Privacy policy

Who we are

Specialized Yaseer Contracting Co. (a one-person limited liability company, commercial registration 7032291044) is the controller of the personal data described in this policy. Address: Alsultan Center, Office 104, Madinah Road, Al-Sharafiyah, Jeddah, Saudi Arabia. Email: ycc@syaseer.com

What we collect

• Enquiries and quotation requests: name, organisation, phone, email, city, project details and any files or links you send.
• Job applications: your contact details, current role, experience, CV and anything else you choose to include.
• Supplier and subcontractor registration: company details, contact person, commercial registration and VAT numbers, and your company profile.
• Prequalification requests: organisation, contact person, email, phone and project reference.
• Technical data: a one-way coded version of your IP address, used only to limit abuse of our forms, and anonymous visit statistics that do not use cookies.

Why we use it, and on what basis

• Replying to your enquiry, preparing a quotation and discussing the project: your consent when you submit the form, and the steps needed before entering into a contract with you.
• Assessing job applications: your consent.
• Assessing and registering suppliers and subcontractors: your consent and our legitimate interest in managing our supply chain.
• Sending occasional company news: only if you tick the separate marketing box. You can withdraw this at any time.
• Keeping the website secure and preventing spam: our legitimate interest.

We do not sell personal data or use it for advertising.

Who processes it for us

We use service providers that process data on our behalf under contract:

• Vercel: website hosting; the servers that process forms are in Japan
• Supabase: database and file storage, hosted in Japan
• Resend: sending email notifications
• Cloudflare: Turnstile, which checks that forms are sent by people rather than bots
• Google: maps, loaded only if you choose to show the map on our contact page

Some of these providers process data outside the Kingdom of Saudi Arabia. We transfer only the data needed for the purpose, and we apply the safeguards required by the PDPL and its Regulation on Personal Data Transfer outside the Kingdom.

How long we keep it

• Enquiries and quotation requests: 24 months
• Job applications: 12 months
• Supplier and subcontractor registrations: 36 months
• Prequalification requests: 24 months
• Coded technical records used against abuse: 7 days

After these periods, records and attached files are deleted automatically, unless the law requires us to keep them longer or they become part of a contract.

Your rights

Under the PDPL you have the right to:

• be informed about how your data is processed
• access your data and obtain a copy
• ask us to correct inaccurate or incomplete data
• ask us to destroy data we no longer need
• withdraw your consent at any time, without affecting processing that took place before

To exercise these rights, email ycc@syaseer.com and we will respond within 30 days. If you are not satisfied with our response, you can complain to the Saudi Data and Artificial Intelligence Authority (SDAIA).

How we protect it

Only authorised staff with individual accounts can see submissions. Data is encrypted in transit, attached files are kept in private storage that is only reachable through short-lived links, and we review access regularly.

Changes to this policy

We publish any change on this page with a new version number and effective date.