Skip to main content

Privacy Notice

Last updated: 2026-08-02

01. Who we are

Najeib Nabeil Mulla Construction Company, commercial registration 4030434553, of Jeddah, Kingdom of Saudi Arabia, is the controller of personal data collected through this website and the supplier portal. Privacy enquiries: [email protected].

02. What we collect

From website visitors: name, email address, phone number and message text submitted through the contact form.

From registered suppliers: contact details, company legal name, commercial registration and VAT numbers, address, supply categories, bank details, uploaded statutory documents, and quotation values.

Automatically: a salted hash of your IP address and browser identifier, used for rate limiting and abuse detection. We do not retain raw IP addresses.

03. Purpose and basis

Supplier data is processed for pre-qualification, contracting and procurement administration, on the basis of the contractual relationship or steps preparatory to it, and to meet statutory obligations in the Kingdom. We do not use your data for marketing and we do not sell it to anyone.

04. How we protect it

Sensitive fields — commercial registration number, VAT number, bank details, quotation values and contact message bodies — are encrypted at rest with AES-256-GCM.

Uploaded documents are stored encrypted under a per-file key outside the web root and are not reachable by direct URL. Every download is authorised and logged.

Passwords are stored as Argon2id hashes and cannot be recovered. Two-factor authentication is available on every account.

Every access to or change of your record is written to a hash-chained audit log, so later tampering is detectable.

05. Retention

Supplier data is retained for the duration of registration and for ten years after the last contractual dealing, in line with statutory record-keeping requirements. Contact form messages are deleted within 24 months. Audit records expire under our internal retention policy.

06. Your rights

Under the Kingdom’s Personal Data Protection Law you have the right to be informed of processing, to access your data, to request its correction or destruction, and to withdraw consent where processing rests on it. To exercise these, write to [email protected] and we will respond within the statutory period.

07. Cookies

We use no tracking cookies and no third-party analytics. Strictly necessary cookies are used only inside the supplier portal, to hold your sign-in session and to protect against request forgery.

Privacy Notice · Najeib Mulla Construction