Privacy Policy

1. Introduction & Legal Framework

Envision Facilities Management and Services Company ("Envision FM", "Company", "we", "our", or "us") is dedicated to protecting the privacy, confidentiality, and security of personal and commercial data entrusted to us.

This Privacy Policy describes our practices regarding the collection, processing, storage, and protection of data gathered through our corporate website (https://envisionfm.com/) and associated digital communication channels. Our operations strictly comply with the Saudi Personal Data Protection Law (PDPL) issued pursuant to Royal Decree No. (M/19) and its implementing regulations governed by the Saudi Data & AI Authority (SDAIA).

2. Categories of Data We Collect

We process information submitted voluntarily by corporate representatives, prospective clients, suppliers, and employment applicants through dedicated portal channels:

3. Purpose and Legal Basis of Processing

Under the Saudi PDPL, Envision FM processes personal and corporate information only under legitimate business frameworks and clear contractual necessity:

• Tender & Assessment Evaluation: To respond accurately to requests for quotation (RFQs), commercial tenders, and schedule engineering site audits.
• Vendor Vetting & Procurement: To verify compliance, valid CR, VAT status, and technical competencies prior to supply-chain onboarding.
• Talent Acquisition: To review professional qualifications, contact prospective candidates, and manage employment interviews.
• Statutory Compliance: To satisfy corporate governance, HSE standards, tax record-keeping, and legal directives within the Kingdom of Saudi Arabia.

4. Disclosure and Cross-Border Transfers

Envision FM does not sell, lease, or trade personal data to commercial advertisers or external data brokers under any circumstances.

Information is accessible strictly on a need-to-know basis by authorized Envision FM personnel (Commercial, Technical Advisory, Procurement, and HR teams). Disclosures to third parties occur exclusively when:

• Required by competent Saudi government ministries, courts, or regulatory authorities.
• Mandated by trusted technical infrastructure partners (e.g., enterprise hosting and encrypted mail gateways) operating under strict contractual confidentiality and data-protection covenants.

5. Information Security & Retention

We employ technical, administrative, and physical safeguards designed to prevent unauthorized access, accidental alteration, disclosure, or loss of information:

• Encryption & Transmission: All web submissions and file uploads are secured using modern SSL/TLS cryptographic protocols.
• Access Restrictions: Portal submissions and uploaded PDF documents are stored in access-controlled environments accessible only by authorized officers.
• Data Retention: Information is maintained only as long as necessary to fulfill the business, contractual, or statutory purpose for which it was gathered, after which it is securely destroyed or anonymized.

6. Rights of Data Subjects

Subject to the provisions of the Saudi Personal Data Protection Law (PDPL), you hold the following rights regarding your personal information:

7. Policy Updates & Modifications

Envision FM reserves the right to amend this Privacy Policy periodically to reflect technological changes, service expansions, or regulatory directives issued by SDAIA or other competent authorities. Updates take effect immediately upon posting to this page.

8. Inquiries & Data Protection Contact

To exercise your data protection rights, request information, or submit a governance inquiry, please contact our designated corporate office: