Privacy Policy

1. Who Is Responsible for Your Data?

Terra Pulse is the controller of personal data for which it determines the processing purposes and methods when handling website enquiries, service requests and related communications.

This policy covers terrapulse.com.sa and the contact channels displayed on it. Project delivery, recruitment and contractual relationships may be subject to additional notices or agreements appropriate to the processing involved.

2. Personal Data We May Collect

• Contact information: your name, email address and telephone or mobile number.
• Professional information: company or facility name and your role or professional capacity when provided.
• Request information: the required service, city or project location, needs and related correspondence.
• Documents: files and information you choose to share to explain a request, where they contain personal data.
• Technical information: hosting and security systems may record IP addresses, browser and device types, request times, requested pages and error logs.

General enquiries do not require identity documents, banking details, health information or other sensitive personal data. Please do not submit such information unless we explain why it is needed and provide an appropriate sharing channel.

3. Sources of Data and Required Information

We receive enquiry information directly from you through contact forms, email, telephone or WhatsApp. Technical data may be collected automatically when your device connects to the website, depending on its configuration and enabled services.

Forms identify the fields required to receive a request. Providing information is generally voluntary, but without contact details or essential request information, we may be unable to respond or assess your needs. You can browse general website information without submitting a form.

If you share another person's data, you must be authorized to do so and limit the information to what the request requires.

4. Why We Process Personal Data

• Receive enquiries, direct them to the appropriate team and respond.
• Understand project needs and prepare a requested technical or commercial proposal.
• Arrange meetings and visits and manage request-related correspondence.
• Perform contractual obligations when a service relationship is established.
• Protect the website, investigate misuse and resolve technical issues.
• Meet legal obligations and respond to competent-authority requests.

Submitting an enquiry does not automatically subscribe you to marketing messages. Where direct marketing is sent, the necessary consent is obtained separately and a way to stop such messages is provided.

5. Legal Bases for Processing

Enquiry processing relies on your consent when information is submitted through channels that request it. Processing necessary to perform an agreed service relies on the relevant agreement, while processing required by law relies on the applicable legal obligation.

Necessary processing for website protection and misuse prevention may rely on legitimate interests, subject to applicable safeguards and consideration of your rights and interests. Sensitive personal data is not processed on that basis.

Visiting the website alone does not provide blanket consent for separate processing purposes.

6. Access and Data Sharing

Internal access is limited to people who need the information to handle your request or perform relevant duties.

Website and enquiry administration may involve hosting, email, technical support and correspondence-management providers. Their access is limited to what the service requires and is subject to appropriate data protection obligations.

Data may also be disclosed to competent authorities where legally required, or to parties necessary to deliver a service you request, subject to the applicable legal basis and safeguards. This policy does not authorize selling enquiry data or providing it to others for independent marketing purposes.

7. Storage and Processing Outside Saudi Arabia

Handling enquiries and correspondence may involve website systems, email and technology providers. Some external services may involve processing or hosting outside Saudi Arabia, depending on the provider used.

Any transfer of personal data outside Saudi Arabia, or disclosure to an entity outside the Kingdom, must have the required basis and safeguards and meet applicable transfer requirements. Acceptance of this policy alone is not unrestricted authorization for international transfers.

You can request information about arrangements relevant to your data using the contact details below.

8. Retention and Destruction

Retention depends on the record category and its purpose:

• Enquiries and proposals: while handling the request and related follow-up, and as necessary to document its outcome or address a relevant dispute.
• Contractual records: according to the relationship and applicable contract, accounting and claims-related legal obligations.
• Technical logs: as necessary for security, troubleshooting and incident investigation.
• Privacy requests: as necessary to fulfil the request, document the response and meet related obligations.

When no longer required, data is appropriately destroyed or anonymized so that the person cannot be identified, unless retention is legally required. Destruction arrangements cover relevant copies and backups in accordance with applicable requirements.

9. Cookies and External Services

The website may use cookies or similar storage technologies to operate its functions, maintain security and remember preferences. Enabling non-essential analytics or marketing tools requires an appropriate legal basis and consent where required.

You can manage cookies through your browser. Disabling necessary cookies may affect website functionality. Continued browsing does not replace consent where consent is required.

When you open WhatsApp, a map or an external website, its provider may receive information under its own operating methods and privacy policy. Terra Pulse's handling of messages received through those channels is also covered by this policy.

10. Data Security

We commit to applying organizational and technical measures appropriate to the data and processing risks, restricting access to authorized people and handling personal data incidents in accordance with applicable requirements.

No electronic channel is entirely risk-free. Please contact us to arrange an appropriate channel before sending sensitive or confidential files.

11. Your Personal Data Rights

Under the Saudi Personal Data Protection Law, and subject to applicable conditions and exceptions, you can:

• Be informed of collection purposes and the legal basis for processing.
• Request access to your data and obtain a clear, readable copy.
• Request correction, completion or updating of your data.
• Request destruction of data no longer needed, subject to legal retention requirements.
• Withdraw consent where processing relies on consent, without affecting the lawfulness of earlier processing.
• Complain to the competent authority and pursue rights available under applicable law when the relevant conditions are met.

Withdrawing consent for information necessary to communicate may prevent us from completing a response or request. Withdrawal does not prevent processing supported by another applicable legal basis.

12. Privacy Requests and Complaints

Email info@terrapulse.com.sa with the subject “Privacy Request”, describing your request and the contact details previously used. We may request the minimum information necessary to verify your identity or authority before acting.

We handle rights requests without delay and within 30 days. Where a lawful extension is justified, we will notify you in advance of the extension and its reasons. An extension will not exceed an additional 30 days.

You may submit a complaint to the Saudi Data and Artificial Intelligence Authority (SDAIA) through the complaint service on the National Data Governance Platform, subject to applicable procedures and time limits. Contacting us does not require you to waive that right.

13. Policy Updates

We may update this policy when processing purposes, services or legal requirements change, displaying the latest revision date. Where new consent or an additional notice is required, the appropriate step will be taken before the relevant processing.

14. Contact Details