Privacy Policy
C-BLOC is committed to conducting its operations in compliance with applicable data protection laws and to upholding the highest standards in safeguarding your personal information. This document outlines the types of personal data we collect, the reasons for collecting it, how we use and share it, our retention practices, and your rights in relation to your personal data.
Saudi Arabia Personal Data Protection Law (PDPL)
The Personal Data Protection Law (PDPL) governs how personal data is collected, processed, shared, and retained in the Kingdom of Saudi Arabia. It aims to ensure the privacy of individuals and regulate data processing practices. The law was enacted under Royal Decree No. M/19 (09/02/1443H – 16/09/2021) and amended by Royal Decree No. M/148 (05/09/1444H – 27/03/2023).
As a Data Controller, C-BLOC processes personal data lawfully and transparently, ensuring fairness, accuracy, and security in line with PDPL requirements. Adequate measures are implemented to protect personal data from unauthorized access, loss, or destruction.
Sources of Personal Data Collection
C-BLOC collects personal data from various sources, including:
Employment applications and onboarding processes.
Client interactions and contracts.
Vendor communications and transactions.
Government-authorized sources.
Registered users on our platforms.
Publicly available profiles (e.g., LinkedIn).
Reputable third parties (e.g., recruitment agencies).
Anonymous web activity via cookies.
Categories of Personal Data Collected
| Type | Examples |
|---|---|
| Personal | Name, nationality, gender, birth details, photo, family information. |
| Contact | Email, phone number, residential and permanent addresses. |
| Identity | National ID, Iqama, passport, driver’s license, visa documents. |
| Financial | Bank account info, payroll, expenses, and deductions. |
| Security | Criminal background and security checks. |
| Employment | Job title, education, certifications, work history. |
| CCTV/Video | Surveillance footage retained for up to 30 days. |
| Communications | Logs of business-related calls, emails, and meetings (audio/video). |
| Biometric | Facial recognition, fingerprints for access control. |
| Health | Medical history, insurance, leave requests, work injuries. |
| Transactions | Activity logs on C-BLOC systems and devices. |
Purpose of Data Collection
| Category | Purpose |
|---|---|
| Employees | Managing contracts, payroll, benefits, IT access, certifications, performance, training, and legal compliance. |
| Candidates | Evaluating qualifications, interview management, legal checks, onboarding. |
| Clients | Delivering services, preparing contracts, processing payments, collecting feedback. |
| Vendors | Procurement, payment processing, contract management, service evaluation. |
| Visitors | Access control, visit logistics, safety compliance. |
| Website Users | Improving UX, collecting analytics through cookies. |
Marketing Use of Personal Data
C-BLOC does not sell personal data or use it for unsolicited marketing.
Necessity of Data Provision
Mandatory data will be marked as required. Failure to provide such data may prevent C-BLOC from establishing or continuing a relationship.
Automated Processing
Personal data may be processed through automated systems for reminders or system integration. C-BLOC does not perform profiling or automated decision-making.
Retention Period
We retain data as long as necessary for legal, operational, or contractual purposes. Data may be preserved for audits, legal claims, or regulatory requests. Basic records of deletion requests may be kept to confirm compliance.
Protection Measures
C-BLOC employs encryption, anonymization, access controls, and physical security. Staff and partners must comply with strict confidentiality agreements. External providers are contractually obligated to meet our data protection standards.
In the event of a data breach, C-BLOC will notify affected individuals and authorities promptly.
Data Sharing
| Recipient | Purpose |
|---|---|
| Subsidiaries | Same purpose as outlined in this policy. |
| Recruiters | Recruitment, background, and medical checks. |
| Travel Agents | Booking travel and visa arrangements. |
| Vendors | Training, insurance, accommodation, IT services, audits. |
| Banks | Salary and reimbursement processing. |
| Emergency Contacts | In case of health or safety emergencies. |
| Government Entities | GOSI, Ministry of Labor, ZATCA, visa services, inspections. |
| Social Media | Employee recognition and brand promotion. |
| Legal Bodies | Court or government-mandated disclosures. |
| Others | Based on explicit consent or request. |
International Data Transfers
Data may be transferred outside Saudi Arabia to authorized service providers. We ensure adequate protection through contractual safeguards.
Children’s Data
C-BLOC does not knowingly collect data from individuals under 18, except when provided by employees for dependents’ services (e.g., insurance).
Legal or Safety-Based Disclosures
Data may be shared with authorities if legally required or necessary to protect life, health, or national security.
Your Rights
Under the PDPL, you have the right to:
Be informed about data collected and its usage.
Request corrections to inaccurate or outdated data.
Request deletion of your data.
Withdraw consent for data processing.
Contact Us
For questions or to exercise your data rights, contact:
Web Cookies
Cookies are used to enhance user experience and gather analytics. They do not access personal files on your device unless linked to your user profile upon login.
Data Collected via Cookies:
Browsing history and patterns.
Device IP, location, OS, and browser information.
Non-Compliance
Suspected data breaches must be reported immediately. Violations of this policy may result in disciplinary or legal action.
Policy Review
C-BLOC may update this document at any time. Updates are effective upon posting. Continued use of our services indicates acceptance of the updated terms.