensitive or special categories of data unless stricter rules apply.

5.Cookies and Analytics

We deploy cookies and similar tracking technologies to ensure secure site operation, personalize services, and gather insights on website usage. These technologies may include those provided by third parties like Google Analytics. You may control cookie preferences directly through your web browser settings or via our cookie preference banner.

6.Data Sources

We primarily collect data directly from you or your organization. We may also obtain personal data from third-party service providers involved in hosting, analytics, or payments, as well as from publicly available professional sources such as event attendee lists or industry directories.

7.Data Sharing

We do not sell personal data. Disclosure occurs only with trusted third-party service providers bound by data protection agreements to assist with hosting, email communications, analytic services, and field support. We may disclose data when legally required by authorities or as part of corporate transactions with appropriate confidentiality and due diligence measures.

8.International Data Transfers

Your data may be transferred and processed outside the Kingdom of Saudi Arabia, such as with cloud hosting and analytics providers based in other countries. We ensure that such transfers comply with KSA’s data transfer requirements through transfer impact assessments, adherence to safeguard mechanisms, and selecting countries upheld by KSA regulations.

9.Data Security and Retention

We implement comprehensive technical and organizational safeguards consistent with recognized data security standards to protect your data from unauthorized access, alteration, or destruction. Absolute security cannot be guaranteed due to inherent risks of digital environments. Data retention is limited strictly to the period necessary to fulfil stated purposes or comply with legal obligations. Afterwards, data is securely deleted or anonymized.

10.Your Rights under PDPL

Under the PDPL, you have the right to:

• Be informed about the processing of your personal data and obtain a copy of it.
• Request correction or deletion of inaccurate or unnecessary data.
• Withdraw consent and object to processing activities within legal boundaries

     We strive to respond to verified requests within 30 calendar days, which can be extended by an additional 30 days for complex or numerous inquiries.

11.Direct Marketing

We may send you professional marketing communications tailored to your business interests. You retain the right to opt out of such communications at any time by using the unsubscribe options provided.

12.Data Breaches and Notification

In case of a data breach that poses a risk to your rights or privacy, Saudi Elan will promptly notify the Saudi Data and Artificial Intelligence Authority (SDAIA) and affected individuals within the regulatory timeframe, generally within 72 hours of awareness, in compliance with PDPL breach notification requirements.

13.European Economic Area (EEA) and United Kingdom (UK) Visitors

If you access our services from the EEA or UK, GDPR apply. We process your personal data based on contractual necessity, consent, legitimate interests, or legal obligations. You may have additional rights, including data portability and objection to automated decision-making.

14.Changes to This Policy

We may update this privacy policy occasionally to reflect changes in practices or legal requirements. The updated policy will specify the effective date. Continued use of our services after such changes signifies acceptance of the revised terms.

15.Contact Us

For any questions, data access requests, or privacy concerns:

Email: info@saudielan.com

Phone: 013 895 2343

Postal Address: P.O. Box 3058, Al Khobar 31952

P.O. Box 4206, Jeddah 22234

P.O. Box 7153, Riyadh 12628-2082

This privacy policy is governed by the laws of the Kingdom of Saudi Arabia. Any disputes will be subject to the exclusive jurisdiction of Saudi courts.