Privacy Policy
What this website collects, why, who receives it, how long we keep it, and the rights the Saudi Personal Data Protection Law gives you over it.
Who we are, and what this covers
PrimeLynx Global is an engineering, facilities and technology group headquartered in Riyadh, Kingdom of Saudi Arabia, operating twelve service divisions. Under the Saudi Personal Data Protection Law (PDPL, Royal Decree M/19) we are the data controller for personal data collected through this website.
This policy covers www.primelynxglobal.com in both languages, every form it carries, and anything you send us by email, by phone or WhatsApp on +966 56 769 3142, or through our LinkedIn, Instagram and Facebook pages.
What it does not cover
Our client portal at primefix.primelynxglobal.com, governed by the terms issued with your credentials; our regional sites for the United States, China and AW Realtors, which have their own notices; and any third-party service you reach from here. Where we act as a processor on a client's behalf, that client's privacy terms govern instead.
What we collect
Each route below asks only for what the receiving team needs to answer you. Fields marked required are that minimum; leaving them out means we cannot reply.
| Where you give it | What we ask for | Where it goes |
|---|---|---|
| Contact form | Name, company, email, phone, preferred reply channel, enquiry type, service of interest, project details | info@primelynxglobal.com |
| Book a consultation | Name, company, email, phone, division or topic, preferred date and time, details | info@primelynxglobal.com |
| Support request | Name, email, support category, your request | support@primelynxglobal.com |
| Vendor registration — by email, not a form | Company name, CR number, contact name, email, phone, supply category, products or services | procurement@primelynxglobal.com |
| Partnership enquiry — by email, not a form | Company name, contact name, email, phone, partnership type, company description | partnerships@primelynxglobal.com |
Our web host also keeps standard server logs — IP address, timestamp, page requested, response status and browser user-agent — used to keep the site available and spot abuse, not to profile you. Details sometimes reach us from a third party too: a referral, a main contractor nominating us, or a commercial register we check during vendor qualification.
Please do not send sensitive data through a web form
Health information, national ID or iqama scans, and bank or card details should never go into a website form or ordinary email. If a contract requires them, your project lead will arrange a secure route.
Why we use it, and on what basis
Every purpose needs a lawful basis under the PDPL. For visitors in the EEA or the United Kingdom, the equivalent GDPR basis is the one given in the same row.
| Why we use it | Lawful basis |
|---|---|
| Answering your enquiry and routing it to the right division | Your consent in submitting the form, and steps taken at your request before a contract |
| Preparing quotations, proposals and consultations | Steps taken at your request before a contract |
| Delivering a project or service you engaged us for | Performance of the contract between us |
| Qualifying and managing vendors and partners | Pre-contract steps, and our legitimate interest in a verified supply chain |
| Keeping the site secure and preventing abuse | Our legitimate interest in protecting the site and its users |
| Meeting legal, tax, zakat and regulatory obligations | Compliance with an obligation under Saudi law |
Where we rely on consent you can withdraw it at any time by emailing info@primelynxglobal.com. Withdrawal is not retroactive, and does not force us to delete records we are separately required to keep.
What we do not do
We do not sell, rent or trade personal data, we do not market to anyone who did not ask, and we do not use your data for automated decisions that produce legal effects for you.
Cookies and browser storage
This site sets no cookies. It uses localStorage instead — two values kept on your own device, written and read only by your browser.
| What is stored | Key | Why |
|---|---|---|
| Your light or dark theme choice | pl-theme | So the site opens in the appearance you picked |
| Your recent searches | pl:recent-searches | So the search dialog can offer them again |
Clearing site data for primelynxglobal.com removes both. The contact page embeds a Google Maps frame, and loading it gives Google your IP address under its own privacy policy. Our Cookie Policy sets this out in full.
Who we share it with
Within PrimeLynx Global
Your enquiry goes to the division that can answer it, all under the same duty of confidence.
Service providers
Our web host and CDN, which hold the server logs, and our email provider, which carries each submission. Both are bound to process data only as we instruct.
Project counterparties
On a live engagement, the contact details of the people running the work go to the client, main contractor, consultant or subcontractors who need them.
Advisers and authorities
Auditors, insurers and lawyers where a matter requires it; Saudi regulators or courts where we are legally required to disclose, or to defend a legal claim.
What never happens
No third party receives your details from us for their own marketing.
Where we keep it, and for how long
Records are managed from our Riyadh headquarters, though some providers behind this site — hosting, CDN and email — run infrastructure abroad. Any transfer outside the Kingdom relies on a ground the PDPL and its transfer regulation allow, with the safeguards required of us; transfers out of the EEA or UK rely on the equivalent GDPR safeguards.
| Record | Kept for |
|---|---|
| An enquiry or support request that does not become a project | 24 months from our last exchange |
| Records of a project we delivered — contracts, invoices, correspondence | Up to 10 years, per Saudi commercial, tax and zakat requirements |
| Vendor and partner registrations | While your company is on our approved list, plus 24 months |
| Web server logs | Up to 12 months |
When a period ends, the data is deleted or irreversibly anonymised.
How we protect it
Submissions travel over HTTPS, are validated and length-limited on our server, carry a hidden anti-spam field, and reach our mailboxes over authenticated, encrypted SMTP. Mailbox access is limited to the staff whose role requires it, accounts are individual, and our people are bound by confidentiality terms. The site keeps no visitor database.
No system is perfectly secure. If a breach affects your personal data we will notify SDAIA within 72 hours of becoming aware of it, as the PDPL Implementing Regulations require, and notify you without undue delay where it is likely to cause you serious harm.
Your rights
The PDPL gives you these rights over the data we hold about you. Exercising them is free.
To be informed
To know what we collect, why, who receives it and for how long.
To access and obtain a copy
To see your data and receive it in a clear, readable format.
To request correction
To have inaccurate, incomplete or outdated data put right.
To request destruction
To have your data deleted where we no longer need it and no law requires us to keep it.
To withdraw consent
Where our use rests on consent, to take it back at any time.
Email info@primelynxglobal.com with "Privacy request" in the subject, saying which right you want and enough detail for us to find your records. We may verify your identity first, and will respond within 30 days.
In the EEA or the United Kingdom you also have the rights to data portability, to object to processing based on legitimate interests, and to restrict processing while a dispute is resolved.
Children, links and changes
This site is built for businesses. It is not directed at children, and we do not knowingly collect data from anyone under 18 — tell us at info@primelynxglobal.com and we will delete it.
Following a link to our portals, regional sites, social pages, Google Maps or the sites of partners and clients takes you outside this policy.
We update this policy when what we do changes, or when the law does. Where a change materially affects data you have already given us, we will say so on the site rather than make the change quietly.
Contact and complaints
Come to us first — most concerns clear up quickly. If we cannot resolve it, you may complain to the Saudi Data & AI Authority (SDAIA), which supervises the PDPL, or to your local supervisory authority if you are in the EEA or the United Kingdom.
Privacy enquiries
- Telephone / WhatsApp
- +966 56 769 3142
- Registered address
- PrimeLynx GlobalBuilding No. 2091, Makkah Almukarama BranchAl Sulaimaniyah Dist., Secondary No. 8010Riyadh 12621, Kingdom of Saudi Arabia
- Business hours
- Sunday – Thursday, 8:00 AM – 5:00 PM (GMT+3)