Privacy Notice

The entity responsible for the collection and processing of your Personal Data through this Website is:

3.1 Data You Provide Directly

• Demographic, Personal and Contact information: full name, email address, mobile and phone number, company name, job title, nationality, date of birth, country of birth, citizenship and/or residence;
• Enquiry and correspondence data: messages submitted via contact forms, chat tools, survey feedback or email
• Account / registration data (if applicable): username, password, and profile information
• Employment, background and career information: Education and employment history, work experience, general background information.
• Transaction and billing data: name, address, payment details – processed securely via PCI-DSS compliant third-party processors; we do not store full card numbers; and
• Marketing and communications data, including data and analysis about your interactions or engagement with content or marketing campaigns (including on third party sites), preferences in receiving marketing from us (and our third-party partners), and your communication preferences;

3.2 Data Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device type, and identifiers
• Usage data: pages visited, links clicked, time spent on pages, referral URLs, search terms
• Cookie and tracking data: see Section 6 for our full Cookie Policy
• Log data: server access logs, error logs, security event logs

3.3 Data from Third Parties

• Analytics providers (e.g., Google Analytics): aggregated usage and behaviour data
• Advertising platforms (e.g., Google Ads, LinkedIn Insight Tag, Meta Pixel): ad interaction data;
• Publicly available information: We may collect Personal Data about you from publicly and commercially available sources (as permitted by law and the terms of use applicable to the source).
• Social media platforms and combining Personal Data: We may combine your Personal Data with other Personal Data we collect about you, including when you visit and use our Website. This may include (but is not limited to) Social Media websites where you publicly share information about yourself, such as those operated by Meta, LinkedIn, or X (previously Twitter), as well as information from job sites or from other third-party sources. For additional information on our further use of Social Media sites, you can find our cookies policy via the following link [to be completed]; and
• Business partners and referral sources: contact details shared with your prior consent

3.4 Sensitive Data

We do not intentionally collect Sensitive Personal Data through this website. Please do not submit Sensitive Data through this Website. If you do inadvertently provide Sensitive Data, we will delete it promptly. The KSA PDPL defines Sensitive Personal Data as Personal Data revealing racial or ethnic origin, or religious, intellectual or political belief, data relating to security criminal convictions and offenses, biometric or Genetic Data for the purpose of identifying the person, Health Data, and data that indicates that one or both of the individual’s parents are unknown.

5.1 Service Providers (Data Processors / Sub-processors)

• IT and cloud hosting providers: to host our Website and store data securely;
• Analytics platforms: Google Analytics, Hotjar, or similar services;
• Email marketing platforms: Mailchimp, HubSpot, or similar;
• Customer Relationship Management (CRM) systems;
• Payment processors: Stripe, PayPal, or similar (PCI-DSS compliant);
• Cybersecurity and fraud-prevention providers;
• Customer support platforms and chatbot providers; or
• To support our business with the general business processing, information technology, and system administration services provided to us.

5.2 Professional Advisors

Lawyers, auditors, and accountants bound by professional and contractual confidentiality obligations, our bankers, advisors, and consultants. We may share data with them where required, or where appropriate for the management or support of our business, or to apply or enforce any agreements we have with you.

5.3 Legal and Regulatory Authorities

Where we or another Aramco Group entity have a duty or public interest to disclose information to Government bodies, law enforcement agencies, courts, or regulators in KSA or other applicable jurisdictions where we are required or permitted by applicable local law to disclose your data – including to the Saudi National Data Management Office (NDMO).

5.4 Business Transfers

In the event of an actual or proposed merger, divestment, acquisition, restructuring, or sale of some or all of our assets, stock to any successor your data may be transferred to the relevant third party, subject to appropriate data protection agreements and notification where required; or in connection with bankruptcy proceedings.

5.5 With your permission

Where we asked for your permission to share your Personal Data for a specific purpose, and you agreed. For example, in conjunction with marketing (set out further below) including with third parties who support those activities.

5.6 International Data Transfers

Some of our service providers operate outside the KSA and the EEA. Where Personal Data is transferred internationally, we implement appropriate safeguards:

• Standard Contractual Clauses (SCCs) approved by the relevant authority;
• Transfers to countries or organizations recognized as providing an adequate level of protection by the NDMO, SDAIA or European Commission;
• Binding Common Rules or other approved transfer mechanisms; or
• Your explicit consent where required by applicable law.

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They enable the website to recognize your device, retain preferences, and gather usage data.

6.2 Cookies We Use

6.3 Managing Your Cookie Preferences

Upon your first visit to our Website, a Cookie Consent Banner will appear. You may accept all cookies, reject non-essential cookies, or customize your preferences by category. You can update your preferences at any time by:

• Clicking the "Cookie Settings" link in the footer of our Website;
• Adjusting your browser settings to block or delete cookies; or
• Using third-party opt-out tools (e.g., Google Analytics Opt-out, NAI opt-out, YourAdChoices).

Blocking certain cookies may affect the functionality and user experience of our Website.

Upon expiry of the applicable retention period, or once the purpose of collection has been fulfilled (whichever is later where a legal retention obligation or pending judicial proceeding requires extended retention), Personal Data (including all copies stored in our systems and backups) will, without undue delay, be securely deleted or irreversibly anonymized, in accordance with our Data Retention and Disposal Policy.

We will respond to all valid requests within thirty (30) days. If responding to your request requires disproportionate effort, or if you have submitted multiple requests, we may extend this period by up to an additional thirty (30) days. We will notify you of any such extension, and the reasons for it, before the original 30-day period expires. No fee will be charged unless requests are manifestly unfounded or excessive.

We encourage you to contact us first at privacy@company.com so that we may address your concern directly and promptly. This does not limit your right to contact the supervisory authority directly at any time.