Privacy Notice
Home

INTRODUCTION

Construct Direct (herein referred to as “Construct Direct”, also indicated as “us”, “we”, or “our”) is committed to respecting and protecting the privacy of your personal or sensitive data in accordance with the laws and regulations in force in the Kingdom of Saudi Arabia, including but not limited to the Personal Data Protection Law (PDPL). We will only use your personal information to deliver the required services.

This Privacy Notice applies to all visitors and users (hereinafter referred to as “You”, “User”, or “Data Subject”) who access or use our website.

The intent of this Privacy Notice is to inform you about the following:

  • The type of information we may collect about you and the purpose for collecting it when you use our website.
  • The use of the information collected from you and who we share it with.
  • Your rights in regard to your personal data.

PERSONAL DATA COLLECTION

Construct Direct may generally collect and obtain the following types of information directly or indirectly when you interact with our website, other social media platforms, telephone, email, or by writing to us:

Information you give us

We may collect personal data directly from you as part of providing services on our website, such as email address, phone number, position, first name, last name, your CV, birth date, nationality, or any other personal information you submit through our website.

Information collected automatically

We may automatically collect certain personal information that your browser sends whenever you visit our website, such as information collected through cookies or other tracking technologies.

We may also collect personal data that is mandatory for us to provide essential services, and failure to provide such personal data may result in non-fulfillment of these services. Additionally, we may collect optional personal data used to improve services and user experience, which does not affect service fulfillment.

For more information about our use of cookies, please refer to our Cookie Notice.

PERSONAL DATA USAGE

Construct Direct may use your personal data collected directly or indirectly to perform its duties and responsibilities as an organization. This may include:

  • Creating an account, where required, allowing you to log in using a username and password and access services provided on the website.
  • Processing data submitted during registration, CV accounts, job applications, visited job listings, and messages sent or received through the website or a third party.
  • Resolving queries you submit that require making your personal data accessible to authorized members of our support team.
  • Performing quality checks and enhancing the services we provide.
  • Complying with legal and regulatory obligations.

PERSONAL DATA DISCLOSURE

Construct Direct will not share your personal information with third parties for marketing purposes. We reserve the right to disclose your personal information in the following cases:

  • You have agreed to the disclosure of your personal data.
  • The personal data is collected from a publicly available source.
  • The entity requesting disclosure is a public entity and the request is for security purposes, implementation of another law, or judicial requirements in accordance with applicable regulations.
  • The disclosure is necessary to protect public health or safety, or the life or health of specific individuals.
  • The disclosure does not lead to identification of you or any other individual.
  • The disclosure is necessary to achieve legitimate interests of Construct Direct, without prejudice to your rights and interests.

No personal data submitted through our website is transferred outside the Kingdom of Saudi Arabia. Any transfer of personal data outside the Kingdom for purposes not covered by this Privacy Notice will be conducted in accordance with the PDPL, its implementing regulations, and other applicable laws and regulations.

YOUR RIGHTS

Construct Direct makes reasonable efforts to guarantee your rights within the limits stipulated by the applicable laws and regulations of the Kingdom of Saudi Arabia, including:

  • Right to be Informed: You have the right to be informed about the collection and use of your personal data, including purposes and sharing.
  • Right to Request Access: You have the right to access your personal data in a clear and readable format and obtain a copy, subject to PDPL limitations.
  • Right to Update: You have the right to request correction, completion, or updating of your personal data.
  • Right to Request Destruction: You may request destruction of your personal data when:
    • The data is no longer required for the purpose it was collected.
    • You have validly objected to its use.
    • Processing violates applicable laws or legal obligations.
    • You have withdrawn your consent.
  • Right to Withdraw Consent: You may revoke consent for processing your personal data unless otherwise required by law or judicial order.
  • Right to File a Complaint: You may file a complaint with the competent authority if your rights are not met.

Requests to exercise these rights may be submitted through the Data Subject Request form.

LEGAL BASIS FOR PROCESSING PERSONAL DATA

The lawful bases for processing personal data include:

  • Your consent for a specific, communicated purpose.

Personal data may also be processed without consent in the following cases:

  • Where processing achieves a definite interest for the user and contacting the user is difficult or impossible.
  • Where processing is required under a contractual agreement or applicable laws.
  • Processing required for judicial or security purposes by a public entity.
  • Where the personal data is publicly available.
  • Pursuit of legitimate interests for Construct Direct or the user.
  • Compliance with applicable regulations and royal decrees.
  • Protection of vital interests of individuals.
  • Achievement of public interest or fulfillment of an official authority request.
  • Execution of an agreement to which the user is a party.

PERSONAL DATA STORAGE, RETENTION AND DESTRUCTION

Personal data is stored on servers owned by Construct Direct, and third parties such as cloud service providers (inside or outside the Kingdom) may be engaged for data storage.

Construct Direct employs best-in-class technologies in accordance with the policies and regulations of the National Cybersecurity Authority and international standards to ensure personal data security, prevent unauthorized access, and mitigate cybersecurity risks.

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected and is destroyed thereafter, unless longer retention is required to comply with legal obligations, court orders, or applicable regulations.

PERSONAL DATA SECURITY

Construct Direct takes appropriate measures to protect your personal data against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use.

While we strive to use industry-standard security measures, no method of transmission over the internet is completely secure, and absolute security cannot be guaranteed. In the event of a data breach, Construct Direct will comply with applicable data breach notification requirements. Security measures are reviewed periodically to remain aligned with regulatory and security developments.