Privacy Policy

Last updated: 25 June 2026

Introduction

Nal Alarabia For Contracting Establishment (مؤسسة نال العربية للمقاولات) — "NAL Arabia", "NAC", "we", "us" or "our" — is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your personal data when you visit www.nalarabia.com or contact us, and the rights you have over your data.

We process personal data in accordance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia (Royal Decree No. M/19) and its Implementing Regulations, as supervised by the Saudi Data & Artificial Intelligence Authority (SDAIA). For the purposes of the PDPL, NAL Arabia is the data controller.

Personal data we collect

We only collect data that is necessary for the purposes described below.

Information you provide to us:

  • Identity & contact details — name, company name, email address and phone number.
  • Enquiry & quote details — service required, project sector, location, timelines and any information you include in your message.

Information collected automatically:

  • Technical data such as IP address, browser type and device information.
  • Usage data and cookies that help the website function and improve (see our Cookie Policy).

How we use your data

  • To respond to your enquiries and prepare quotations.
  • To provide and manage our manpower, equipment and material services.
  • To communicate with you about your project or request.
  • To operate, maintain and improve our website.
  • To comply with legal, regulatory and contractual obligations in the Kingdom.

Legal basis for processing

Under the PDPL, we rely on one or more of the following legal bases:

  • Your consent — for example, when you submit a form or accept cookies.
  • Performance of a contract — to deliver services you request.
  • Legitimate interests — to operate and secure our business, where not overridden by your rights.
  • Legal obligation — to meet requirements under Saudi law.

Sharing & disclosure

We do not sell your personal data. We may share it only with:

  • Trusted service providers who help us operate the website and process form submissions (for example, our form-delivery provider).
  • Professional advisers, and competent government or regulatory authorities where required by law.

Cross-border transfers

Some of our service providers may process data on servers located outside the Kingdom of Saudi Arabia. Where this occurs, we take appropriate safeguards so that your data continues to be protected to a standard consistent with the PDPL and its regulations on cross-border data transfers.

Data retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, to provide our services, and to comply with legal, tax and accounting obligations. When no longer required, data is securely deleted or anonymised.

Your rights under the PDPL

Subject to the conditions of the PDPL, you have the right to:

  • Be informed about how your personal data is collected and used.
  • Access the personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request destruction (deletion) of your personal data.
  • Withdraw your consent to processing at any time.
How to exercise your rights
To make a request, email us at info@nalarabia.com. We will respond within the period required by law. You also have the right to lodge a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA) if you believe your data has been handled improperly.

Cookies

Our website uses cookies and similar technologies. You can manage your preferences through our cookie banner and your browser settings. For full details, see our Cookie Policy.

Data security

We apply appropriate organisational and technical measures to protect personal data against unauthorised access, loss, misuse or alteration. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Children's privacy

Our website and services are intended for businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us so we can remove it.

Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page with a revised "last updated" date.

Contact us — data controller

Nal Alarabia For Contracting Establishment

  • Commercial Registration (Unified National No.): 7040797255
  • VAT Registration No.: 302192516400003
  • Building 2622, Al Madinah Al Munawarah Rd, Al Tawyah District, Al Jubail 35514, Kingdom of Saudi Arabia

Email: info@nalarabia.com · Phone: +966 13 812 3443