Privacy Policy
Shaheen Arabia Company for Industry (SACOM)
Version 1.0 · Effective date: the date of publication approved by legal counsel
1. Who we are
This website is operated by Shaheen Arabia Company for Industry (SACOM), CR No. 2055125310, Jubail Industrial City, Kingdom of Saudi Arabia (“Shaheen Arabia”, “we”, “us”). Shaheen Arabia is the controller of personal data collected through this website.
2. What this policy covers
This policy explains how we collect, use, share, store and protect personal data when you visit this website, submit the contact form or the request for quotation (RFQ) form, upload files, or contact us by email, telephone or WhatsApp using the details on this website.
3. Personal data we collect
- Contact form: name, company, email address, telephone number, requirement type and your message.
- RFQ form: the contact details above, requirement type, service needed, quantity, material, timeline, dimensions/tolerances, application, message and any files you upload (drawings, photographs, datasheets).
- Communications: the content of emails, calls and WhatsApp messages you send us.
- Technical data: IP address, browser type, device type and pages visited, recorded in server logs and — only if you accept analytics cookies — by Google Analytics.
We do not ask for, and ask you not to send, sensitive personal data. Uploaded technical files may contain business information about your organisation; we treat these files as confidential.
4. How we use personal data
- To respond to your enquiry and assess your technical requirement.
- To prepare quotations, feasibility responses and lead-time information.
- To deliver and support products and services you order.
- To keep records of enquiries and quotations.
- To improve the website (analytics, only with your consent).
- To meet legal and regulatory obligations.
5. Legal basis
We process personal data on the basis of your consent (given by ticking the consent box on our forms), to take steps you request before entering into a contract, to perform a contract, and to comply with legal obligations, as permitted by the Personal Data Protection Law of the Kingdom of Saudi Arabia and its implementing regulations. You may withdraw consent at any time (section 10).
6. Sharing personal data
We do not sell personal data. We share it only where needed:
- With Falcon Group companies, where a requirement needs their engineering support or a process coordinated through them.
- With approved specialist partners, where a process is coordinated through them — limited to the information needed for that work.
- With service providers that host this website, deliver our email and store our records, under confidentiality obligations.
- With authorities where required by law.
7. Transfers outside Saudi Arabia
Some Falcon Group companies and service providers are located outside the Kingdom of Saudi Arabia (for example, in the United Arab Emirates). Where personal data is transferred outside the Kingdom, we do so only as permitted by the Personal Data Protection Law and its transfer regulations, and with appropriate safeguards.
8. RFQ files and uploads
Files uploaded through the RFQ form are checked for malware, stored in a protected location that is not publicly accessible, and made available only to the staff handling your request. Files are removed from the website server within 30 days of submission after being transferred to our internal systems, where they are kept for the period stated in section 9.
9. How long we keep personal data
- Enquiries that do not lead to an order: for a defined period from the last contact.
- Quotations, orders and related technical files: for the period required by Saudi commercial and tax record-keeping rules.
- Analytics data: 14 months (Google Analytics setting).
After these periods data is securely deleted or anonymised.
10. Your rights
Under the Personal Data Protection Law you have the right to be informed about how your data is used; to access your personal data and obtain a copy; to request correction of inaccurate or incomplete data; to request destruction of data that is no longer needed; and to withdraw consent. To exercise these rights, contact us using the details in section 13. We will respond within the period required by law. You may also lodge a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA).
11. Cookies and analytics
This website uses only cookies that are strictly necessary for it to work unless you accept analytics cookies in the cookie banner. If you accept, Google Analytics 4 sets cookies (_ga, _ga_<container-ID>) to measure visits and form use. We do not use advertising cookies. You can change your choice at any time using “Cookie settings” in the website footer.
12. Security
We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS), restricted access to enquiry data and files, and malware scanning of uploads. No method of transmission over the internet is completely secure.
13. Contact
Privacy enquiries and requests: sales@sacom.sa
Shaheen Arabia Company for Industry (SACOM), P.O. Box 50466, Jubail 35717, Kingdom of Saudi Arabia.
14. Changes to this policy
We may update this policy. The version number and effective date at the top show the current version. Material changes will be highlighted on this page.