Privacy Policy
WHO WE ARE?
Crystal Facilities Management is a company registered in the Kingdom of Saudi Arabia and is the controller of personal data collected through this website under the Saudi Personal Data Protection Law (PDPL).
WHOSE DATA DO WE HOLD?
We may hold data about the following people:
- Employees • Customers • Suppliers and service providers • Advisers, consultants and other professional experts • Complainants and enquirers
WHAT DATA WE COLLECT?
We will only collect information from you that is relevant to the matter that we are dealing with. In particular we may collect the following information from which is defined as ‘personal data’:
- Personal details • Financial details • Business activities of the person whose details we are processing
Basis for processing
The basis on which we process your personal data is one or more of the following:
- It is necessary for the performance of our contract with you • It is necessary for us to comply with a legal obligation • It is in our legitimate interest to do so • You have given us your consent (this can be withdrawn at any time by contacting us)
HOW WE USE YOUR DATA?
We may use your information for the following purposes:
- Provision of our facilities management services • To contact you to inform you of our services • Maintaining accounts and records • Supporting and managing staff • Trade references
WHO WILL WE SHARE YOUR INFORMATION WITH?
Under our Code of Conduct there are very strict rules about who we can share your information with and this will normally be limited to other people who will assist with your matter.
If you do not pay our invoices we may also disclose your information to debt collection agencies and the relevant Saudi courts and enforcement bodies in line with collecting the debt.
HOW LONG WILL WE KEEP YOUR INFORMATION FOR?
- We will normally keep your information throughout the period of time that we do work for you and afterwards for as long as we are required to do so by applicable law and regulation • In some cases we may retain your information for a longer period of time and we will advise you of this at the time • More information is available on request
Security arrangements
We shall ensure that all the information that you provide us is kept secure using appropriate technical and organisation measures • In the event of a personal data breach we have procedures in place to ensure that the effects of such a breach are minimised and shall notify the relevant Saudi authority and you as appropriate
WHAT RIGHTS DO YOU HAVE?
You have the following rights under the Saudi Personal Data Protection Law (PDPL):
- Right to be informed • Right of access • Right of rectification • Right to erasure • Right to restriction of processing • Right to withdraw consent at any time
Right of access
You have the right to see the information we hold about you • To access this, you need to provide a request in writing to us, together with proof of identity • We will usually process your request free of charge and within the timeframe required under the PDPL
Right to erasure
You have the right to ask us to erase your personal data in certain cases (details available under the applicable provisions of the Saudi Personal Data Protection Law) • We will deal with your request without undue delay but reserve the right to refuse to erase information that we are required to retain by law or regulation • To exercise your right to erasure please contact us using the details below
WHO CAN YOU COMPLAIN TO?
If you are unhappy about how we are using your information or how we have responded to your request, please contact us using the details below. If your complaint remains unresolved, you may contact the Saudi Data & AI Authority (SDAIA), the regulator responsible for personal data protection in the Kingdom of Saudi Arabia.
Third-Party Processors
We may use carefully selected third-party service providers to support our operations. Any such providers are required to protect your personal data in line with the Saudi Personal Data Protection Law (PDPL).
For any privacy-related queries, please contact us via our Contact Us page.
Crystal Facilities Management, Riyadh, Kingdom of Saudi Arabia. Tel: 011 – 2427440
