Privacy policy

Smart Building Lines Contracting Co. ("SBL", "we") is a company registered in the Kingdom of Saudi Arabia, at Office 17, Kaab Ibn Malik Street, Al Olaya, Riyadh 12313. SBL is the controller of the personal data described in this policy.

We collect only what the contact form asks for, and the minimum technical data needed to protect it.

• Contact form: your name, company (optional), email address, phone number (optional), the topic you choose and your message.
• Your IP address, used only to limit how many messages one connection can send in a short time.
• Signals checked by Cloudflare Turnstile to tell a person from an automated script (see Bot protection).
• Standard server logs kept by our hosting provider for security and fault finding.

To answer your enquiry, prepare a quotation or proposal you asked for, send you a confirmation that we received your message, and keep a record of that correspondence.

The legal basis is your request to be contacted and our legitimate interest in replying to it and in keeping the form free of abuse. We never use your details for advertising and we do not sell personal data.

The contact form is protected by Cloudflare Turnstile. It checks, usually without any puzzle, that a person and not a script is sending the message. Cloudflare processes technical signals from your browser for this purpose only and does not use advertising cookies for it.

The form also contains a hidden field and a minimum time to fill it in. These do not collect anything about you; they only help us discard automated submissions.

This website uses no analytics, advertising or tracking cookies. It stores three small preferences in your own browser, which never leave your device:

If we ever add analytics, they will be cookieless or will run only after you agree, and this table will be updated first.

Only the SBL staff who handle your enquiry, and the service providers who run this website for us, under contracts that require them to protect the data and use it only on our instructions:

• Website hosting and the form server (Vercel).
• Email delivery of your message and your confirmation (Resend).
• The short-lived counter used for rate limiting (Upstash).
• Bot protection (Cloudflare Turnstile).

Some of these providers process data on servers outside the Kingdom. Where that happens, the transfer is limited to what the service needs and is made under the conditions and safeguards the Personal Data Protection Law and its regulations require.

• Enquiries that do not lead to work: deleted after 24 months.
• Correspondence linked to a quotation or contract: kept for as long as the law requires for commercial records.
• Rate-limit counters: expire automatically after 10 minutes.
• Server logs: kept by the host for a short period, then deleted automatically.

The site is served only over HTTPS with strict security headers. Every form submission is checked again on the server, field by field, before anything is sent. Secrets and keys live only on the server, and access to enquiries is limited to the people who need it.

Under the Personal Data Protection Law you may ask to be informed about how we process your personal data, to access it and receive a copy, to have it corrected or completed, to have it destroyed when it is no longer needed, and to withdraw your consent at any time.

Email info@sblcontracting.net with your request. We may ask you to confirm your identity, and we will respond within the period the law sets.

If you are not satisfied with our answer, you may lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA).

When this policy changes we update the date at the top of this page. If a change affects how we use data you have already given us, we will tell you before it applies.