We appreciate your concern and attention to the privacy of your personal data entered on the Local Content and Government Procurement Authority's website (hereinafter referred to as "the Authority"). We assure you of the Authority's commitment to maintaining the confidentiality and privacy of your personal data in accordance with relevant laws and regulations. This Policy aims to outline how collected personal data is handled, the purpose of collecting it, methods of sharing, exchanging, storing, and disposing of it, as well as the rights of its owners.
We would like to note that your use of the Authority's website constitutes your acceptance of the terms outlined in this Policy.
First: Collection and Use of Personal Data
The Authority limits the collection of personal data to the minimum necessary to process incoming requests and provide its services optimally. Personal data is collected directly in the course of providing services through the Authority's website, including services registration, user account creation, data request submission, job applications, and the use of the unified contact center. These processes require the provision of the following personal data: name, national ID/residency/passport number, email, address, phone number, date of birth, family and banking information, and personal photo, depending on the type of the service provided. The provision of this data is mandatory to enable the Authority to process your request and fully deliver its services.
The Authority collects personal data through its website when users register for services via the electronic portal, the recruitment portal, and the complaints and suggestions through the unified contact center, or through direct communication with entities or individuals. Additionally, when visiting the website, the Authority collects cookie data, Internet Protocol (IP) address, visit date and time, the type of internet browser used, and the URL address of any referring website.
The purpose of collecting the data outlined in this Policy is to process and fulfill your requests, track job applications, respond to inquiries, suggestions and complaints, evaluate and enhance services, send notifications, analyze website performance and functionality, and fulfill any other purpose required by relevant laws and regulations. Failure to provide the necessary data may prevent the Authority from completing the processing of your request.
Second: Data Storage, Transfer, and Disposal
Your data is stored on the Authority's dedicated servers within the Kingdom of Saudi Arabia. The Authority ensures that these servers are protected against leaks, misuse, or unauthorized access, in accordance with directives issued by the National Cybersecurity Authority and relevant entities. After the purpose for which the data was collected has been fulfilled, the Authority retains the data while removing any elements that could specifically identify the individual, except in cases stipulated by applicable laws, regulations, policies, and resolutions in the Kingdom.
The Authority adheres to the relevant regulations and instructions for the secure destruction and disposal of personal data once the purpose of its collection has been fulfilled or has been archived according to its retention period, to the duration of its preservation in a safe manner that prevents misuse or unauthorized access to it.
The Authority affirms that, under no circumstances, will the data you provide be transferred to any third party for any purpose without your prior consent, unless it is part of collective data used for the Authority's purposes or when required to comply with a law, resolution, or official request from a government entity.
Third: Personal Data Owners Rights According to the Personal Data Protection Law
- Right to Be Informed: The personal data owner has the right to know the legal basis for collecting their personal data, the purpose of its collection, the entity or entities to which the data will be disclosed and their status, whether the data will be transferred, disclosed, or processed outside the Kingdom, and the potential consequences and risks of not completing the data collection process.
- Right to Access Personal Data: The personal data owner has the right to access their data in accordance with the regulations and procedures specified in the Implementing Regulation of the Personal Data Protection Law, without prejudice to Articles (9) and (16) of the Law.
- Right to Request Personal Data: The personal data owner has the right to request their available personal data from the Authority in a readable and clear format, as per the regulations and procedures specified in the Implementing Regulations of the Personal Data Protection Law.
- Right to Request Correction of Personal Data: The personal data owner has the right to request the correction of any personal data they deem inaccurate, incorrect, or incomplete. The data will be reviewed, updated, and the data owner will be notified accordingly. The Authority may require supporting documents for the correction request if necessary to amend, update, or complete the personal data. These documents will be handled in accordance with relevant legal provisions.
Right to Request Disposal of Personal Data: The personal data owner has the right to request the disposal of their data if it is no longer needed, provided that this does not affect the Authority's operations or the purpose for which the data was collected, in accordance with relevant regulations, procedures, and policies.
Fourth: Data Sharing and Exchange
The Authority is committed to maintaining the privacy and confidentiality of all personal data it obtains during communication with it. This data will not be disclosed unless required by relevant laws, regulations, resolutions, or instructions, or upon a governmental request, or if the Authority, in good intentions, believes such disclosure is necessary under relevant laws, regulations, resolutions, or instructions, or to protect the proprietary rights of this website or its beneficiaries.
Furthermore, the Authority may share your data—at any time and without prejudice to relevant laws and instructions—with the following entities:
- All government agencies, authorities, and regulatory entities within the Kingdom of Saudi Arabia, as well as regulatory enforcement authorities, for the purpose of investigations or legal proceedings, if required by laws or regulations.
- Entities and parties relevant to achieving the Authority's objectives.
Fifth: External Links
This
website may provide links to external websites. The Authority assumes no
responsibility for how third parties collect or use your personal data or any
other data. We recommend reviewing the privacy policies of those websites to
understand how they handle such data.
Sixth: User Responsibility for Privacy Protection
To protect your personal data, we recommend the following:
- Immediately contact the Authority's technical support if you suspect that someone has gained access to your account login details or personal data on the website.
- Avoid sharing any personal information via phone or the internet unless you have verified the identity and authorization of the requesting party.
- Do not share your login credentials (username or password) with others, and do not allow anyone to use your account on the website.
- Access the website using a secure device and browser, close any unused internet-connected applications, and ensure your antivirus software is regularly updated.
Seventh: Amendments to the Privacy Policy
The Authority reserves the right to make any minor or significant modifications to this Privacy Policy from time to time without prior notice. These modifications become effective upon their publication on the Authority's website. Your continued use of the website after such modifications constitutes acceptance of the updated Policy. Therefore, we recommend reviewing the Privacy Policy periodically to stay informed of the latest version.
The last update to this Policy was on Tuesday, February 11, 2025.
Eighth: General Provisions
- If you have any comments, inquiries, or complaints regarding this Privacy Policy, you can contact us via email at: CC@LCGPA.GOV.SA.
- Arabic is the official language for implementing the provisions of this Policy. In case of discrepancies in interpretation of any text written in any other language, the Arabic text shall prevail.
The
applicable laws of the Kingdom of Saudi Arabia govern all matters related to
disputes arising from the use of this website or the services provided by the
Authority through its communication channels. Such disputes shall be subject to
the jurisdiction of the competent judicial authority in Riyadh for resolution.
