1. Introduction
ROSCO For Contracting respects the privacy of visitors to its website and users of its digital services and processes personal data in accordance with applicable laws and regulations in the Kingdom of Saudi Arabia.
This Policy explains the types of data we may collect, why we process it, how it is protected and retained, data subject rights, and how to contact us about privacy matters.
2. Personal data we may collect
- Contact data: name, email address, phone number, company or organization, and job title where provided.
- Business requests: information submitted through RFQs, tender invitations, supplier registration, and business inquiries.
- Recruitment data: job application information, CVs, and supporting documents.
- Technical and security data: information required to operate and secure the website, such as IP address, browser and device information, security logs, and error logs.
- AI assistant: when enabled, conversation text and information voluntarily entered by the user may be processed.
3. Purposes of processing
- Responding to inquiries and contact requests.
- Managing RFQs, tenders, and business opportunities.
- Managing supplier registration and qualification.
- Managing recruitment applications and candidate communication.
- Operating the website and improving performance and user experience.
- Protecting the website and systems against misuse and security threats.
- Meeting legal, regulatory, and contractual requirements.
- Operating digital services and the AI assistant when enabled.
4. Lawful basis
Personal data is processed under the lawful basis appropriate to each purpose, including consent where required, performance of an agreement, compliance with legal obligations, or legitimate interests within the limits permitted by applicable law.
5. Data sharing
ROSCO does not sell personal data. Data may be shared where necessary with hosting, technology, security, communications, and professional service providers, or with governmental, regulatory, or judicial authorities where required or permitted by law.
6. Data transfers
Where use of a technology provider requires processing or transfer of data outside the Kingdom of Saudi Arabia, such processing will be handled in accordance with applicable requirements and safeguards.
7. Retention and destruction
Personal data is retained for as long as necessary to fulfil its collection purpose, meet legal or contractual requirements, or protect legitimate rights and claims. When no longer required, it is securely destroyed or anonymized unless a longer period is required by law.
8. Data security
ROSCO applies appropriate technical, organizational, and administrative safeguards to reduce the risk of unauthorized access, loss, disclosure, or unlawful alteration, taking account of the nature of the data and processing risks.
9. Data subject rights
Subject to applicable law, individuals may have rights to be informed about processing, access their personal data, obtain a copy, request correction, completion or updating, request destruction when there is no longer a lawful need to retain the data, and withdraw consent where consent is the processing basis.
10. Third-party services
The website may include third-party services such as Google Maps and links to social platforms. Those providers may process technical information under their own terms and privacy policies when their services are used.
11. AI assistant
When enabled, the AI assistant provides general information about ROSCO, its services, and published content. Its output does not constitute contractual approval or binding legal, engineering, or financial advice. Users should avoid submitting unnecessary sensitive or confidential information.
12. Policy changes
ROSCO may update this Policy when its services, data-processing practices, or applicable requirements change. The latest update date is shown on this page.
13. Contact
For privacy and personal-data inquiries or requests, contact info@rosco.com.sa.