Privacy policy

Who we are, and who controls the data

Raghed is a Saudi office facility management company based in Riyadh. When you submit a quote form on this site or use the client portal, Raghed is the “controller” of your personal data in the sense used by the Saudi Personal Data Protection Law (PDPL) and its implementing regulations.

For any question or request about this policy, write to the address given in “How to exercise your rights” below.

What we actually collect

We do not collect data “just in case”. Every field below has a specific use, and optional fields are marked as such on the form itself.

• From the quote form: your name, company name, email address and mobile number. And per site: site name, city, headcount, the services requested, and an initial package.
• Site coordinates — entirely optional. Sent only if you choose to place the site on the map, and used to estimate distance and plan coverage. We do not track your location or your device's.
• From the client portal: your email as the account identifier, your name, the organisation you are linked to, and the history of your requests and tickets.
• Basic server-level technical logs — IP address, timestamp, browser type — produced by the infrastructure for security and diagnostics.

What we do not collect, and what is not on this site

• No tracking cookies and no third-party analytics on the public pages. Fonts, images and scripts are all hosted on our own domain, so no third party is told you visited this page.
• No sensitive data — health, beliefs, affiliation or similar. We do not ask for it on any form.
• We do not sell your personal data, and we do not share it for marketing purposes, with anyone, for any consideration.

Why we process it (the basis)

• To prepare your quotation and correspond with you about it — the purpose you sent the data for, and submitting the form is your consent to it.
• To perform and administer the contract if you become a client: service scheduling, invoicing, and handling your requests.
• To meet a legal obligation: retaining accounting and tax records for the period Saudi law requires.
• For service security: detecting abuse and preventing automated repeat submissions of the form.

How long we keep it

We do not keep data indefinitely. The actual periods:

• A quote request that did not become a contract: kept for 24 months from the last contact, then deleted or anonymised. The period reflects a purchasing cycle in this sector that can run a year or more; deleting sooner would mean you had to explain everything again from scratch.
• Client and contract data: for the term of the contract, then for the period Saudi accounting and tax rules require for the related records.
• Client portal accounts: while the account is active; closed on your request or after the contractual relationship ends.
• Procedure documentation photos at client sites: for the retention period configured in the system (12 months by default), after which they are deleted automatically.

Who can access your data

Access is restricted to those who need it for their job: the sales and operations staff handling your enquiry or contract. A service operative on site has no access to commercial contact data.

We may use technical providers for hosting or email delivery, under contracts that bind them to process data only for us and on our instructions. Data is hosted inside the Kingdom, and we do not transfer it abroad except where the law permits and subject to its safeguards.

Your rights

The Saudi Personal Data Protection Law gives you specific rights over your data:

• The right to be informed: to know what we collect, on what basis and for what purpose — which is what you are reading.
• The right of access: to request a copy of the personal data we hold about you.
• The right to rectification: to have inaccurate, incomplete or outdated data corrected.
• The right to erasure: to have your data destroyed when it is no longer necessary for the purpose it was collected for, so far as that does not conflict with a legal retention obligation.
• The right to withdraw consent: at any time, where consent was the basis, without affecting lawful processing that already took place.

How to exercise your rights

Write to us from the same email address you used on the form — that is the simplest identity check — at Info@raghed.com, stating your request. We respond within thirty days, and usually a great deal sooner.

If you are not satisfied with our response, you are entitled to complain to the competent authority supervising personal data protection in the Kingdom.

Data security

Connections to this site are fully encrypted (HTTPS), and access to internal systems is governed by roles and permissions granted only where needed. Procedure documentation photos are stored as private files that cannot be read from a direct link.

We claim no perfection: no system is entirely immune. But when an incident affects your personal data and is likely to harm you, we notify you and the competent authority as the law requires.

Changes to this policy

We may update this page if how we work changes, or if the applicable rules do. For a material change — a new processing purpose, say — we notify the affected data subjects rather than quietly editing this page.