Privacy Notice

The entity responsible for the collection and processing of your personal data through this Website is:

3.1 Data You Provide Directly

• Demographic, Personal and Contact information: full name, email address, mobile and phone number, company name, job title, nationality, date of birth, countries of birth, citizenship and/or residence.
• Enquiry and correspondence data: messages submitted via contact forms, chat tools, survey feedback or email
• Account / registration data (if applicable): username, password, and profile information
• Employment, background and career information: Education and employment history, work experience, general background information.
• Transaction and billing data: name, address, payment details – processed securely via PCI-DSS compliant third-party processors; we do not store full card numbers
• Marketing and communications data, including data and analysis about your interactions or engagement with content or marketing campaigns (including on third party sites), preferences in receiving marketing from us (and our third-party partners), and your communication preferences;

3.2 Data Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device type, and identifiers
• Usage data: pages visited, links clicked, time spent on pages, referral URLs, search terms
• Cookie and tracking data: see Section 6 for our full Cookie Policy
• Log data: server access logs, error logs, security event logs

3.3 Data from Third Parties

• Analytics providers (e.g., Google Analytics): aggregated usage and behaviour data
• Advertising platforms (e.g., Google Ads, LinkedIn Insight Tag, Meta Pixel): ad interaction data
• Publicly available information: We may collect Personal Data about you from publicly and commercially available sources (as permitted by law and the terms of use applicable to the source).
• Social media platforms and combining Personal Data: We may combine your Personal Data with other Personal Data we collect about you, including when you visit and use our Site. This may include (but is not limited to) Social Media websites where you publicly share information about yourself, such as those operated by Meta, Linked-in, or X (previously Twitter), as well as information from job sites or from other third-party sources. For additional information on our further use of Social Media sites.
• Business partners and referral sources: contact details shared with your prior consent

3.4 Sensitive / Special Categories of Data

We do not intentionally collect Sensitive Personal Data through this website. Please do not submit such information as set out below through this Website. If you do inadvertently provide sensitive data, we will delete it promptly. The KSA PDPL defines Sensitive Personal Data as health data, genetic or biometric data, and data relating to criminal records, ethnic origin, intellectual, political, or religious beliefs, or if either of a person's parentage is unknown.

5.1 Service Providers (Data Processors / Sub-processors)

• IT and cloud hosting providers: to host our Website and store data securely
• Analytics platforms: Google Analytics, Hotjar, or similar services
• Email marketing platforms: Mailchimp, HubSpot, or similar
• Customer Relationship Management (CRM) systems
• Payment processors: Stripe, PayPal, or similar (PCI-DSS compliant)
• Cybersecurity and fraud-prevention providers
• Customer support platforms and chatbot providers
• To support our business with the general business processing, information technology, and system administration services provided to us; or

5.2 Professional Advisors

Lawyers, auditors, and accountants bound by professional and contractual confidentiality obligations, our bankers, advisors or consultants, where required, or appropriate for the management or support of our business, or to apply or enforce any agreements we have with you.

5.3 Legal and Regulatory Authorities

Where we or another Aramco Group entity have a duty or public interest to disclose information to Government bodies, law enforcement agencies, courts, or regulators in, KSA, or other applicable jurisdictions where we are required or permitted by applicable local law to disclose your data – including to the Saudi National Data Management Office (NDMO).

5.4 Business Transfers

In the event of an actual or proposed merger, divestment, acquisition, restructuring, or sale of some or all of our assets, stock to any successor your data may be transferred to the relevant third party, subject to appropriate data protection agreements and notification where required; or in connection with bankruptcy proceedings.

5.5 With your permission

Where we asked for your permission to share your Personal Data for a specific purpose, and you agreed. For example, in conjunction with marketing (set out further below) including with third parties who support those activities.

5.6 International Data Transfers

Some of our service providers operate outside the, KSA, and the EEA. Where personal data is transferred internationally, we implement appropriate safeguards:

• Standard Contractual Clauses (SCCs) approved by the relevant authority;
• Transfers to countries with an adequate level of protection as recognized by the, National Data Management Office, or European Commission;
• Binding corporate rules or other approved transfer mechanisms; or
• Your explicit consent where required by applicable law.

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They enable the website to recognize your device, retain preferences, and gather usage data.

6.2 Cookies We Use

6.3 Managing Your Cookie Preferences

Upon your first visit to our Website, a Cookie Consent Banner will appear. You may accept all cookies, reject non-essential cookies, or customize your preferences by category. You can update your preferences at any time by:

• Clicking the "Cookie Settings" link in the footer of our Website;
• Adjusting your browser settings to block or delete cookies; or
• Using third-party opt-out tools (e.g., Google Analytics Opt-out, NAI opt-out, YourAdChoices).

Blocking certain cookies may affect the functionality and user experience of our Website.

Upon expiry of the applicable retention period, personal data will be securely deleted, anonymized, or pseudonymized in accordance with our Data Retention and Disposal Policy.

• TLS/SSL encryption for all data transmitted between your browser and our Website;
• Access controls, role-based permissions, and multi-factor authentication for staff accessing personal data;
• Regular security assessments, vulnerability scanning, and penetration testing;
• Secure, encrypted storage on certified cloud infrastructure in compliant data centres;
• Data minimization and pseudonymization where technically feasible;
• Staff training on data protection, information security, and phishing awareness;
• Incident response procedures, including escalation protocols and data breach notification.

We will respond to all valid requests within 30 days. In complex or high-volume cases, this may extend to 60 days (GDPR) or as permissible under the KSA PDPL. We will notify you of any extension. No fee will be charged unless requests are manifestly unfounded or excessive.

We encourage you to contact us first at privacy@company.com so that we may address your concern directly and promptly. This does not limit your right to contact the supervisory authority directly at any time.