Last Updated: 07 November 2025

1. Introduction

Business Gate Company (“we”, “us”, “our”) recognises the importance of the privacy of individuals who engage with us – including clients, suppliers, job applicants, website visitors, and other stakeholders (collectively, “you”). This Privacy Policy explains how we collect, use, manage and protect your personal information when you interact with us (for example via our website, through services, consultancy, facility management, construction &contracting projects, or other business operations).

2. Scope of this Policy

This Policy applies to all personal information that we collect and process and is issued on behalf of Business Gate Company and its affiliates, subsidiaries and associated business units. We may amend this Policy from time to time; the latest version will be posted on our website and/or otherwise made available to you.

3. Definitions

For the purposes of this Policy:

• Personal Data means information about an identified or identifiable individual.
• Processing means any operation performed on Personal Data, such as collection, storage, disclosure, use, deletion.
• Sensitive Personal Data means special categories of information such as health status, race or religion (to the extent protected under applicable Saudi law).
• Controller means the entity that determines the purposes and means of processing Personal Data.
• Processor means any entity that processes Personal Data on behalf of the Controller.

4. Collection of Personal Data

We may collect or obtain Personal Data about you in a number of ways:

• Data you provide us directly (for example when contacting us by email or phone, in connection with a service agreement, job application, or supplier registration).
• Data obtained as part of our business relationship with you (for example client or contractor details, project contract data, payment/billing information).
• Data from your visit or interaction with our website (for example technical data such as IP address, device type, browser information, pages visited).
• Data from third parties (for example suppliers, service providers, publicly‐available sources, social media).
• Data from tracking or analytics technologies (for example cookies, web logs, use of our online portals).

5. Creation of Personal Data

In addition to data provided to us, we may create Personal Data about you, such as records of your interactions with our services, projects, website visits, and other engagements.

6. Categories of Personal Data Processed

Depending on the nature of our relationship, we may process the following categories of Personal Data:

• Personal details: name, title, photograph.
• Demographic information: age or date of birth, gender, nationality, language preference.
• Contact details: address, email, telephone number, fax, social media details.
• Employment or business details: employer name, job title, business/contractor details.
• Payment and billing information: invoice records, bank account or credit card details, payment method, amount and date.
• Technical/website data: device type, operating system, browser type, IP address, date/time of connection, usage data.
• Interaction data: correspondence, enquiries, feedback, survey responses, project / contract records.
• Where applicable, sensitive Personal Data may be processed (in compliance with law) when required (for example for health & safety records at our facilities).

7. Sensitive Personal Data

We do not ordinarily seek to collect Sensitive Personal Data. Should we need to process such data for a legitimate purpose (e.g., health & safety, legal compliance), we will rely on applicable legal bases and ensure appropriate safeguards.

8. Purpose of Processing and Legal Basis

We process Personal Data for the following purposes (and where applicable, based on legal basis such as contract, legitimate interest, consent or legal obligation):

• To provide our services (consultancy, project management, facility/property management, construction/contracting) and fulfill contracts with you.
• To operate and manage our business, website, IT systems, and communications.
• To communicate with you about our services, offers, and updates (subject to consent where required).
• To manage our relationships with clients, suppliers, contractors, job applicants.
• To ensure the security of our premises, projects, and facilities, including access records, CCTV where lawful.
• To comply with legal, regulatory or contractual obligations.
• To analyse and improve our services, website, and user experience; to prevent fraud; and to allow for recruitment/selection of personnel.

9. Disclosure to Third Parties

We may disclose your Personal Data to third parties in the following circumstances:

• To our group companies, affiliates and service providers (processors) who perform services on our behalf (for example payment processing, IT hosting, analytics).
• To legal, regulatory or governmental authorities if required by law or to protect our rights or the rights of others.
• To external advisors (accountants, auditors, lawyers) as required.
• In the context of any corporate transaction (sale, merger, asset transfer) where your data may be part of transferred assets.
  We will ensure that any thirdparty processor is under contract with us and is required to comply with confidentiality and data protection standards.

10. International Transfers

As our business has global interactions, we may transfer Personal Data to recipients located outside Saudi Arabia. Where we do so, we will apply appropriate safeguards (such as contractual clauses) to ensure the level of protection is consistent with this Policy and applicable laws.

11. Data Security

We implement technical and organisational measures designed to safeguard your Personal Data from unauthorised access, disclosure, alteration, loss or destruction. However, due to the nature of the internet and digital communication, we cannot guarantee absolute security of data transmission; you accept the risk when sending data electronically.

12. Data Accuracy

We take reasonable steps to ensure that your Personal Data is accurate, complete and kept uptodate. We may ask you from time to time to confirm or update your information.

13. Data Minimisation

We will only process Personal Data that is reasonably necessary in relation to the purposes set out in this Policy.

14. Data Retention

We retain your Personal Data only for as long as required for the relevant purpose(s), including any legal or contractual retention obligations, and for a period after such relationships end as may be necessary (for example for limitationperiod of legal claims). After that, your data will be deleted or anonymised.

15. Your Rights

Subject to applicable laws in Saudi Arabia (including any local data protection legislation), you may have the following rights:

• The right to access your Personal Data we hold and receive a copy.
• The right to request correction of inaccurate or incomplete Personal Data.
• The right to request erasure of your Personal Data (where lawful).
• The right to restrict or object to our processing of your Personal Data (where applicable).
• The right to withdraw your consent (if processing was based on consent) without affecting the lawfulness of processing before withdrawal.
• The right to lodge a complaint with a supervisory authority or data protection regulator.
  To exercise any of these rights or to ask questions about your Personal Data, please contact us (see Section 17 below). We may need you to verify your identity before we act on your request.

16. Cookies & Similar Technologies

Our website may place cookies and similar technologies (web beacons, pixel tags) on your device in order to collect technical/usage data (for example device/browser type, pages visited, preferences, interaction with content). Cookies help us improve our website, personalise our service and analyse usage. Where required by law, we will obtain your consent for such cookies. You can manage or disable cookies via your browser settings; however, disabling some cookies may affect website functionality.

17. Direct Marketing

With your consent where required, we may use your Personal Data to send you information about our services, offers or events that may be of interest. You may unsubscribe or optout of marketing communications at any time by contacting us or using the unsubscribe link in an email if provided.

18. Job Applications & Recruitment

If you apply for a job with us, we will process your application data (including any documents you submit) using secure channels. We’ll retain your application data for a period (for example six months) unless you consent to longer retention or we enter into a contract of employment.

19. Minors

Our services and website are not aimed at children under the legal age in Saudi Arabia. We do not knowingly collect Personal Data from minors without parental or guardian consent.

20. Social Media & Third Party Platforms

We maintain corporate presence on social media platforms. If you interact with us via those platforms, your Personal Data may be processed in accordance with this Policy and the platform’s applicable privacy policy. We recommend you review the privacy policies of those services.

21. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in law or our business practices. The updated version will be posted on our website, and the “last updated” date will be revised accordingly. We encourage you to review this Policy periodically.

22. Contact Us

If you have any questions, requests or complaints regarding this Policy or our processing of your Personal Data, please get in touch with us:

Business Gate Company
Address: Business Gate Company – Served offices شركة بوابة الأعمال لخدمات الأعمال – مكاتب عمل مشتركة
Email: info@bgate.net
Phone: +966 55 583 8308