Privacy & Data Protection Policy
Explains how organization and delegate data are collected and processed to run accounts and document dealings, in line with Saudi personal data protection rules.
Use the print dialog and choose “Save as PDF” to archive a copy for your organization.
1. Purpose
This policy describes the data needed to operate Suplink services, processing purposes, retention periods, data-subject rights, and contact channels. We process data to enable registration, manage tenders, bids, and orders, build the facts log, and provide support and regulatory compliance where applicable.
2. Data used in the service
Organization data: trade name, commercial registration, VAT where applicable, and contact address. Delegate data: name, corporate email, mobile, role and permission. Operations data: tenders, bids, orders, structured lines, stored attachments, receipt acknowledgments where applicable, and timestamps. Technical data needed to protect sessions, such as login logs.
3. Protection and access
We apply access controls and encryption in transit and at rest to a practical reasonable standard, and limit deal-data access to authorized parties and what is needed to operate the service and support. Sealed-bid prices remain hidden under platform rules until close.
4. Sharing and retention
Data is shared among authorized deal parties to complete documents, with infrastructure providers necessary to run the service under confidentiality obligations, or with a competent authority upon a binding lawful request. We retain transaction records while the account is active and for up to ten (10) years after the relevant dealing ends unless law requires another period.
5. Data-subject rights
You may request access to or update of your registered personal data via settings or privacy@suplink.sa, and request deletion or restriction of data not required for standing contractual documents or mandatory retention, within the Personal Data Protection Law.
6. Cookies
We use necessary cookies to secure login, keep sessions, and run the platform reliably. Privacy questions: privacy@suplink.sa.