Information security and privacy are a cornerstone of our critical national projects
As a partner in operating strategic infrastructure and facilities in Makkah, we apply the highest standards of encryption and cyber isolation to protect the confidentiality of partner and contracting entity information, in line with National Cybersecurity Authority (NCA) guidelines.
Introduction and regulatory commitment
Technique City for Projects, Contracting and Environmental Solutions (hereinafter "Technique City" or "we") is committed to respecting the privacy of all clients, government representatives, contracting partners and suppliers. This document sets out the rules we follow when collecting, processing and storing personal data, in full accordance with the Personal Data Protection Law issued by Royal Decree No. (M/19), as amended by Royal Decree No. (M/148), and its implementing regulations in force within the Kingdom of Saudi Arabia.
Categories of data we collect
Given the nature of our work in infrastructure, operational contracting and Holy Sites projects, data collection is strictly confined to the principle of "data minimisation" for completing professional transactions and projects, and includes:
1. Contact data for partner entity representatives
Full name, job title, the name of the entity, government department or affiliated company, business email address, and mobile number, for technical and contractual field coordination.
2. Quotation and tender data (RFP / RFQ)
Preliminary drawings, project site location data, quantity estimates, and commercial registration records and licences attached within the bid and tender submission platform.
3. Operation and field maintenance contract data
Data on supervisors and field engineers authorised to enter work facilities, security clearance records for restricted sites in the Holy Sites, and licence data for heavy equipment and fleet operation.
4. Technical and digital browsing data
Internet protocol (IP) address, browser type, operating system, and digital interaction logs with the online portal, for vulnerability diagnosis and cyber prevention.
Legitimate purposes of processing
No processing of your data takes place without an explicit legal basis — whether prior consent, the conclusion and performance of a contract, or the fulfilment of regulatory obligations imposed on contractors accredited by the Holy Capital Municipality and the Ministry of Municipalities and Housing.
Reviewing tender documents and bids, issuing purchase orders and bills of quantities, and issuing certified project payment applications.
Obtaining operating permits for equipment and personnel at sensitive sites and in the Grand Mosque area during the Hajj and Umrah seasons.
Complying with the e-invoicing system approved by the Zakat, Tax and Customs Authority (ZATCA) and retaining official accounting records.
Monitoring occupational health and safety (OH&S) standards and investigating field incidents or environmental hazards as soon as they occur.
Data protection and restricted sharing
We uphold a strict policy confirming that: we never sell, rent or trade any personal data whatsoever to any commercial or marketing third parties. Data is shared only in the following lawful cases:
Technique City applies advanced AES-256 encryption to all databases at rest and the TLS 1.3 protocol in transit, alongside role-based access control (RBAC) and periodic scanning for software vulnerabilities.
Statutory rights of the data subject
The Personal Data Protection Law and its implementing regulations guarantee data subjects clear rights, which you may exercise by contacting our compliance officer:
To know the legal basis for collecting your data, the specific purpose of its processing and how it is retained.
To obtain a legible, clear copy of your personal data recorded in our corporate systems.
To correct any inaccurate or incomplete information without undue delay.
To request destruction of data once its purpose has ended, unless accounting or contractual regulations require its retention.
Data protection officer and compliance officer
Technique City has appointed a compliance officer and an accredited Data Protection Officer (DPO) to oversee governance practices periodically and respond to stakeholder enquiries.
Kingdom of Saudi Arabia, Makkah Al-Mukarramah
Al-Nuzha District, Qasr Al-Diyafa Street, Al-Tasan Commercial Complex
5th Floor — Office 506, Legal Affairs and Compliance Department
Technique City's data processing practices are supervised by the Saudi Data and Artificial Intelligence Authority (SDAIA) and the National Data Management Office (NDMO).