Privacy Policy

Effective date: July 15, 2026               
Nesma & Partners Contracting Company UJSC ("Company" or "we") is committed to protecting the privacy of individuals visiting our website (https://www.nesmapartners.com). This Privacy Notice explains how we collect, use, disclose, and protect personal data in compliance with the Saudi Personal Data Protection Law and the regulations and binding legal instruments issued thereunder (collectively, the “PDPL”).

By using our website, you consent to the collection and use of Personal Data as outlined in this Privacy Notice 

Personal Data We Collect  
We may collect and process the following types of Personal Data when you visit our website:
• Browsing Data: IP address, browser type, device information, operating system, pages viewed, session duration.            
• Contact Information: Name, email address, phone number (if provided via forms or inquiries). 
• Cookie Data: Preferences, interaction with ads, location-based data (where applicable) 
• Technical Data: Log files, referral website, error reports.           
Some of this data is collected automatically through cookies and analytics tools (refer to our cookie policy for more details).          

How we Collect Your Data  
We collect Personal Data in the following ways:    
• Directly from you: When you fill out forms, subscribe to newsletters, or contact us. 
• Automatically: through cookies and tracking technologies as you browse the website. 
• From third-party services: Such as analytics providers, advertising networks, or embedded content.          

Purpose of Data Processing            
• We process your Personal Data for the following legitimate purposes:        
• To improve website functionality and ensure secure browsing experience.     
• To analyze website traffic and enhance user experience.            
• To respond to inquiries and requests submitted via online forms.               
• To personalize website content and display relevant services.               
• To comply with legal and regulatory obligations and enforce security measures.    


Legal Basis for Processing  
Our processing of Personal Data is based on the following legal grounds:           
• Performance of a contract: When responding to inquiries or providing requested services. 
• Compliance with legal obligations: Where required under Saudi laws.     
• Legitimate interests: To enhance website security, optimize user experience, and prevent fraud. 
• Consent: For marketing communications and cookies where legally required.          


Cookie and Consent Management             
• We use cookies to collect certain data automatically.   
• A cookie banner is displayed on your first visit to obtain your consent for non-essential cookies. 
• You can manage your cookie preferences or withdraw consent at any time via the cookie settings accessible on our website.          

Data Sharing And International Transfers             
• Service Providers: IT support, website hosting, analytics providers.        
• Regulatory Authorities: If required by law or for statutory or regulatory compliance purposes.    
• Cloud Hosting Services: Some data may be stored outside Saudi Arabia, ensuring necessary security measures and PDPL compliance.   

Your Rights Under the PDPL            
As a website visitor, you have the following rights regarding your Personal Data:             
• Right to Be Informed – Know how we collect and use your data.               
• Right to Access – Request access to your Personal Data we have collected.        
• Right to Rectify – Request correction of inaccurate or incomplete data.    
• Right to Erasure – Request deletion of your data where applicable.      
• Right to Restrict Processing – Limit how we use your Personal Data.   
• Right to Object – Object to direct marketing or data processing based on legitimate interests. 
• Right to Withdraw Consent – Withdraw consent for processing where applicable.      
To exercise any of these rights, please contact our Data Protection Officer at ContactDPO@nesmapartners.com. We will respond to your request within 30 days, subject to legal and contractual restrictions.    

Data Security Measures      
We implement appropriate technical and organizational measures to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. These measures include access controls, encryption, and regular security assessments.               

Data Retention           
We retain Personal Data only as long as necessary for the purposes outlined in this notice or as required by law. Once no longer needed, data is securely deleted or anonymized.  

Breach Notification               
In the event of a Personal Data breach, we will notify affected individuals and the relevant authorities in accordance with PDPL requirements.              

Contact Information             
If you have any questions or concerns about this Privacy Notice or our data processing practices, please contact:     
Data Protection Officer       
Nesma & Partners Contracting Company UJSC     
Building no. 6718, Prince Majed bin AbdulAziz Street        
Al Khubar Ash Shamaliyah Dist.,Unit No 4  
Al Khobar 34427 - 3559          
Kingdom of Saudi Arabia       
Email: ContactDPO@nesmapartners.com               

Changes To This Privacy Notice     
We may update this Privacy Notice from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes and indicate the date of the latest update at the beginning of the notice.