Privacy Policy

This notice explains how Midad National Energy Company (“Midad Energy”, “we”, “us”) handles personal data that reaches us through this website, midadenergy.com. It is written to meet Saudi Arabia’s Personal Data Protection Law (PDPL) and its implementing regulations.

Who is responsible for your data

Midad National Energy Company is the controller of personal data collected through this website.

Midad National Energy Company
8053 King Fahad Road, Al Olaya, Riyadh 12214, Kingdom of Saudi Arabia
Telephone: +966 11 263 2284
Email: info@midadenergy.com

This notice covers this website only. Other websites we link to, including those of companies under the same ownership, are responsible for their own notices.

What we collect

This site has no visitor accounts, no analytics, no advertising and no social media plugins. Personal data reaches us in three ways.

When you send us a form

The contact, media, partnership, supplier and careers forms ask for:

• your name and email address
• your organisation, where the form asks for it
• your phone number, if you choose to give it
• your message, and the topic or role it concerns

The careers form also accepts a CV, which may contain further details you choose to include, such as your employment history, education and qualifications.

With every form, your browser also sends the address of the page you submitted it from and the language of the site. If you have accepted campaign attribution, it sends the campaign details of the link that brought you here. The Cookie Policy explains that choice.

Please do not send us sensitive personal data, such as health information or religious beliefs, unless the role you are applying for requires it and we have asked.

When you browse

Like any web server, the service that hosts this site receives your IP address, browser type, the pages requested and the time of each request. This is used to deliver the pages and to protect the site against abuse. We do not use it to identify you or to build a profile of you.

When you email or call us

If you contact us directly, we receive whatever you choose to send, together with your email address or phone number.

Why we use it, and on what basis

We do not sell personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.

Who we share it with

Your data is seen only by the people at Midad Energy who need it to deal with your enquiry or application. We also use service providers who process data on our behalf, under contract and only on our instructions:

• Formspree, which receives form submissions, including CVs, and delivers them to us.
• Netlify, which hosts this website.
• Our email provider, through which submissions and correspondence reach our staff.

We may also share data with our professional advisers, with other companies in our group where your enquiry concerns them, or with public authorities where the law requires it.

Transfers outside Saudi Arabia

Formspree and Netlify are based in the United States, so data you submit through this website is transferred to and stored in the United States. We make these transfers in line with the PDPL’s rules on transfers outside the Kingdom, limit them to what the service needs, and rely on the providers’ contractual and security commitments to protect the data.

How long we keep it

We follow the PDPL’s rule on retention: personal data is destroyed once the purpose for which it was collected has ended.

• Enquiries are kept while we deal with the matter you raised and any follow-up.
• Applications and CVs are kept while the recruitment process for the role runs, or for longer only if you have agreed to be considered for future roles.

The law allows data to be kept after its purpose has ended in three cases, and we keep it only in those cases:

• where all details that could identify you have been removed
• where another law requires us to keep it for a set period, in which case we destroy it when that period ends
• where it is closely connected to a case before a court or other judicial authority, until that case is finally resolved

You can ask us to destroy your data sooner; see your rights below.

How we protect it

The site is served only over an encrypted connection, and forms are sent encrypted. Access to submissions is limited to the staff who handle them. The site loads no third-party scripts, and its security settings block content from any other source.

No transmission over the internet is completely secure. If you need to send something confidential, contact us first and we will agree a secure way to receive it.

Your rights

Under the PDPL you have the right to:

• be informed about how your data is collected and used, which is the purpose of this notice
• access the personal data we hold about you, and obtain a copy in a readable format
• ask us to correct data that is inaccurate, incomplete or out of date
• ask us to destroy data we no longer need
• withdraw your consent at any time, where we rely on it; this does not affect anything we did before you withdrew it

To use any of these rights, email info@midadenergy.com with the subject “Personal data request”. We may ask you to confirm your identity before we act. If you are in a country whose law gives you further rights, we will respect them.

If you are not satisfied with our response, you can complain to the Saudi Data & AI Authority (SDAIA), which oversees the PDPL.

Children

This website is intended for adults and for organisations. We do not knowingly collect personal data from anyone under 18.

Cookies and browser storage

This site sets no advertising or analytics cookies. The Cookie Policy lists everything it stores in your browser, why, and how to change your choice.

Changes to this notice

We will update this notice when the way we handle personal data changes. The date at the top of the page shows when it was last revised.