Privacy Policy

Introduction

Saudi Iron and Steel Company (“Hadeed”) and its subsidiaries uphold a strict commitment to safeguarding and respecting your personal information while ensuring adherence to all relevant privacy laws and regulations. Hadeed will only collect and process your personal data when permitted by applicable regulations, and where necessary, with your explicit consent. The company ensures that personal data is handled in a lawful, fair, and transparent manner.

 

This Privacy Policy explains the types of personal data collected, the purposes and methods of processing, the reasons for data collection, how you can manage or delete your personal information, exercise your rights, and the contact details for further information or to raise complaints.

 

Typically, Hadeed acts as the data controller (or equivalent under applicable privacy laws) when determining how and why your personal data is used. In cases where Hadeed operates as a data processor—such as when providing services to a client—the processing of personal data will be carried out in accordance with the client’s written instructions, making them the primary data controller. In such instances, Hadeed will assist the relevant data controller in ensuring compliance with your privacy rights, as mandated by applicable laws.

 

Your privacy is of utmost importance to us. Please review and familiarize yourself with this Privacy Policy.

 

What Personal Data Do We Collect and How Do We Collect It?

Hadeed collects personal data in several ways, including:

 

• Your name or other unique identifiers (e.g., phone number, identification number, date of birth, email address, etc.). Hadeed uses this information for communication purposes, including responding to inquiries or sending marketing communications (if you have opted in).

• On the ‘Contact Us’ page: Hadeed collects the information you provide to respond to general or business inquiries on your behalf or on behalf of your company.

• Website interaction data: Hadeed collects information automatically, such as IP addresses, pages visited, and time spent on the site using cookies and web beacons.

• Career portal: Hadeed collects employment and educational data when you submit job applications.

• Email communications: Hadeed tracks marketing email interactions (e.g., when emails are opened, links are clicked) if you have subscribed to such communications.

• Visitors to Hadeed premises or event attendees: Security personnel may collect identification details (e.g., National ID, Passport) as part of identity verification procedures required by law.

• Video surveillance: CCTV footage is recorded and monitored solely by the Industrial Security Department personnel at all Hadeed facilities.

• Financial information: This may include bank account details, salary information, and invoices.

• Information from third-party sources: Hadeed may receive data from entities such as data vendors, insurance providers, background check services, and social media platforms to verify or complete your personal information.

 

Purpose and Lawful Basis for Processing Personal Data

Hadeed processes personal data when there is a legal basis to do so, including:

 

• Consent: When required, you will have the option to provide consent, which can be withdrawn at any time. Implied consent may also apply as permitted by law.

• Contract: Processing personal data is necessary when fulfilling a contract with you, such as when services are provided.

• Legal Obligation: Hadeed may process data to meet regulatory obligations, such as anti-money laundering checks, fraud prevention, and compliance with sanctions laws.

• Legitimate Interests: When processing data is necessary for Hadeed’s or third parties’ legitimate interests, such as conducting market research or IT security measures, provided these interests do not override your rights. If you have questions regarding this, you can contact us for more information.

 

If other privacy laws apply, the legal basis for processing may differ, and Hadeed will ensure compliance with the relevant regulations.

 

Personal Data Security

Hadeed uses industry-standard security measures to safeguard your personal data, including:

 

• Restricting access to personal data to employees on a “need-to-know” basis.

• Implementing physical, electronic, and administrative measures to protect against unauthorized access, alteration, or loss.

• Enforcing disciplinary action against employees who misuse personal data.

• Requiring third-party vendors acting as data processors to implement similar security standards.

 

International Transfers of Personal Data

Depending on the type and nature of the data, Hadeed may transfer personal data outside your local jurisdiction. In such cases, Hadeed ensures that all data processors outside the jurisdiction comply with necessary legal and security measures before any data transfer occurs.

 

How We Share Your Personal Data

Hadeed may store personal data with third-party cloud providers who are restricted from accessing or using the data beyond storage purposes. Hadeed may share data with service providers (e.g., travel, insurance, or administrative services) for business purposes. Data may also be shared with regulators if required by law or in corporate transactions, such as acquisitions or reorganizations.

 

Data Storage and Retention

Hadeed retains personal data in line with its retention policies, considering business needs and legal requirements. The duration for which personal data is kept depends on the nature and sensitivity of the data and the risk of harm from its unauthorized use or disclosure. If you wish to know more about the storage and retention of your data, you may contact Hadeed’s Data Protection Officer.

 

Data Subject Rights

Depending on your location and local laws, you may have the right to:

 

• Access your personal data and request information about how it is processed.

• Request correction or deletion of inaccurate or incomplete data.

• Request data erasure under certain circumstances.

• Restrict or object to data processing activities.

• Withdraw previously given consent. This occurs in accordance with laws applicable to the situation. Any processes that occurred before consent withdrawal are still considered lawful, and the withdrawal would not affect its lawfulness.

 

9. Contact Us

If you experience issues with Hadeed’s services or wish to exercise any of your rights outlined in this Privacy Policy, please reach out via our “Contact Us” page.