Privacy Policy

Introduction & Ethical Commitment

At Abu Hatem Business Services, we recognize that privacy is the cornerstone of building sustainable and reliable business relationships. Protecting your personal and corporate data is not just a legal obligation we follow but a fundamental principle of our operations. This policy is governed by the Personal Data Protection Law applicable in the Kingdom of Saudi Arabia and aims to clarify how we collect, process, and protect information provided to us through our website or during the implementation of our administrative and technical services.

1. Information We Collect

We collect the minimum data necessary to provide our services with high professionalism, including:

Personal & Corporate Identity Information: Full name, job title, commercial registration number, and official entity addresses.
Technical & Administrative Contact Data: Email addresses, mobile numbers, and social media links for coordination purposes.
Technical & Sensitive Data: When requesting Cybersecurity Compliance certification or Vendor Code registration, we may need to review details of digital infrastructure or login credentials for official platforms (e.g., Aramco, SABIC, Etimad), treating this data with the utmost confidentiality.
Digital Usage Data: Cookies, IP addresses, and browser types to enhance the user experience on our website.

2. Data Usage Mechanisms

The information we collect is used for the following purposes:

Contractual Execution: Completing registration in supplier systems, designing websites, and developing applications.
Communication & Support: Responding to inquiries, providing after-sales technical support, and notifying you of order status updates.
Verification & Compliance: Ensuring the entity meets the standards required by government and private bodies when requesting compliance certificates.
Service Development: Analyzing anonymous data to improve our digital platforms' performance and innovate new services.

3. Data Protection & Information Security (Strict Protocols)

Given the nature of our services, which overlap with security systems, we apply extraordinary protection standards:

Advanced Encryption: All data transmitted through the site is encrypted using SSL protocols to prevent interception.
Software Firewalls: We use advanced protection systems to prevent cyberattacks and ensure database integrity.
Limited Access Policy: Only authorized employees who have signed strict non-disclosure agreements are allowed to access client data.
Secure Disposal: We delete sensitive data (such as temporary passwords) as soon as the intended purpose is fulfilled.

4. Third-Party Data Sharing

We emphasize our absolute commitment not to sell, rent, or trade your data with any marketing agency. Information is shared only in the following cases:

Official & Accredited Bodies: When submitting vendor code requests or registering on government platforms at your explicit request.
Technical Service Providers: Such as hosting services or payment gateways, who adhere to the same privacy standards.
Legal Compliance: If required by the regulations and laws in force in the Kingdom of Saudi Arabia.

5. Client Rights (Data Subject Rights)

Under data protection regulations, you have the right to:

Access your data registered with us and request a copy.
Correct any inaccurate information or update outdated data.
Request the deletion of personal data once the contractual purpose has ended.
Object to the use of data for specific purposes or withdraw consent at any time.

6. Amendments to the Privacy Policy

We reserve the right to update this policy periodically to align with technical developments or legislative changes. Clients will be notified of any material changes via email or through a clear notice on the website