Privacy & Personal Data Protection Policy

Last updated: October 2026

Business Services Solutions Platforms Company ("we", "us") is committed to protecting your personal data and processing it in line with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations. This policy explains what we collect through bsspco.com and how we use and protect it.

1. Data we collect

• Service request form: name, company name, mobile number, email, requested service and request details.
• Careers form: name, mobile number, email, career track, years of experience, nationality, city, LinkedIn profile, short note and CV.
• Limited technical data: such as IP address, used only to protect the site against spam and abuse.

The website does not use advertising cookies or marketing trackers.

2. Purposes

• Responding to your request and delivering and following up the service.
• Reviewing job applications and contacting applicants about suitable roles.
• Protecting the website and improving our services.

We do not use your data for any other purpose without your consent, and we never sell or rent it.

3. Legal basis

We process your data on the basis of the consent you give when submitting a form, to perform a request or contract you are party to, or to comply with a legal obligation.

4. Sharing

• With government entities and official platforms, only as needed to deliver the service you request.
• With technology providers that host our systems (such as our CRM/HR system and website hosting), under contractual confidentiality safeguards.
• Where required by law or by a competent authority.

4a. Collection method and transfers outside Saudi Arabia

We collect data directly from you through the website forms, and it is sent over an encrypted connection to our CRM and HR system. Some data may be processed or stored by technology providers whose servers are located outside Saudi Arabia (such as cloud hosting services). This is limited to what is needed to deliver the service and follows the controls of the Personal Data Protection Law and the Regulation on Personal Data Transfer outside the Kingdom, with appropriate safeguards in place.

4b. Embedded third-party services

The website displays a Google Maps map and uses Google Fonts; Google may collect technical data (such as IP address) when these load or are used, under Google's own privacy policy.

5. Retention and destruction

Service request data is kept for the duration of our relationship and as required by applicable regulations. Job applications are kept in our talent pool for no longer than two years unless you ask us to delete them sooner. When the retention period ends, we destroy the data or make it no longer linkable to you.

6. Security

We apply appropriate technical and organisational measures, including encrypted connections (HTTPS), access limited to authorised staff, and two-factor authentication on system accounts.

6a. Data breaches

If a breach or unauthorised access to your data occurs, we take the necessary steps to contain it and notify the competent authority and affected individuals within the statutory timelines and procedures.

7. Your rights

• To be informed about how your data is collected and processed.
• To access your data and obtain a copy.
• To request correction or updating of your data.
• To request destruction of your data when no longer needed.
• To withdraw your consent at any time.

To exercise any of these rights, email info@bsspco.com. You may also lodge a complaint with the Saudi Data & AI Authority (SDAIA).

8. Contact

Business Services Solutions Platforms Company — Pavilion Complex, 2nd Floor, Al Rawabi, Al Khobar, Saudi Arabia.
Email: info@bsspco.com · WhatsApp: +966 56 300 0513

We may update this policy from time to time; the date above shows the latest version.