How this website handles browsing, search and contact information, with Saudi PDPL rights in view.
Prepared using Saudi sources and current website practices. Operator details and legal review are needed before adoption as an official company policy.
Last updated: · Version 1.0This notice describes the current public redesign preview hosted on a chatgpt.site domain. It is a draft for company review and does not describe every activity of SIDC or its subsidiaries. The company represented is Saudi Industrial Development Company (SIDC), Jeddah, Saudi Arabia.
The operator must confirm the legal controller's identity, address, privacy contact and processor arrangements before adopting this as the company's operational policy. SIDC's published corporate contact is info@sidc.com.sa and +966 12 610 2222; it has not been verified as a dedicated privacy or DPO channel for this preview.
Browsing does not require an account. The application has no advertising pixels, behavioural analytics, newsletter list or visitor database. Its search dialog filters a local content index in your browser. News and report filters use URL query parameters; these may appear in browser history and hosting access logs. Do not put personal or sensitive information into a search query.
The contact form uses a name, email address, subject and message. Automatic server delivery is not enabled in this release. The email-draft option prepares these details in your own email application for info@sidc.com.sa; you decide whether to send. The application does not save the draft to local storage or a website database. Your email provider and the recipient handle an email once you send it.
The contact fields are optional to use the website and are needed only to prepare a reply-capable enquiry. Preparing a draft is not consent to marketing. Do not include identity documents, health details, bank information, passwords or information about another person without authority. No automated profiling or decisions about visitors are implemented.
If automatic enquiry delivery or other data collection is enabled later, the operator must first specify the purpose and applicable lawful basis, identify recipients and retention, and update this notice at the point of collection. Any consent relied upon must be specific to its purpose and capable of withdrawal; browsing alone is not consent to unrelated processing.
ChatGPT Sites and its hosting infrastructure deliver the public pages. Hosting and security providers may process IP addresses, requested URLs, timestamps, device or browser information and operational logs, and may use essential security technologies. Their service practices are separate from the application features listed above. This draft does not assert that hosting data stays exclusively in Saudi Arabia.
Before adopting this website for operational personal-data processing, the operator must review hosting locations, processors and any transfers outside the Kingdom against the PDPL and the current transfer regulation, including applicable safeguards and assessments. No unverified international-transfer mechanism is claimed here.
The application does not retain email drafts after the current page session. A browser or email application may retain information under your settings. Hosting-log retention is controlled by the provider and has not been confirmed for this preview. Emails sent to SIDC are subject to the recipient's actual retention practices, which this notice does not invent.
An adopted retention schedule should keep personal data only while needed for the specified purpose or a legal requirement, then securely destroy or lawfully anonymise it, including relevant copies. HTTPS is used for public pages; no website can promise absolute security. The operational controller must establish access controls, incident handling and the notifications required by applicable law.
Subject to the PDPL's conditions and exceptions, individuals can ask to be informed, access and obtain a readable copy of personal data, correct or complete it, request destruction, and withdraw consent where processing relies on consent. Requests go to the controller responsible for the relevant processing, with proportionate identity verification. Withdrawal does not undo lawful prior processing.
Saudi implementing regulations generally require action on rights requests within 30 days, allowing a justified additional period of up to 30 days with advance notice. You may also lodge a personal-data complaint through SDAIA's National Data Governance Platform. These are regulatory rights and channels, not a representation that this unapproved preview already has a company privacy-response team.
External links, including company sources, the Saudi Exchange and email services, have their own notices. Revisit this page when the date or processing features change. New trackers or marketing tools require an updated notice and any applicable choice or consent before use.
The PDPL, its implementing regulation, the data-transfer regulation and privacy-policy drafting guide are available in SDAIA's knowledge centre.
SDAIA knowledge centre