Privacy policy

Dabouq Trading Company operates this website (dabouq.com.sa) and is headquartered in Riyadh, Kingdom of Saudi Arabia.

In this policy, Dabouq Trading Company is referred to as “Dabouq”, “the Company” or “we”.

The Company is the controller responsible for processing the personal data collected through this website, in accordance with the applicable laws and regulations.

This policy applies to personal data collected through the Dabouq website, including data you provide through the contact and careers forms and other services available on the website.

The website may contain links to other websites or services, including the websites of businesses or brands related to Dabouq. When you move to another website or service, your data may be subject to that website’s or service’s own privacy policy.

The Company is not responsible for the privacy practices of independent websites or services that it does not operate.

Depending on how you use the website, we may collect personal data that you provide to us directly, including:

• Identity and contact data, such as your name, email address and mobile number.
• Data about the organization you represent, such as the company or organization name, city or country, and website.
• Information you provide in enquiries or messages sent to us.
• Job application data, such as city of residence, years of experience, the position applied for, your CV, and any professional information the applicant chooses to provide.
• Any other data you choose to provide in forms or correspondence.
• Certain technical data needed to operate and protect the website and to improve its performance and security.

The data required may vary depending on the type of request or service.

Where applicable, the forms indicate which data is required to complete the request and which is optional. We may be unable to process your request or provide the requested service if you do not provide the data needed for it.

We advise against sending unnecessary personal data, especially sensitive data, ID numbers or official documents, unless they are clearly required to complete the service or request.

The Company may use personal data for the following purposes:

• Receiving, responding to and following up on enquiries and requests.
• Providing the information or services requested by the user.
• Managing and assessing job applications and communicating with applicants.
• Managing relationships with clients and with the parties that contact the Company.
• Operating, maintaining and developing the website, and improving its performance and the user experience.
• Protecting the website, systems and users from misuse, unlawful use or fraudulent attempts.
• Keeping the records needed for operational, administrative or regulatory purposes.
• Complying with laws, regulations and requests issued by the competent authorities.
• Protecting the Company’s rights and interests where the law permits.
• Any other purposes directly related to the purpose for which the data was collected, as permitted by the applicable laws and regulations.

The Company does not use personal data for purposes incompatible with the purpose for which it was collected, except as permitted by law or after meeting the necessary regulatory requirements.

The Company does not sell your personal data, and does not use it for direct marketing where your consent is legally required without first obtaining it.

The Company processes personal data on the legal basis appropriate to each case.

This may include your consent where consent is required, taking steps at your request, fulfilling legal obligations, pursuing a legitimate interest of the Company where the law permits and after meeting the relevant regulatory requirements, or any other basis permitted by the applicable laws and regulations.

Access to personal data within the Company is limited to authorized persons whose duties require it.

The Company may use service providers or other parties to help it operate the website or systems or provide certain services. Their access to the data is limited to what is needed to perform the requested services and is subject to the relevant regulatory requirements.

Data may also be shared with Dabouq’s business units or related parties when this is necessary to process the user’s request or provide the requested service, in accordance with the applicable laws.

The Company may disclose personal data when disclosure is required or permitted by law, in response to a request from a competent authority, or to protect the Company’s rights or interests as permitted by law.

The Company does not sell personal data to third parties.

Personal data is processed in accordance with the requirements and controls set out in the laws and regulations in force in the Kingdom of Saudi Arabia.

Where the nature of the services or systems used requires personal data to be transferred or processed outside the Kingdom, the Company complies with the regulatory requirements and controls that apply to transferring personal data outside the Kingdom.

The Company keeps personal data for as long as needed to achieve the purposes for which it was collected, taking into account the nature of the data, the purpose of processing, and the relevant operational and regulatory requirements.

The Company may keep some data for longer where this is required or permitted by law, or where it is needed to establish, exercise or defend legal rights.

When the purpose of keeping the data has ended and there is no legal reason to keep it, the Company takes appropriate steps to destroy it or to remove whatever identifies its owner, in accordance with the regulatory requirements.

The Company takes appropriate organizational and technical measures to protect personal data from unauthorized access, use, disclosure, alteration, loss or destruction.

The Company also limits access to data according to permissions and the actual need to use it.

Although appropriate measures are taken, no electronic means or technical system can be guaranteed to be entirely free of risk. The Company therefore applies measures proportionate to the nature of the data and the risks involved in processing it.

If an incident involving personal data occurs, the Company handles it in accordance with the procedures and requirements set out in the applicable laws and regulations.

You have the rights granted to you under the Personal Data Protection Law and its regulations, which include, as applicable:

• Right to be informed: to know how your personal data is collected, and the legal basis and purpose of processing it.
• Right of access: to request access to your personal data in accordance with the regulatory controls.
• Right to obtain your data: to request a copy of your personal data in a clear and readable format, as the law provides.
• Right to correction: to request that your personal data be corrected, completed or updated.
• Right to destruction: to request that your personal data be destroyed in the cases the law provides.
• Right to withdraw consent: to withdraw your consent where consent is the legal basis for processing, in accordance with the relevant regulatory controls.
• Right to complain: to file a complaint with the competent authority in accordance with the applicable procedures and laws.

Exercising these rights is subject to the cases, controls and exceptions set out in the relevant laws and regulations.

To exercise any of your rights over your personal data, contact us by email: info@dabouq.com.sa

We recommend writing “Personal data request” in the subject line to help us process your request.

The Company may ask for additional information to verify the requester’s identity before acting on any request involving personal data, to protect the data from unauthorized access or disclosure.

Requests are processed within the periods and procedures set out in the applicable laws and regulations.

Data submitted in job applications is used to assess the application, consider the applicant’s suitability for the role, and communicate with the applicant and manage the hiring process.

An application may be considered for other suitable roles where this is permitted under the relevant laws and requirements.

Applicants are responsible for ensuring that the information they provide is correct and accurate.

We advise against including in your CV or attachments personal data that is unrelated or unnecessary to the hiring process, such as health data, ID numbers or official documents, unless the Company clearly requests them for a legitimate purpose.

The website may contain links to websites, platforms or services operated by other parties.

Including these links does not mean that Dabouq is responsible for the privacy policies, data-processing practices or content of those independent websites and services.

We recommend reviewing the privacy policy of any external website or service before providing your personal data to it.

The Company may update this policy from time to time to reflect changes in its business, services, practices or regulatory requirements.

The updated version will be published on this page and the last-updated date will be revised where applicable.

If there are material changes that require notice or additional action under the applicable laws, the Company will take the necessary steps in accordance with the regulatory requirements.

For any question about this privacy policy or the processing of your personal data, you can contact: