Introduction

Saudi Iron and Steel Company (“Rajhi Steel”) and its subsidiaries uphold a strict commitment to safeguarding and respecting your personal information while ensuring adherence to all relevant privacy laws and regulations. Rajhi Steel will only collect and process your personal data when permitted by applicable regulations, and where necessary, with your explicit consent. The company ensures that personal data is handled in a lawful, fair, and transparent manner.

This Privacy Policy explains the types of personal data collected, the purposes and methods of processing, the reasons for data collection, how you can manage or delete your personal information, exercise your rights, and the contact details for further information or to raise complaints.

Typically, Rajhi Steel acts as the data controller (or equivalent under applicable privacy laws) when determining how and why your personal data is used. In cases where Rajhi Steel operates as a data processor—such as when providing services to a client—the processing of personal data will be carried out in accordance with the client’s written instructions, making them the primary data controller. In such instances, Rajhi Steel will assist the relevant data controller in ensuring compliance with your privacy rights, as mandated by applicable laws.

Your privacy is of utmost importance to us. Please review and familiarize yourself with this Privacy Policy.

What Personal Data Do We Collect and How Do We Collect It?

Rajhi Steel collects personal data in several ways, including:

Your name or other unique identifiers (e.g., phone number, identification number, date of birth, email address, etc.). Rajhi Steel uses this information for communication purposes, including responding to inquiries or sending marketing communications (if you have opted in).
On the ‘Contact Us’ page: Rajhi Steel collects the information you provide to respond to general or business inquiries on your behalf or on behalf of your company.
Website interaction data: Rajhi Steel collects information automatically, such as IP addresses, pages visited, and time spent on the site using cookies and web beacons.
Career portal: Rajhi Steel collects employment and educational data when you submit job applications.
Email communications: Rajhi Steel tracks marketing email interactions (e.g., when emails are opened, links are clicked) if you have subscribed to such communications.
Visitors to Rajhi Steel premises or event attendees: Security personnel may collect identification details (e.g., National ID, Passport) as part of identity verification procedures required by law.
Video surveillance: CCTV footage is recorded and monitored solely by the Industrial Security Department personnel at all Rajhi Steel facilities.
Financial information: This may include bank account details, salary information, and invoices.
Information from third-party sources: Rajhi Steel may receive data from entities such as data vendors, insurance providers, background check services, and social media platforms to verify or complete your personal information.

Purpose and Lawful Basis for Processing Personal Data

Rajhi Steel processes personal data when there is a legal basis to do so, including:

Consent: When required, you will have the option to provide consent, which can be withdrawn at any time. Implied consent may also apply as permitted by law.
Contract: Processing personal data is necessary when fulfilling a contract with you, such as when services are provided.
Legal Obligation: Rajhi Steel may process data to meet regulatory obligations, such as anti-money laundering checks, fraud prevention, and compliance with sanctions laws.
Legitimate Interests: When processing data is necessary for Rajhi Steel’s or third parties’ legitimate interests, such as conducting market research or IT security measures, provided these interests do not override your rights. If you have questions regarding this, you can contact us for more information.

If other privacy laws apply, the legal basis for processing may differ, and Rajhi Steel will ensure compliance with the relevant regulations.

Personal Data Security

Rajhi Steel uses industry-standard security measures to safeguard your personal data, including:

Restricting access to personal data to employees on a “need-to-know” basis.
Implementing physical, electronic, and administrative measures to protect against unauthorized access, alteration, or loss.
Enforcing disciplinary action against employees who misuse personal data.
Requiring third-party vendors acting as data processors to implement similar security standards.

International Transfers of Personal Data

Depending on the type and nature of the data, Rajhi Steel may transfer personal data outside your local jurisdiction. In such cases, Rajhi Steel ensures that all data processors outside the jurisdiction comply with necessary legal and security measures before any data transfer occurs.

How We Share Your Personal Data

Rajhi Steel may store personal data with third-party cloud providers who are restricted from accessing or using the data beyond storage purposes. Rajhi Steel may share data with service providers (e.g., travel, insurance, or administrative services) for business purposes. Data may also be shared with regulators if required by law or in corporate transactions, such as acquisitions or reorganizations.

Data Storage and Retention

Rajhi Steel retains personal data in line with its retention policies, considering business needs and legal requirements. The duration for which personal data is kept depends on the nature and sensitivity of the data and the risk of harm from its unauthorized use or disclosure. If you wish to know more about the storage and retention of your data, you may contact Rajhi Steel’s Data Protection Officer.

Data Subject Rights

Depending on your location and local laws, you may have the right to:

Access your personal data and request information about how it is processed.
Request correction or deletion of inaccurate or incomplete data.
Request data erasure under certain circumstances.
Restrict or object to data processing activities.
Withdraw previously given consent. This occurs in accordance with laws applicable to the situation. Any processes that occurred before consent withdrawal are still considered lawful, and the withdrawal would not affect its lawfulness.

Contact Us

If you experience issues with Rajhi Steel’s services or wish to exercise any of your rights outlined in this Privacy Policy, please reach out via our “Contact Us” page.