Privacy policy

Who We Are

This policy applies to the website of Maskan Al Kayan Contracting Company and its request forms. The Company is the controller responsible for the personal data it collects through the website.

Our office address and contact details are available on the “Contact Us” page. Customer Service handles privacy enquiries and requests to exercise data protection rights through the contact channels published on that page.

Information We Collect

• **Quotation request form:** Your name and mobile number, and optionally your project type, city or location, required service, and notes.
• **Contact form:** Your name, preferred contact method and corresponding email address or mobile number, an optional subject, and your message.
• Each submission is stored with its date and time, a reference number, and a single-use random token to prevent duplicate submissions. Your IP address and browser information are not stored within the submission record.
• The website uses rate-limiting mechanisms to reduce automated or abusive submissions. Depending on the operating environment, these may involve technical counters or a one-way identifier derived from an IP address. This information is separate from the submission content.
• The hosting provider may process technical logs, such as IP addresses and connection times, to operate and secure its services.
• At the time this policy was prepared, the website’s pages do not set their own visitor cookies or include analytics or advertising tools.

Providing information is voluntary. However, fields marked as required are necessary to receive and respond to your request. We may be unable to provide this service if those fields are incomplete.

Why We Use Your Information

We use your information to:

• Receive and respond to quotation requests and enquiries.
• Contact you about your request and manage its follow-up through the website’s administration dashboard.
• Send offers, news, and marketing communications about our services where you have provided separate consent.
• Protect the website and prevent misuse of its forms.

We rely on your consent to process form submissions and respond to your request. Where processing is necessary to perform an agreement to which you are a party or to meet a legal obligation, we rely on the applicable legal basis.

Marketing consent is optional and does not affect how we receive your request or provide our services. You may withdraw it at any time using the unsubscribe option provided with marketing messages or by contacting Customer Service. We will stop sending marketing communications without unjustified delay.

Who Can Access Your Information

Requests are accessible only to authorised Company employees according to their work permissions. Access to request details is recorded in an activity log, and new-request notifications appear within the administration dashboard.

Operating the website may require hosting, database, and technical service providers to process information to the extent necessary to deliver their services, under appropriate legal and contractual arrangements.

We may also disclose information to competent authorities where required by a legal obligation or a binding request under applicable law.

Retention

We retain enquiries and quotation requests for up to **24 months from the last communication relating to the request**. We review this information periodically and delete or anonymise it when its purpose has ended, unless there is a legal reason to retain it for longer.

If a request results in a contract, information needed for the contract and its related records is subject to the applicable legal and contractual retention periods.

For marketing, we stop using your contact information for that purpose when you withdraw consent. We may retain the minimum information needed to document consent or its withdrawal and to prevent you from being added back to marketing lists without fresh consent.

The website does not currently delete requests automatically. Reviews and deletions are carried out through website administration.

Security

The website uses an encrypted HTTPS connection. Access to the administration dashboard is restricted to authorised users with defined roles and permissions. We take appropriate technical and organisational measures to protect personal data against unauthorised access, use, or disclosure.

Your Rights

Under the Saudi Personal Data Protection Law and its regulations, and subject to applicable conditions and exceptions, you have the right to:

• Be informed about how and why your personal data is collected and processed.
• Access your personal data and obtain a clear copy.
• Request correction, completion, or updating of your personal data.
• Request destruction of personal data that is no longer needed.
• Withdraw consent to processing that relies on consent, including marketing.

You may submit a request to Customer Service using the details on the “Contact Us” page. We may request information reasonably necessary to verify your identity and protect your data.

We handle rights requests without delay and within 30 days. If a legally permitted extension is necessary, we will notify you of the reasons before the initial period expires. Any extension will not exceed a further 30 days.

You may also submit a complaint to the competent personal data protection authority at the Saudi Data and Artificial Intelligence Authority (SDAIA) through its official channels.

Cookies and External Services

Our “Cookie Policy” explains the website’s use of external services, including externally hosted project images and the interactive map, which loads only when you request it.

When external content loads, its provider may receive technical information needed to deliver it, such as your IP address. Its processing of that information is governed by its own privacy policy.

Updates

We may update this policy to reflect changes to our services, data processing practices, or legal requirements. We publish the revised version on this page and update its effective date. We provide appropriate notice of material changes and request fresh consent where legally required.