Privacy Policy

This Privacy Policy governs the collection, processing, storage, and transfer of personal, corporate, and technical data by East Wind Safety ('East Wind', 'we', 'us', or 'our') through our official digital portals, customer portals, request-for-quotation (RFQ) pipelines, and physical engineering operations across the Kingdom of Saudi Arabia. Our operations strictly adhere to the Saudi Personal Data Protection Law (PDPL) enacted by Royal Decree No. M/19, its Implementing Regulations issued by the Saudi Data & AI Authority (SDAIA), and relevant cybersecurity directives issued by the National Cybersecurity Authority (NCA).

We collect only the data necessary to fulfill technical engineering solutions, deliver certified life safety equipment, and maintain regulatory compliance: • Professional & Contact Identification: Full name, business email address, direct telephone/mobile numbers, corporate affiliation, job title, and engineering department. • Project & Engineering Specifications: Facility hazard classifications (ATEX/IECEx Zones 0, 1, 2), HCIS regulatory safety directives, technical RFQ documentation, bill of materials, and site delivery parameters. • Digital & Device Telemetry: IP addresses, approximate geographic location, browser metadata, operating system metrics, and navigational pathways across our public catalog to optimize digital performance and prevent unauthorized intrusion.

East Wind processes collected data strictly pursuant to lawful bases defined under KSA PDPL: • Contractual Execution: Processing requests for quotation, issuing commercial and technical proposals, executing system integration projects, and fulfilling warranty and maintenance contracts. • Regulatory Compliance: Satisfying mandatory audit and traceability obligations mandated by the High Commission for Industrial Security (HCIS), Saudi Standards, Metrology and Quality Organization (SASO), and the General Authority of Zakat and Tax (ZATCA). • Legitimate Business Interests: Maintaining cybersecurity vigilance, preventing industrial espionage, authenticating administrative accounts via multi-factor authentication, and improving our safety instrumentation offerings.

In compliance with KSA data sovereignty mandates, all core databases, enterprise resource systems, and client records are hosted on secure servers and certified cloud infrastructure physically located within the Kingdom of Saudi Arabia. Cross-border transfers of data occur only in limited scenarios involving foreign certified original equipment manufacturers (OEMs) for specialized sensor calibration, factory acceptance testing, or international warranty registration. Such transfers are governed by SDAIA-approved Standard Contractual Clauses (SCCs) ensuring an adequate level of data protection.

East Wind enforces enterprise-grade physical, technical, and procedural security controls to safeguard data from loss, unauthorized disclosure, or malicious tampering: • Transport Layer Security (TLS 1.3) cryptographic protocols for all data in transit. • AES-256 encryption for sensitive records stored at rest. • Strict role-based access control (RBAC) limiting employee data access strictly to a 'need-to-know' basis. • Routine vulnerability assessments and automated cyber-incident logging.

Under the Saudi Personal Data Protection Law, individuals have enforceable rights regarding their personal data: • Right to Know: The right to be informed about the lawful basis and purpose of data collection. • Right of Access: The right to inspect and obtain a readable copy of personal data held by East Wind. • Right to Rectification: The right to request correction, completion, or updating of inaccurate data. • Right to Destruction: The right to request erasure of data that is no longer required for its lawful purpose, subject to statutory retention limits. • Right to Withdraw Consent: The right to revoke consent for optional marketing communications at any time without retroactive prejudice.

Personal and corporate data is retained only for the duration required to satisfy the operational purpose for which it was gathered, or as required by applicable statutory and regulatory retention mandates (typically 5 to 10 years for engineering project documentation, taxation, and statutory safety audit trails under Saudi law). Upon expiration of the retention window, records are permanently purged or irreversibly anonymized.

To exercise any of your statutory rights, submit a privacy complaint, or request clarification regarding our data governance policies, please contact our Data Protection and Compliance Department: East Wind Safety Integrator Attn: Data Protection Officer P14, 2nd Industrial City, Dammam, Kingdom of Saudi Arabia Email: enquiry@eastwind.sa Telephone: +966 570 833 214