About this Notice
This Privacy Notice describes how Convergent Technology Company processes personal data through this website, including data collected via contact forms, procurement and prequalification requests, CV submissions, email correspondence, and consent-based analytics cookies.
Who we are (Controller)
Convergent Technology Company is the controller of personal data processed through this website. We are registered in the Kingdom of Saudi Arabia under Commercial Registration No. 2051042895, with our registered office at Office 3-7, Delmon Building, Prince Sultan Street, Al-Khobar, Eastern Province.
Contact for privacy matters
For privacy-related requests, please contact us at info@convergent.sa. A dedicated privacy mailbox at privacy@convergent.sa is being established as the day-to-day channel for data-subject requests; until it is confirmed live, please use info@convergent.sa or our contact form.
Personal data we collect
We collect personal data you provide directly through (a) contact and inquiry forms (name, organization, email, message), (b) procurement and prequalification forms (additional fields such as role, project scope, and contact information), (c) CV submissions for career inquiries, and (d) email correspondence. With your consent, we also collect technical and usage data through analytics cookies.
Sources of personal data
Personal data is collected directly from you when you submit a form, email us, or attach a CV. Technical data is collected via cookies after you provide consent through our cookie banner. We do not purchase personal data from third parties.
Purposes of processing
We process personal data to: respond to your inquiries; evaluate prequalification and procurement requests; process job applications; comply with legal and regulatory obligations; and—with your consent—understand how this website is used through analytics services.
Legal bases for processing
We process personal data on the following PDPL-aligned bases: your consent (forms, analytics, marketing communications); performance of a contract or pre-contractual steps (procurement engagements); compliance with a legal obligation; and our legitimate interest in protecting the site against fraud and abuse, where consistent with PDPL.
Recipients and processors
Personal data is accessible to authorized internal personnel on a need-to-know basis. We may share personal data with service providers acting as data processors (hosting, email delivery, analytics) under contractual safeguards. We may disclose personal data to competent authorities where required by Saudi law.
Retention periods
Contact form submissions are retained for 12 months. Procurement and prequalification requests are retained for 12 months from the close of the engagement. CV submissions are retained for 12 months unless you request earlier deletion. Marketing consent records are retained while your consent remains active. Where Saudi law requires longer retention, we will comply.
Security measures
We implement reasonable technical and organizational measures to protect personal data, including encryption in transit (HTTPS / TLS), access controls, security monitoring, and information-security practices aligned with ISO 27001 standards. No system is fully immune to risk, and we cannot guarantee absolute security.
Your rights under PDPL
Subject to PDPL conditions, you have the right to: (a) be informed about the processing of your personal data; (b) access your personal data held by us; (c) obtain a clear, readable copy of your personal data; (d) request correction, completion, or update of inaccurate or incomplete data; (e) request destruction or deletion of your personal data where the conditions for deletion are met under PDPL.
How to exercise your rights
To exercise any of these rights, email info@convergent.sa (or privacy@convergent.sa once confirmed) with your request. We will respond within the timeframes required by PDPL. We may need to verify your identity before acting on your request.
Complaints
If you have concerns about how we handle your personal data, please contact us first at info@convergent.sa so we can address the matter. You may also lodge a complaint with the Saudi Data & AI Authority (SDAIA).
Cross-border transfers
Some of our service providers (notably analytics and email delivery) may process personal data outside the Kingdom of Saudi Arabia. Where this occurs, we rely on contractual safeguards consistent with PDPL requirements for cross-border data flows. We do not transfer personal data to jurisdictions whose data-protection regime is materially lower than PDPL without an approved safeguard.
Privacy contact
Convergent Technology Company has designated a privacy contact responsible for personal data matters. Privacy requests are handled through info@convergent.sa (transitioning to privacy@convergent.sa once that mailbox is confirmed live). Formal appointment of a Data Protection Officer under PDPL Article 32 is under review by our legal advisors.
Updates to this Notice
We may update this Privacy Notice from time to time to reflect changes in our practices or legal requirements. The version and effective date below indicate the version currently in force.