Only what we need
Information used to review your request and deliver the service.
NACE / PRIVACY & TRUST
Privacy & data protection
Your information serves your request. Your project images stay private. Your privacy choices remain yours.
Last updated: 22 October 2026Version 1.1
Your images stay private
Publishing your project materials requires separate permission.
Choices you control
Manage advertising tools and request access, correction or deletion.
01Who is responsible
Njoud Alamal Contracting Establishment (NACE) is the controller of personal data processed through njoudest.com.sa, its forms and communication channels used for service requests.
Based in Al Asalah, Jeddah, Saudi Arabia, NACE provides maintenance, fit-out and contracting services. This policy covers enquiries, quotations, site visits, delivery, follow-up and warranties.
This policy is read within the framework of Saudi Arabia’s Personal Data Protection Law and its regulations. It does not limit your statutory rights or turn a service request into permission for marketing.
02Information we collect
| Category | Examples | Purpose |
|---|---|---|
| Contact details | Name, phone and email when supplied | Respond and follow up |
| Site and service | City, district, address or map link, timing, approximate area or quantity, description | Assess scope and coordinate work |
| Business requests | Company and representative, site type, assets and service requirements | Prepare the proposal and coordinate delivery |
| Attachments | Photos, plans, quantities and documents you send by email or WhatsApp | Assess, price, deliver and follow up |
| Technical information | Connection data needed to serve the website; device identifiers and interaction events if advertising tools are allowed | Deliver the website and measure campaigns according to your choice |
We collect information directly from you. Required fields depend on the service and are shown in the form. Without essential details, we may be unable to process your request. Optional fields may be left blank.
Share only what is relevant. Please do not send passwords, bank details or identity documents. Remove unrelated personal details and faces from project images where possible.
03Purposes and legal basis
- Enquiries and quotations: reviewing your needs and contacting you based on your consent to processing the request.
- Contracted services: performing the agreement, coordinating delivery and following up on handover and warranties.
- Required records: meeting applicable legal obligations.
- Direct marketing: sending offers only with separate consent, without affecting service availability.
- Campaign measurement and advertising personalisation: based on your separate privacy preference.
We explain any new purpose requiring consent and request that consent before processing. Submitting a request does not confirm a booking or approve a price.
04Project images and plans
Your site and home photos, drawings, bills of quantities and documents are used for assessment, pricing, delivery and follow-up, as needed for the work.
We do not publish your project materials on our website, social channels or marketing materials without separate permission defining the materials, purpose and scope. Consent to a service request or promotional messages is not permission to publish photos.
Please share information about others only when you are authorised and only as necessary. Any authorised publication must take account of people, addresses and private information visible in the materials.
06Protection and retention
We commit to limiting access by role, using appropriate channels and minimising shared information. The website uses HTTPS to encrypt data in transit. These measures do not guarantee protection against every possible risk.
| Records | Retention criteria |
|---|---|
| Enquiries and quotations | As needed to assess and follow up the request, until the purpose ends or a requirement justifies continued retention. |
| Contracts and service records | Service delivery, warranty commitments, legally required records and ongoing legal proceedings. |
| FormSubmit copy | Provider documentation states 30 days for form submissions. This does not cover NACE’s email copy or project records. |
| Consent records | As needed to demonstrate your choice and handle related requests. |
When the purpose ends and no basis for retention remains, data is destroyed in a way that prevents recovery, with due regard to backups and legal obligations. Retention periods depend on the type and purpose of each record.
08Marketing consent
Submitting a service request authorises its review and related contact, as explained beside the submit button. It does not automatically subscribe you to marketing messages, which require separate consent. The policy version and submission timestamp accompany your request.
Stop promotional messages using the opt-out provided in them or by sending “Stop marketing” to our email or contact number. Opt-out is free and does not affect service communications about your request or contract.
09Your data rights
- Understand how and why data is processed.
- Access personal data held by NACE.
- Obtain a clear, readable copy.
- Correct, complete or update data.
- Request destruction under applicable rules.
- Withdraw consent for processing based on it.
Processing based on another lawful basis may continue after withdrawal. We explain any applicable legal restriction affecting your request, while respecting the rights of others.
Rights requests are handled within 30 days. A further period of up to 30 days may apply in legally permitted cases, with advance notice and reasons. We may request the minimum information needed to verify your identity.
10Privacy requests and complaints
Contact NACE management to request access, correction or destruction, or to raise a privacy complaint. State your request and the contact details previously used with us. Please do not attach identity documents without being asked through a verified channel.
Contact NACE about privacy
Njoud Alamal Contracting Establishment
Al Asalah, Jeddah, Saudi Arabia
admin@njoudest.com.sa · 0544656209
You may also raise a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA) through its official channels. SDAIA platform ↗
11Policy updates
We review this policy when site services or processing practices change and show the update date at the top. Where fresh consent is required, we request it before the relevant processing.
The Arabic version is the reference if translations differ, without prejudice to data-subject rights or applicable law.
Official references: Personal Data Protection Law and Implementing Regulations.