1. Introduction and Scope

SICAST ("SICAST", "we", "us" or "our") is an industrial metal-casting and foundry manufacturer based in the Kingdom of Saudi Arabia, producing castings such as valve bodies, pump components, flanges and fittings for business clients. We respect the privacy of every visitor to our website and are committed to protecting personal data in accordance with the laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law issued by Royal Decree No. M/19 dated 9/2/1443H (the "PDPL") and its Implementing Regulations, supervised by the Saudi Data and Artificial Intelligence Authority ("SDAIA").

This Privacy Policy explains how we collect, use, share, store and protect personal data when you visit our website, submit a quote request, send a contact enquiry, or otherwise interact with us. It also describes the rights available to you and how you can exercise them.

  • This policy applies to personal data processed through our website and related communications.
  • It does not apply to third-party websites, platforms or services that may be linked from our website.
  • By using our website and providing personal data to us, you confirm that you have read and understood this policy.

Because our website is intended for business-to-business interactions, much of the information we handle relates to companies and their representatives. Where such information identifies or can reasonably identify an individual, it is treated as personal data under this policy.

2. Information We Collect

We collect personal data that you provide to us directly and certain technical data that is generated automatically when you use our website. The categories of information we may collect include the following.

Identity and Contact Data

  • Your name, job title or role, and the company you represent.
  • Business email address, telephone or mobile number, and postal or business address.

Company and Business Details

  • Company or organisation name, sector, country of operation and similar business information.
  • Any details you provide about your project, sourcing requirements or procurement needs.

Quote-Request and Enquiry Content

  • The content of quote requests and contact enquiries you submit, including descriptions of the parts or castings you require.
  • Files and documents you upload, such as technical drawings, 3D models, specifications, material requirements, tolerances and related engineering data.
  • Any other information you choose to include in your messages or attachments.

Technical and Usage Data

  • Internet protocol (IP) address, device type, browser type and version, operating system and language settings.
  • Pages visited, time spent on pages, referring website and other interaction data that helps us understand how our website is used.

Cookies and Similar Data

  • Information collected through cookies and similar technologies, as described in the Cookies section of this policy.

We ask that you do not submit sensitive personal data or any information that is not relevant to your enquiry. You are responsible for ensuring that any drawings, models or specifications you upload do not infringe the rights of third parties and that you are permitted to share them with us.

3. How We Collect Your Information

We collect personal data through a number of channels, as follows.

  • Information you give us directly: when you complete a quote-request form, send a contact enquiry, upload drawings or specifications, exchange emails or calls with our team, or otherwise correspond with us.
  • Information collected automatically: when you browse our website, we collect technical and usage data through server logs, cookies and similar technologies.
  • Information from third parties: in limited cases we may receive information from your colleagues who refer you, from publicly available business sources, or from service providers that support the operation of our website and our sales process.

Where applicable Saudi law requires your consent for a particular collection or use of personal data, we will obtain it before processing, and you may withdraw that consent at any time as described below.

4. Purposes and Grounds for Processing

We process personal data only for legitimate purposes that are clear and consistent with the way it was collected, and on a lawful ground recognised under the PDPL and its Implementing Regulations. In general, we process personal data on one or more of the following grounds: with your consent; where processing is necessary to take steps at your request or to perform a contract to which you or the entity you represent is a party; where processing is necessary to comply with a legal obligation in the Kingdom of Saudi Arabia; or where processing serves a legitimate interest that does not prejudice your rights and interests, in the cases and conditions permitted by the PDPL. The main purposes for which we process your data are set out below.

  • Responding to quote requests and enquiries: to review your requirements, evaluate uploaded drawings, 3D models and specifications, prepare quotations and communicate with you, including taking steps at your request.
  • Providing and managing our products and services: to fulfil orders, manage the client relationship and provide related support.
  • Operating, maintaining and improving our website: to ensure the website functions correctly, is secure and is improved over time.
  • Communicating with you: to send administrative messages, respond to your requests and, where permitted, share relevant business information.
  • Complying with legal and regulatory obligations: to meet our obligations under the applicable laws and regulations of the Kingdom of Saudi Arabia, including record-keeping, tax and other statutory requirements.
  • Protecting our rights and security: to prevent fraud, misuse and security incidents, and to establish, exercise or defend legal claims.

Where we rely on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal. Where we rely on another lawful ground under the PDPL, we will process your personal data only to the extent and for the purposes permitted by applicable Saudi law.

5. Cookies and Similar Technologies

Our website uses cookies and similar technologies to operate effectively and to understand how visitors use it. Cookies are small text files placed on your device when you visit a website.

  • Strictly necessary cookies: required for the website to function, including for security and basic navigation. These cannot be switched off in our systems.
  • Performance and analytics cookies: help us understand how the website is used so we can improve it, by collecting aggregated information about visits and interactions.
  • Functionality cookies: allow the website to remember choices you make, such as language preferences, to provide a more tailored experience.

You can control and manage cookies through your browser settings, including blocking or deleting cookies. Please note that disabling certain cookies may affect the functionality of our website. Where required by applicable Saudi law, we will seek your consent before placing non-essential cookies on your device.

6. How We Share and Disclose Information

We do not sell your personal data. We share personal data only where necessary for the purposes described in this policy and in accordance with applicable Saudi law. We may disclose personal data to the following categories of recipients.

