UITC Privacy Policy

01Introduction

This Privacy Policy explains how شركة الاتحاد المتكاملة للمقاولات, operating under the name UITC (“UITC”, “we”, “us” or “our”), collects, uses, stores, shares and protects personal data through its corporate website, https://uitco.com.sa.

UITC respects individuals’ privacy and handles personal data subject to the Saudi Personal Data Protection Law (PDPL), its Implementing Regulations and other applicable laws.

This Policy applies to visitors, individuals submitting business enquiries and people communicating with UITC through the website. Personal data processed under separate client, employment or service arrangements may be governed by additional notices or agreements.

02Data Controller and Contact Details

The data controller responsible for the processing described in this Policy is:

You may use this email address for privacy questions, requests concerning your personal data and privacy-related complaints.

03Personal Data We Collect

When you submit an enquiry, we may collect:

• Your full name.
• Your company or organization.
• Your email address.
• Your telephone number, if provided.
• The services you are interested in.
• Your enquiry or message.
• Other information you voluntarily include in your correspondence.

When you use the website, limited technical information may also be processed to support its operation and security, including IP addresses, request timestamps, browser or device information, referral information and technical or security logs, where collected.

Together with your enquiry, we receive the language and address of the page it was sent from, the time it was submitted, your confirmation of the consent statement, the domain of the website that referred you (if any) and any campaign parameters (such as utm_source) contained in the link you used to open the website. Your browser keeps the referring domain and the campaign parameters in session storage for that browser tab only. Browsers normally discard session storage when the tab is closed, but a browser that restores previous tabs or sessions may keep it until the restored tab is closed.

We do not request sensitive personal data through our general contact form. Please avoid including identification documents, health information, financial credentials or other sensitive information unless we have specifically arranged an appropriate method for receiving it.

04How We Collect Personal Data

We collect personal data directly when you complete a contact form, email us or otherwise communicate with UITC.

Some technical information may be collected automatically when your browser connects to the website or when security and server systems process your request.

05Purposes and Legal Bases of Processing

We process personal data only for specified and lawful purposes, including:

Responding to enquiries: To understand your request, provide relevant information and communicate with you about UITC's services. The legal basis may include your consent or steps taken at your request in connection with a prospective business arrangement, as applicable.

Business correspondence: To manage communications and records relating to potential or existing business relationships, on an applicable lawful basis.

Website operation and security: To maintain website availability, troubleshoot technical problems, prevent misuse and protect our systems and users, relying on an applicable lawful basis, including legitimate interests where permitted by the PDPL.

Legal compliance: To comply with applicable legal obligations, respond to lawful requests and establish, exercise or defend legal rights.

Where processing is based on consent, you may withdraw that consent in accordance with applicable law. Withdrawal does not invalidate processing lawfully conducted before withdrawal.

06Required and Optional Information

Fields marked as required on our contact form are necessary to receive and respond to your enquiry. Other fields are optional.

If required information is not provided, we may be unable to process your request or contact you.

Submitting a general enquiry does not automatically constitute consent to receive advertising or promotional communications.

We will not use enquiry contact details for direct marketing unless an appropriate legal basis, including consent where required, has been established.

07Disclosure and Service Providers

UITC does not sell personal data.

We may share limited personal data, when necessary and lawful, with:

• Website hosting and infrastructure providers, including Hostinger, to operate and maintain the website.
• Business email and communications providers, including Google Workspace, to receive, store and respond to enquiries.
• Authorized personnel and relevant service providers supporting our business operations, subject to appropriate access and confidentiality controls.
• Professional advisers where reasonably necessary.
• Government, judicial, regulatory or other competent authorities where disclosure is legally required or permitted.

Personal data submitted through the website may be delivered to UITC's authorized business email inbox and retained in business correspondence systems.

The website contact form is not intended to create a public account or initiate a payment transaction.

08Processing Outside Saudi Arabia

UITC operates in Saudi Arabia and may use third-party technology and communications providers whose systems process or store information inside or outside the Kingdom.

Where a transfer or disclosure of personal data outside Saudi Arabia occurs, UITC must comply with the applicable PDPL requirements and the Regulation on Personal Data Transfer Outside the Kingdom, including applicable safeguards and restrictions.

Such transfers should be limited to the information necessary for the relevant purpose.

09Retention and Destruction

We retain personal data for no longer than necessary for the purposes for which it was collected, subject to applicable legal requirements.

Business enquiries and associated correspondence may be retained while the enquiry is active and for an appropriate period afterward where needed for business records, legal obligations or the establishment, exercise or defence of legal rights.

Technical and security information is retained only for the relevant operational or security purpose and in accordance with applicable retention requirements.

Once the applicable retention period has ended, and no lawful reason for continued retention applies, personal data will be securely deleted, destroyed or anonymized, as appropriate.

10Information Security

UITC takes appropriate technical, administrative and organizational measures to protect personal data against unauthorized access, loss, alteration, misuse or unlawful disclosure.

Access to personal data should be restricted to authorized individuals and service providers who require it for legitimate purposes.

No internet transmission or electronic storage environment can guarantee absolute security.

11Cookies, Analytics and Advertising Technologies

At the date of this Policy, the website does not use Google Analytics 4, Meta Pixel or other non-essential advertising and behavioral-tracking technologies.

Technical functionality and security systems may process limited information necessary for the website to operate.

The website's own code does not set cookies, and no analytics or advertising cookies are used. Hosting and security infrastructure may use technical mechanisms that are necessary to deliver and protect the website. The contact form uses temporary session storage in your browser only as described in section 3.

The Google Maps map on the Contact page is third-party content that loads automatically when you open that page; see section 15.

If analytics, advertising pixels or other non-essential tracking technologies are introduced, UITC will update the relevant privacy information and implement applicable notice and consent mechanisms before activating such processing.

12Your Rights Under the PDPL

Subject to the PDPL and applicable legal conditions, you have rights concerning your personal data, including:

• The right to be informed about its collection and processing.
• The right to access personal data held about you.
• The right to request a copy in a readable and clear format.
• The right to request correction, completion or updating of inaccurate or incomplete data.
• The right to request destruction of personal data where the applicable legal conditions are met.
• The right to withdraw consent where consent is the legal basis for processing.

To exercise these rights, contact info@uitco.com.sa.

We may request reasonable information to verify your identity before fulfilling a request.

Requests will be handled without undue delay and generally within 30 days, subject to a permitted extension of up to an additional 30 days in the circumstances specified by the Implementing Regulations, with advance notification of the extension and the reasons for it.

13Privacy Complaints

If you have a concern about how UITC processes personal data, please contact info@uitco.com.sa so that we can examine and respond to your concern.

You may also submit a complaint to the competent Saudi authority through the National Data Governance Platform, in accordance with the applicable procedures:

https://dgp.sdaia.gov.sa/

14Children's Privacy

The website is designed for corporate and professional audiences and is not intended for children.

We do not knowingly seek personal data from children through our general business enquiry form.

15Third-Party Websites and Content

Our website may link to external websites. Those websites have their own privacy practices and policies, which UITC does not control.

The Contact page includes a map from Google Maps, which is embedded third-party content. The map loads automatically when you open the Contact page. Loading it connects your browser to Google, which receives technical information such as your IP address and browser details; this processing is subject to Google's own privacy practices.

16Changes to this Policy

UITC may update this Privacy Policy to reflect changes in its website, data-processing activities or applicable requirements.

The updated version will be published on this page with the corresponding revision date.