Privacy Policy

1. Controller Identity & Scope

Al-Nawras Marine Services is committed to safeguarding client data in compliance with Saudi Personal Data Protection Law (PDPL). Request records and operational attachments are processed strictly for commercial quotation and service fulfillment.

This Privacy Policy governs how Advanced Al-Nawras Marine Services collects, processes, and protects information submitted through our commercial request forms, emails, and online communications.

2. Personal Data We Collect

When you submit a service request, quotation enquiry, or message, we may collect:

• Contact details: Name, business email address, phone/mobile number
• Corporate details: Company name, country of registry, tax / commercial identifiers
• Operational data: Vessel name, IMO number, call sign, port of call, ETA/ETD
• Procurement specifications: Manifests, equipment technical sheets, provisions lists
• Uploaded attachments: Invoices, technical drawings, certificates

3. Purpose of Processing

All collected data is processed strictly for legitimate maritime commercial purposes, including:

• Reviewing, estimating, and responding to service enquiries and quotations
• Coordinating port clearances, delivery logistics, and technical onboard visits
• Issuing operational status updates and transactional notices
• Maintaining mandatory regulatory records per maritime port requirements

4. Data Retention Period

In accordance with our governance framework (Doc 8 Decision D-1), enquiry records and associated transaction attachments are retained for 24 months following request closure, after which they are systematically deleted or anonymized, unless statutory commercial or maritime recordkeeping regulations require longer preservation.

5. Security & Technical Safeguards

Uploaded documents and operational attachments are stored in private encrypted object storage (Cloudflare R2), protected from public internet indexing. Access is restricted strictly to authorized operational personnel with multi-factor authentication.

6. Third-Party Service Providers

We utilize vetted technical infrastructure partners solely for hosting and email transmission: Cloudflare (edge delivery, DDoS mitigation, and encrypted storage) and Resend (transactional notification dispatch). No customer data is sold or shared for external marketing.

7. Data Subject Rights & Inquiries

Under the Saudi PDPL, you have the right to request access to, correction of, or deletion of your personal data. To exercise these rights, please contact our data governance representative at:

Email: info@alnawras.com