  • Service providers: trusted third parties who provide services on our behalf, such as website hosting, file storage, IT support, communications, analytics and similar operational services. These providers are permitted to use the data only as needed to perform their services for us and are required to keep it confidential and secure.
  • Group companies and affiliates: where applicable, we may share data with our affiliated or related entities for the purposes described in this policy and to manage our relationship with you.
  • Legal and regulatory requirements: we may disclose data where required to comply with a legal obligation, a lawful request from a competent authority in the Kingdom of Saudi Arabia, or to protect our rights, property or safety, or those of others.
  • Business transfers: in connection with a corporate transaction such as a merger, acquisition or reorganisation, subject to appropriate confidentiality and data protection safeguards.

We take care to ensure that any technical drawings, 3D models and specifications you share are disclosed only to those who genuinely need access to respond to your enquiry or fulfil your requirements.

7. Cross-Border Data Transfers

SICAST is based in the Kingdom of Saudi Arabia, and your personal data is primarily processed within the Kingdom. In some cases, personal data may be transferred to or accessed from outside the Kingdom, for example where a service provider or affiliate operates internationally.

Where personal data is transferred to a party outside the Kingdom of Saudi Arabia, we carry out such transfers in accordance with the PDPL and its Implementing Regulations, including the rules and conditions governing the transfer and disclosure of personal data outside the Kingdom. We take appropriate steps to ensure that an adequate level of protection applies to your personal data, no less than the level of protection guaranteed by the PDPL, and that the transfer is permitted under applicable Saudi law.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to respond to your enquiry, manage our business relationship, and meet our legal, regulatory, accounting and reporting obligations under the laws of the Kingdom of Saudi Arabia.

  • Quote-request and enquiry content, including uploaded drawings, 3D models and specifications, is retained for the period needed to evaluate and respond to your request and to support any resulting business relationship.
  • Where data is no longer required, we will securely delete it or anonymise it so that it can no longer be associated with you.
  • We may retain certain information for longer periods where this is required to comply with the law or to establish, exercise or defend legal claims.

The criteria we use to determine retention periods include the nature of the data, the purpose of processing, and applicable legal and contractual requirements.

9. Data Security

We implement appropriate technical, organisational and administrative measures designed to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures are aligned with our obligations under applicable Saudi law, including the PDPL and its Implementing Regulations.

  • Access to personal data, including uploaded technical files, is limited to authorised personnel who need it to perform their duties.
  • We apply administrative, physical and technical safeguards appropriate to the sensitivity of the data we hold.
  • We require our service providers to maintain suitable security measures when handling personal data on our behalf.

While we take reasonable steps to safeguard your information, no method of transmission over the internet or electronic storage is completely secure. We therefore cannot guarantee absolute security, and any transmission of data is at your own risk. If you have reason to believe that your interaction with us is no longer secure, please contact us using the details in this policy.

10. Your Rights Under the PDPL

Subject to the conditions and exceptions set out in the PDPL and its Implementing Regulations, you have the following rights in relation to your personal data.

  • The right to be informed: to know the legal ground and purpose for collecting and processing your personal data.
  • The right to access: to obtain access to your personal data that we hold, in line with applicable regulations.
  • The right to request correction: to request that we correct, update or complete personal data that is inaccurate or incomplete.
  • The right to request deletion: to request that we delete your personal data where it is no longer required for the purposes for which it was collected, subject to legal retention requirements.
  • The right to withdraw consent: to withdraw any consent you have previously given for the processing of your personal data, at any time, without affecting the lawfulness of processing carried out before withdrawal.
  • The right to lodge a complaint: to lodge a complaint with the competent authority, the Saudi Data and Artificial Intelligence Authority (SDAIA), if you believe your data has not been handled in accordance with the law.

How to Exercise Your Rights

To exercise any of these rights, please contact us using the details in the Contact Us section below. We may need to verify your identity before responding to your request. We will respond within the timeframes and in the manner required by applicable Saudi law. There is generally no charge for exercising your rights, although we may apply a reasonable fee or decline a request in the cases permitted under the PDPL and its Implementing Regulations.

11. Children's Privacy

Our website is intended for business-to-business interactions and is directed to professionals and organisations. It is not directed to children, and we do not knowingly collect personal data from children.

If you believe that a child has provided personal data to us, please contact us using the details below so that we can take appropriate steps to remove that information in accordance with applicable Saudi law.

12. Third-Party Links

Our website may contain links to third-party websites, platforms or resources that are not operated or controlled by us. These links are provided for convenience and information only.

This Privacy Policy does not apply to those third-party websites, and we are not responsible for their content, security or privacy practices. We encourage you to review the privacy policies of any third-party website you visit before providing your personal data.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable legal and regulatory requirements in the Kingdom of Saudi Arabia.

When we make changes, we will revise the "Last updated" date shown below. Where changes are significant, we will take reasonable steps to bring them to your attention. We encourage you to review this policy periodically to stay informed about how we protect your personal data. Your continued use of our website after any update constitutes your acknowledgement of the revised policy.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or would like to make a request regarding your personal data, please contact us using the details below.

  • SICAST
  • Sudair Industrial City, Riyadh Region, Kingdom of Saudi Arabia
  • Email: [email protected]
  • Phone: +966 50 356 7148

This Privacy Policy is governed by and construed in accordance with the laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law and its Implementing Regulations. Any dispute arising out of or in connection with this policy shall be subject to the exclusive jurisdiction of the competent courts of Riyadh, Kingdom of Saudi Arabia. You also have the right to lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA) as the competent supervisory authority.

Last updated: 22 June 2026