Industrial Conveyor Belt, Conveyor belt, Conveyor system solutions Supplier - BEDROCK

BEDROCK INDUSTRIAL COMPANY PRIVACY & DATA PROTECTION POLICY (FINAL VERSION)

Update Time: 2025

Effective Time: 2025 to Permanent

We know that data privacy is a top issue today, and we want you to enjoy your interaction with us whilst knowing that we value your Personal Data and that we protect it. Here you will find an overview of how we process your Personal Data, the purposes for which we process it, and how you benefit. You’ll also see what your rights are and how you can contact us.

Updates to this Privacy Policy

As business and technology evolves, we might need to change this Privacy Policy. We encourage you to regularly review this Privacy Policy to make sure you are up-to-date with how BEDROCK INDUSTRIAL COMPANY is using your Personal Data.

Aged under 13?

If you’re under the age of 13 we kindly ask you to wait to be a bit older to interact with us or ask a parent or guardian to contact us! We can’t collect and use your Personal Data without their agreement.

1. CORPORATE COMMITMENT & IDENTITY

BEDROCK INDUSTRIAL COMPANY (hereinafter referred to as "BEDROCK," "the Company," "we," "us," or "our"), as the Data Controller, is deeply committed to safeguarding the integrity and confidentiality of personal and corporate data. This policy establishes a robust framework for data processing activities across our global operations, with a primary focus on the Gulf Cooperation Council (GCC) markets. We adhere to the highest regional standards, including the Saudi Personal Data Protection Law (PDPL) and other applicable international data protection frameworks.

2. DETAILED DATA COLLECTION CATEGORIES

In the context of industrial B2B commerce, we collect data categorized as follows:

3. MULTI-LAYERED PROCESSING PURPOSES

We process your Personal Data, including any sensitive personal data that you have provided to us with your consent, for the following purposes:

• Contractual Execution: To facilitate industrial equipment procurement, custom engineering designs, and end-to-end supply chain management.

• Regulatory Compliance: To satisfy the requirements of GCC tax authorities (including ZATCA), customs e-portals, and international anti-money laundering (AML) standards.

• Logistics Optimization: To provide accurate delivery of heavy-duty equipment to specific project sites and industrial zones.

• Business Intelligence: To enhance our digital platforms based on anonymized professional usage patterns.

• Communication & Query Handling: To communicate with you, answer your queries and provide you with communications about BEDROCK INDUSTRIAL COMPANY and our products.

• Business Management: To manage our systems and finances, conduct investigations, exercise legal rights, and support the sale or transfer of any relevant part of our business (if applicable).

We combine your Personal Data from all sources so that we can understand you better to improve and personalize your experience when interacting with us.

4. DATA SHARING & THIRD-PARTY RELATIONSHIPS

We do not monetize your data. Disclosures are limited to the following recipients, subject to appropriate security and confidentiality protections:

• Companies within the BEDROCK INDUSTRIAL COMPANY where required for our legitimate interests or with your consent.

• Global and Regional Logistics Providers: For complex shipping and site-delivery coordination.

• Financial Institutions: For secure payment settlement and credit verification.

• IT & Infrastructure Service Providers: Secure cloud nodes hosting our CRM and business operations platforms.

• Legal & Audit Advisors: To maintain corporate governance and handle potential dispute resolutions.

• Third parties engaged by us to provide services such as administering BEDROCK INDUSTRIAL COMPANY websites, applications and services (e.g. features, programs, and promotions) available to you.

• Credit reporting agencies/debt collectors, where permitted by the law and if we need to verify your creditworthiness (e.g. if you choose to order with invoice) or collect outstanding invoices.

• Relevant public agencies and authorities, if required to do so by law or a legitimate business interest.

5. INTERNATIONAL DATA FLOWS

As an international supplier, your data may be processed across our regional headquarters in Saudi Arabia and other GCC hubs. We employ Standard Contractual Clauses (SCCs) and advanced encryption to ensure that such flows remain compliant with regional data sovereignty requirements and the Saudi PDPL.

6. DATA SUBJECT STATUTORY RIGHTS

BEDROCK ensures the full exercise of your rights under applicable laws (including the Saudi PDPL), including:

• Right of Access & Portability: Obtain structured, machine-readable copies of your professional data.

• Right to Rectification: Ensure your corporate identifiers and contact details remain current.

• Right to Destruction (Erasure): Request permanent removal of data once the statutory retention period has expired.

• Right to Object & Restrict: Limit processing activities during the resolution of any discrepancies.

• Right to Withdraw Consent: You may withdraw your consent to data processing at any time, without affecting the legality of processing conducted before the withdrawal.

• Right to Lodge a Complaint: If you believe your data rights have been infringed, you may contact us or the relevant GCC regulatory authorities.

7. DATA SECURITY, BREACH NOTIFICATION & RETENTION PROTOCOLS

Data Security

We use a variety of measures to keep your Personal Data confidential and secure, including restricting access to your Personal Data on a need-to-know basis and following appropriate security standards to protect your data from unauthorized access, disclosure, modification, or destruction.

Data Breach Notification

In the event of a data breach that may affect your personal data, we will take immediate remedial measures, notify you without undue delay (where required by law), and report the breach to the relevant GCC regulatory authorities within 72 hours, in accordance with the Saudi PDPL.

Data Retention

We take every reasonable step to ensure that your Personal Data is only processed for the minimum period necessary in connection with: (i) the purposes set out in this Privacy Policy; (ii) any additional purposes notified to you at or before the time of collection of the relevant Personal Data or commencement of the relevant processing; or (iii) as required or permitted by applicable law (including the Saudi PDPL); and thereafter, for the duration of any applicable limitation period. Specifically:

• Commercial Invoices & Tax Data: Retained for 10 years to satisfy regional audit requirements.

• Contractual Documentation: Retained for the duration of the business relationship plus 5 years.

• Technical Logs: Retained for 12 months for security and maintenance purposes.

• Other Personal Data: Retained for the duration of the relevant purpose or as required by applicable law, and thereafter destroyed or deleted in a secure manner.

8. COOKIE & DIGITAL TRACKING

We use cookie identifiers and other digital tracking technologies on our websites and technical documentation download portal to collect digital footprint data (as set out in Section 2). By accessing and using our websites or portal, you consent to the use of such cookies and tracking technologies. You may adjust your browser settings to disable cookies, but this may affect the functionality of our digital platforms.

9. GOVERNING LAW & JURISDICTION

For the purpose of legal certainty, this policy is governed by the laws of the Kingdom of Saudi Arabia. Any disputes arising from this policy or our data practices shall be subject to the exclusive jurisdiction of the competent courts in the domicile of our regional headquarters (Dammam, KSA).

10. CONTACT FOR PRIVACY MATTERS

For any inquiries, requests to exercise your data rights, or complaints related to personal data protection, please contact our Privacy & Compliance Department:

BEDROCK INDUSTRIAL COMPANY

Privacy & Compliance Department

Email: [email protected]

WhatsApp: +966-0561717029

Address: Salman Farisi St. Khalidiyah Al-Janubiyah, Dammam, Saudi Arabia