Privacy
Privacy notice
This notice explains how TEPCO KSA collects, uses, and protects the personal data you share with us, the legal basis we rely on, and the rights you hold under the Personal Data Protection Law of the Kingdom of Saudi Arabia. We collect only what an engineering conversation needs, and we keep it no longer than the purpose requires.
- Effective 1 January 2026
- Controller: TEPCO KSA
- Governed by the PDPL (KSA)
Privacy notice
Contents
- Who we are
- Personal data we collect
- How we use your data
- Legal basis for processing
- Sharing and disclosure
- Storage and international transfers
- How long we keep your data
- How we protect your data
- Your rights under the PDPL
- Cookies and analytics
- Children's data
- Changes to this notice
Last updated 1 January 2026
Who we are
TEPCO KSA is the controller of the personal data collected through tepco-ksa.com. We manufacture medium and low voltage electrical distribution equipment from our facility in Madinah, Kingdom of Saudi Arabia, and this notice covers the data we handle when you visit the site, contact us, or submit an enquiry, RFQ, or job application.
In this notice, personal data means any information that identifies you or could reasonably be linked to you, such as your name, work email, telephone number, and the details of your enquiry.
Personal data we collect
We collect the data you give us directly through our forms: your name, organisation, role, work email, and telephone number, together with the content of your enquiry, including the project, products, specifications, and single line diagrams you choose to share for a request for quotation.
When you apply for a role, we also collect the information in your application and CV. When you browse the site, we collect limited technical data, such as your device type, approximate location, and pages viewed, through cookies and similar technologies, as described in our cookie policy.
How we use your data
We use your personal data to respond to your enquiry, prepare technical proposals and quotations, process and evaluate requests for quotation, assess job applications, and keep a record of our dealings with you for procurement and tender files.
We also use limited, aggregated usage data to keep the site secure, measure how it performs, and improve the information we publish. We do not use your data for automated decision making that produces a legal or similarly significant effect on you, and we do not sell your personal data.
Legal basis for processing
Under the Personal Data Protection Law of the Kingdom of Saudi Arabia, we process your personal data on one or more of the following bases: your consent, where you have given it; the steps needed to enter into or perform a contract with you or your organisation, such as preparing a proposal you requested; our legitimate interests in operating and securing the site and responding to business enquiries; and compliance with a legal or regulatory obligation.
Where we rely on your consent, you may withdraw it at any time, which does not affect the lawfulness of processing carried out before the withdrawal.
Storage and international transfers
We store and process personal data within the Kingdom of Saudi Arabia wherever practicable. Where a service provider processes data outside the Kingdom, we transfer it only in line with the PDPL and its implementing regulations, and we put appropriate safeguards in place to protect it.
How long we keep your data
We keep your personal data only for as long as the purpose requires. Enquiry and RFQ records are retained for the duration of our discussions and for the period we are required to keep procurement and tender records; recruitment data is retained for the recruitment process and a limited period afterwards unless you ask us to keep it on file.
When data is no longer needed, we securely delete or anonymise it.
How we protect your data
We apply technical and organisational measures appropriate to the sensitivity of the data, including access controls, encryption in transit, and staff confidentiality obligations. No method of transmission or storage is completely secure, but we work to protect your data against unauthorised access, loss, or misuse, and to restore it in the event of an incident.
Your rights under the PDPL
Subject to the conditions in the law, the Personal Data Protection Law gives you the right to be informed of how your data is processed, to access your data and obtain a copy of it, to request the correction of inaccurate or incomplete data, and to request the destruction of your data where it is no longer needed.
Where we rely on your consent, you also have the right to withdraw it. To exercise any of these rights, contact our privacy team using the details below; we may need to verify your identity before we act on a request.
Children's data
This site is intended for industrial and professional audiences and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.
Changes to this notice
We may update this notice from time to time to reflect changes in our operations, the services we use, or the law. The effective date above shows when the current version took effect. Where a change is significant, we will take reasonable steps to highlight it. Please review this notice periodically.
Privacy contact
Questions about your data?
To exercise any of your rights, or to ask how we handle your information, contact our privacy team. We respond to verified requests within the period set by the PDPL.
If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with the Saudi Data and AI Authority (SDAIA), the regulator for the PDPL.