Privacy Policy

Bright Solutions Contracting Co.
(In Compliance with Saudi Personal Data Protection Law – PDPL)

Bright Solutions Contracting Co. (“Bright Solutions”, “we”, “our”, or “us”) is committed to protecting personal data in accordance with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations issued by the Saudi Data & AI Authority (SDAIA).

This Privacy Policy explains how we collect, use, store, share, and protect personal data when you visit www.brightsolutionsltd.com or engage with our services.

1. Legal Basis for Processing (PDPL Compliance)

We process personal data under the following lawful bases as permitted by PDPL:

• Your explicit consent

• Performance of a contractual or service obligation

• Compliance with legal or regulatory requirements

• Legitimate business purposes that do not conflict with your rights

2. Personal Data We Collect

a) Personal Identification Data

• Full name

• Email address

• Phone number

• Company name

• Job title

b) Communication Data

• Messages, inquiries, and correspondence sent via forms, email, or phone

c) Technical & Usage Data

• IP address

• Browser type and device information

• Website interaction data

• Date, time, and pages visited

We only collect data that is necessary, relevant, and limited to its intended purpose, as required by PDPL.

3. Purpose of Data Collection

Personal data is collected and processed for the following purposes:

• Responding to inquiries and providing contracting or subcontracting services

• Managing business relationships with clients, suppliers, and partners

• Improving website functionality and user experience

• Ensuring operational efficiency and service quality

• Compliance with Saudi laws, regulations, and contractual obligations

• Maintaining security, fraud prevention, and system integrity

4. Consent

Where required by PDPL:

• We obtain explicit consent before collecting or processing personal data

• Consent may be withdrawn at any time by contacting us

• Withdrawal of consent will not affect prior lawful processing

5. Data Storage & Localization

In accordance with PDPL requirements:

• Personal data is stored securely within the Kingdom of Saudi Arabia, unless regulatory approval is obtained for cross-border transfer

• Data is retained only for the period necessary to fulfill its purpose or legal requirements

6. Data Sharing & Disclosure

We do not sell or trade personal data.

Personal data may be shared only with:

• Authorized service providers (IT, hosting, or operational support) under strict confidentiality agreements

• Government authorities when legally required

• Auditors, legal advisors, or regulators as permitted under Saudi law

All third parties are required to comply with PDPL standards.

7. Cross-Border Data Transfer

Personal data will not be transferred outside Saudi Arabia unless:

• Approved by the competent authority (SDAIA)

• Necessary to fulfill a contractual or legal obligation

• Adequate safeguards are in place to protect personal data

8. Data Security Measures

We implement appropriate technical and organizational security measures, including:

• Access control and authorization protocols

• Secure servers and data encryption where applicable

• Regular system monitoring and risk assessments

• Staff training on data confidentiality and protection

Despite our best efforts, no system can guarantee absolute security.

9. Data Subject Rights (PDPL Rights)

Under PDPL, you have the right to:

• Access your personal data

• Request correction of inaccurate or incomplete data

• Request deletion of personal data (where legally permissible)

• Withdraw consent at any time

• Be informed about data collection and processing activities

Requests can be made using the contact details below.

10. Cookies & Website Analytics

Our website may use cookies to:

• Improve website functionality

• Analyze usage patterns

• Enhance user experience

You may control cookies via your browser settings.

11. Third-Party Websites

Our website may include links to third-party websites. Bright Solutions Contracting Co. is not responsible for their privacy practices. Users should review third-party privacy policies independently.

12. Policy Updates

We reserve the right to update this Privacy Policy to remain compliant with PDPL or operational changes. Any updates will be published on this page with a revised effective date.

13. Contact Information (Data Controller)

For PDPL-related inquiries or to exercise your rights, contact:

Bright Solutions Contracting Co.
📍 Jaafar Bin Sawabah St., Al Rimal District, Riyadh, KSA
📧 Email: info@brightsolutionsltd.com
📞 Phone: +966 58 168 1668
🌐 Website: www.brightsolutionsltd.com