Privacy Notice
Who we are
TenderCasa operates this platform and acts as the controller of the personal data processed through it, within the meaning of the Saudi Personal Data Protection Law (PDPL).
Data we collect
Business identifiers (Commercial Registration and VAT numbers), contact details of representatives (name, email, phone), uploaded verification documents, and records of platform activity such as tenders, bids and decisions.
Lawful basis
We process this data to perform the platform agreement with your business, to meet legal obligations, and for the legitimate purpose of operating a verified procurement marketplace.
How we use it
To verify businesses, operate tenders and bids, notify you of relevant activity, keep an audit trail of decisions, and improve the service.
Sharing
Data is shared only as needed to operate the platform: verification reviewers see submitted profiles and documents, and counterparties see the business information a tender or bid necessarily discloses. We do not sell personal data.
Retention
Verification records and tender history are retained while your account is active and as required for audit and legal purposes, then deleted or anonymised.
Where data is hosted
The platform runs on cloud infrastructure that may store data outside the Kingdom. Transfers are made in accordance with PDPL requirements.
Your rights under PDPL
Representatives may request access to, correction of, or deletion of their personal data, and may withdraw consent where processing relies on it, subject to legal retention duties.
Contact
Privacy requests can be made through the platform's contact channels.
Changes to this notice
Updates are versioned; the version below matches the notice you accepted at registration.
Version 2026-07-17