Personal Data Protection
- Compliance with the PDPL
Ramah Smart Trading Co. complies with the Saudi Personal Data Protection Law issued by Royal Decree M/19, its Implementing Regulations, and the instructions of the Saudi Data & AI Authority (SDAIA) as the supervisory authority.
- Lawful basis for processing
We process your personal data on the basis of your explicit consent when submitting the contact form, the performance of a contract to which you are a party, or compliance with a legal obligation. No data is processed outside these bases.
- Data we collect
Name, email, mobile number, organisation, city, request details and any file you optionally upload. We do not request or process sensitive data (health, credit or biometric) through this website.
- Purpose of processing
Responding to your request, preparing a technical and commercial proposal, delivering the service, tracking request status and communicating with you about it. Your data is never used for advertising analytics or sold to third parties.
- Data minimisation & retention
We collect only what is necessary, retain request data for as long as required to fulfil the purpose and for the statutory retention period, then securely destroy it beyond recovery.
- Cross-border transfer
Your data is stored within the Kingdom of Saudi Arabia. It is not transferred abroad except in accordance with the statutory controls and transfer requirements set out in the Law and its Regulations.
- Your rights under the Law
You have the right to: be informed how your data is processed · access it and obtain a copy · request its correction or update · request its destruction · withdraw your consent at any time. Requests are actioned within the statutory period.
- Exercising your rights
Send your request to info@ramh.sa, stating the type of request and your reference number if available. We may ask you to verify your identity before acting, to protect your data.
- Security safeguards
We apply technical and organisational controls including encrypted transport, access restricted to authorised staff only, hashed passwords, and an audit log of every action performed on data within the control panel.
- Breach notification
In the event of a leak or unauthorised disclosure affecting your data, we will notify the competent authority and notify you within the periods and procedures prescribed by law.
- Candidate data
CVs sent to job@ramh.sa are used for recruitment purposes only, and you may request their deletion at any time.
- Filing a complaint
If you believe the processing of your data breaches the Law, you may file a complaint with the Saudi Data & AI Authority (SDAIA) after first contacting us to resolve the matter.