Creative Perfection Contracting respects your privacy. This Policy explains how we process personal data in connection with this website and related business communications in accordance with the Saudi Personal Data Protection Law, its Implementing Regulations, and other applicable requirements (“PDPL”).
Who is responsible for your data
Creative Perfection Contracting, Commercial Registration No. 1010218327, is the data controller for personal data described in this Policy. Our contact details appear in section 14.
Scope
This Policy applies to website visitors, prospective and current clients, suppliers, subcontractors, professional advisers, and people who contact us about our services. Separate notices or contractual provisions may apply to employees, job applicants, project personnel, or data processed for a client.
Personal data we may collect
Depending on how you interact with us, we may receive your name, telephone number, job title, organisation, project location, enquiry details, correspondence, and any information you choose to provide by telephone, WhatsApp, or another business channel. Our hosting and security providers may also process technical data such as IP address, device and browser details, access time, requested pages, referring page, and error or security logs.
How we collect data
We collect data directly from you when you contact us; from your organisation or authorised representative where appropriate; from publicly available business sources where lawful; and automatically through essential hosting, delivery, and security logs. When you submit the project-enquiry form, the information is transmitted through Netlify hosting and form processing and made available to authorised company personnel for follow-up. The website has no user account, advertising tracker, or non-essential analytics tool.
Purposes and legal bases
We process personal data to respond to enquiries, assess prospective projects, prepare or administer proposals and contracts, manage client and supplier relationships, operate and secure the website, prevent misuse, keep appropriate business records, establish or defend legal claims, and comply with legal or regulatory obligations. Depending on the circumstances, processing is based on your consent, steps requested before entering a contract, performance of a contract, compliance with law, or a legitimate interest permitted by the PDPL that does not override your rights.
Sensitive data
We do not intentionally request sensitive personal data through this website. Please do not send identity documents, health information, financial details, or other sensitive material through WhatsApp or general enquiries unless we specifically request it for a lawful and necessary purpose and provide appropriate instructions.
Cookies and external technology
We do not currently use non-essential advertising or analytics cookies. Essential hosting infrastructure may use technical identifiers or logs needed to deliver and protect the website. The site loads web fonts from Google, which may receive technical connection data, and links to WhatsApp; when you follow a third-party link, that provider processes information under its own privacy terms. If we introduce non-essential cookies, we will update this Policy and request consent where required.
Sharing and service providers
We may share personal data only where necessary with authorised employees and project personnel; website hosting, IT, communications, and security providers; professional advisers; clients, suppliers, or subcontractors involved in a relevant enquiry or project; and governmental, judicial, or regulatory authorities where required or permitted by law. Service providers are expected to process data only for authorised purposes and apply suitable confidentiality and security safeguards.
International transfers
Some technology or communications providers may process data outside the Kingdom of Saudi Arabia. Where personal data is transferred internationally, we will take the steps required by the PDPL and the Regulation on Personal Data Transfer, including assessing the transfer and applying appropriate safeguards or obtaining approvals where required.
Retention
We keep personal data only for as long as needed for the purpose for which it was collected and for applicable contractual, accounting, legal, dispute, or regulatory requirements. Retention depends on the nature of the enquiry or relationship and relevant statutory obligations. When data is no longer required, we take reasonable steps to delete, destroy, or irreversibly anonymise it, unless continued retention is legally required.
Security and data incidents
We apply reasonable technical and organisational safeguards designed to protect personal data from unauthorised access, loss, alteration, disclosure, or destruction. No internet transmission or storage method is completely secure. If a personal-data breach occurs, we will investigate, mitigate harm, and notify the competent authority and affected individuals where required by the PDPL.
Your rights
Subject to the PDPL and its lawful limitations, you may have the right to be informed about processing; access your personal data; obtain a readable copy; request correction, completion, or updating; request destruction when the purpose has ended; and withdraw consent where consent is the processing basis. We may verify your identity before acting on a request.
Complaints and regulatory contact
Please contact us first if you have a privacy concern so we can review it. You may also submit a complaint to the competent Saudi data-protection authority through the official channels of the Saudi Data & AI Authority (SDAIA) or the National Data Governance Platform, subject to their procedures.
Contact and rights requests
Contact Creative Perfection Contracting by telephone at +966 50 006 1317 or +966 11 487 0124, or by post to P.O. Box 70834, Riyadh 11577, Kingdom of Saudi Arabia. Please identify your request as a “Personal Data Request” and provide enough information for us to verify and respond to it.
Policy updates
We may update this Policy to reflect legal, technical, or operational changes. The latest version and revision date will remain available on this page. Material changes will be communicated through an appropriate notice where required.