Privacy and Data Protection Notice

This notice clarifies Taqania Company’s commitment to collecting and processing personal data fairly and transparently through this website, and outlines your statutory rights under the Personal Data Protection Law in the Kingdom of Saudi Arabia (PDPL) and its executive regulations issued by the Saudi Data and Artificial Intelligence Authority (SDAIA).

1. Data Controller

Taqania IT Company is the data controller responsible for processing personal data via this website within the Kingdom of Saudi Arabia.

For any regulatory inquiries or to exercise your statutory rights, you may contact the Data Protection Officer via the official email: info@forefront-it.com.

2. Data Collected

Contact and Inquiry Form: We collect name, professional email, organization name, phone number, specific area of interest, and message content to follow up on the request.

Professional Application and Recruitment Form: We collect name, contact details, professional links, and Curriculum Vitae (CV). Please do not include sensitive data such as National ID numbers, which are not required in the initial application stage.

Visits and Browsing: We do not use third-party tracking or advertising cookies. We rely solely on aggregated browsing statistics that do not identify the visitor.

3. Legal Basis and Purposes of Processing

Processing Business Inquiries: Conducted based on your explicit consent upon submitting the form and to follow up on the requested advisory services.

Processing Job Applications: Conducted based on your consent to evaluate professional competency for available vacancies and communicate accordingly.

We commit to never selling or sharing personal data with any third parties for direct marketing purposes.

4. Data Retention and Destruction Periods

Inquiry data is retained for the period necessary to process the request or follow up on commercial contracting, up to a maximum of 24 months, then securely destroyed unless commercial or tax regulations require longer retention periods.

CVs for job applications are retained for 12 months for consideration in future vacancies, then automatically destroyed unless the applicant requests otherwise.

5. Data Hosting, Processing, and Digital Sovereignty

Email and form data flows are managed via encrypted, secured cloud infrastructure that complies with cybersecurity controls and SDAIA’s regulations for transferring personal data outside the Kingdom.

6. Rights of Personal Data Subjects under the Law

The right to be informed about the legal basis and purposes of processing.

The right to access your personal data and obtain a copy in a clear format.

The right to request correction, update, or completion of your personal data.

The right to request the destruction of your personal data when the need for which it was collected ceases.

The right to withdraw consent at any time and file a formal complaint with the regulatory authority (SDAIA) in the event of any violation.

7. Security Measures for Data Protection

We apply strict technical and organizational controls including end-to-end encryption during transit and storage, and restrict access privileges to prevent unauthorized access or data breaches.