HALA Supply Chain Services (“HALA”, “we”, “our”, or “us”) respects the privacy of individuals who visit our website, contact us, submit inquiries, request information, engage with our digital channels, or interact with us in relation to our services.
This Privacy Policy explains how we collect, use, disclose, store, protect, and manage personal data. It is intended to align with applicable personal data protection requirements in the Kingdom of Saudi Arabia, including the Personal Data Protection Law and its Implementing Regulations, where applicable.
Scope of this Privacy Policy
This Privacy Policy applies to personal data collected through:
our website;
contact forms, RFQ forms, inquiry forms, and registration forms;
email, phone, digital channels, and business communications;
website analytics and cookies;
events, meetings, business development activities, and customer engagement;
service-related communications, where applicable.
This Privacy Policy does not replace any specific privacy notice, contract, data processing agreement, employment privacy notice, customer agreement, supplier agreement, or operational system policy that may apply in a specific context.
Who is responsible for your personal data
For website and general business inquiry purposes, HALA Supply Chain Services is the entity responsible for determining the purposes and means of processing the personal data collected through this website, unless otherwise stated.
Contact details:
HALA Supply Chain Services Email: Marketing@halagroup.com Address: Kingdom of Saudi Arabia
Personal data we may collect
Depending on how you interact with us, we may collect the following categories of personal data:
identity information, such as name, job title, company name, department, and business role;
contact information, such as email address, phone number, business address, and country;
business inquiry information, such as service requirements, RFQ details, industry sector, facility needs, shipment or storage requirements, and commercial preferences;
company information, such as company name, business activity, registration details, and authorized representative details where required;
technical information, such as IP address, device type, browser type, operating system, website usage data, page visits, time stamps, and cookie identifiers;
communication information, such as messages, emails, meeting notes, feedback, complaints, and records of business correspondence;
service-related information, where applicable, such as delivery or receiving contact details, site access details, documentation contacts, and operational coordination data.
We do not intentionally collect sensitive personal data through the public website unless required for a specific lawful purpose and subject to appropriate controls.
How we collect personal data
We may collect personal data directly from you when you:
visit our website;
submit a contact, inquiry, RFQ, or registration form;
subscribe to updates or request information;
communicate with us by email, phone, WhatsApp, social media, or other business channels;
meet with our teams or engage in commercial discussions;
provide information as part of customer, supplier, partner, or operational onboarding.
We may also collect limited technical information automatically through cookies, analytics tools, server logs, and similar technologies.
Purposes of processing
We may use personal data for the following purposes:
responding to inquiries and requests;
preparing commercial discussions, proposals, RFQs, and service assessments;
evaluating service fit, operational feasibility, facility requirements, and compliance needs;
managing customer, supplier, partner, and stakeholder relationships;
arranging meetings, site visits, presentations, and follow-up communication;
operating, securing, improving, and monitoring the website;
understanding website usage and improving user experience;
sending business updates, service information, or marketing communications where permitted;
managing legal, regulatory, compliance, safety, audit, and risk requirements;
protecting HALA’s rights, systems, operations, facilities, people, and legitimate business interests;
complying with applicable laws, regulations, court orders, authority requests, and contractual obligations.
Legal basis for processing
We process personal data where there is a lawful basis to do so. Depending on the context, this may include:
your consent;
performance of a contract or steps before entering into a contract;
compliance with legal or regulatory obligations;
protection of vital interests, where applicable;
legitimate business interests, provided they do not override applicable individual rights;
any other lawful basis permitted under applicable data protection laws.
Where processing is based on consent, you may withdraw your consent where permitted by law. Withdrawal of consent does not affect processing that occurred before withdrawal.
Sharing personal data
We may share personal data where necessary and lawful with:
HALA affiliates, business units, employees, and authorized representatives;
service providers supporting website hosting, IT, cybersecurity, analytics, CRM, email, communications, marketing, or business operations;
professional advisers, including legal, audit, tax, insurance, compliance, and consulting advisers;
logistics partners, transport providers, warehouse operators, technology providers, customs brokers, inspection bodies, or other operational parties where required for a service request or engagement;
government authorities, regulators, courts, law enforcement agencies, and public bodies where required by law or official request;
third parties involved in a business transaction, restructuring, merger, acquisition, or transfer of business, subject to appropriate safeguards.
We do not sell personal data.
International data transfers
Some personal data may be processed, stored, or accessed outside the Kingdom of Saudi Arabia where necessary for business, technical, cloud, operational, or service-related purposes.
Where personal data is transferred internationally, HALA will take steps designed to comply with applicable legal requirements and protect the data through appropriate safeguards, contractual controls, and security measures where required.
Data retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law, contract, regulatory requirement, audit need, dispute management, or legitimate business purpose.
Retention periods may vary depending on the type of data, nature of the relationship, service context, legal requirements, and operational needs.
When personal data is no longer required, we will delete, anonymize, archive, or securely restrict it in accordance with applicable requirements and internal retention practices.
Data security
HALA applies reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction.
These measures may include access controls, system security, role-based permissions, monitoring, contractual safeguards, employee awareness, secure storage practices, and other controls appropriate to the nature of the data and processing activity.
No digital transmission or storage system can be guaranteed to be completely secure. However, HALA works to maintain appropriate controls aligned with the nature of its business and applicable requirements.
Your rights
Subject to applicable law and verification requirements, you may have rights in relation to your personal data, including the right to:
be informed about how your personal data is processed;
access your personal data;
request correction or completion of inaccurate or incomplete personal data;
request deletion or destruction of personal data where permitted by law;
withdraw consent where processing is based on consent;
object to certain processing activities where applicable;
request a copy of your personal data in a readable format where applicable;
submit complaints or concerns to the relevant competent authority.
To exercise your rights, please contact us using the details in this Privacy Policy. We may ask for information to verify your identity and process your request.
Marketing communications
We may send business updates, service information, event invitations, or marketing communications where permitted by law. You may opt out of marketing communications at any time by using the unsubscribe mechanism, contacting us directly, or following the instructions in the communication.
Service-related, contractual, operational, compliance, or administrative communications may still be sent where necessary.
Cookies and analytics
Our website may use cookies and similar technologies to operate the website, improve performance, understand website usage, remember preferences, and support analytics or marketing activity.
Cookies may collect technical data such as IP address, browser type, device information, pages visited, time spent, and interaction patterns.
You can manage or disable cookies through your browser settings. Some website features may not function properly if cookies are disabled.
Third-party websites
Our website may include links to third-party websites, platforms, maps, social media pages, or external tools. This Privacy Policy does not apply to third-party websites. HALA is not responsible for the privacy practices, content, security, or data handling of third parties.
You should review the privacy policies of any third-party website you visit.
Children’s privacy
The website is intended for business and professional users. HALA does not knowingly collect personal data from children through the public website. If we become aware that children’s personal data has been collected without appropriate legal basis, we will take steps to delete or manage it in accordance with applicable law.
Updates to this Privacy Policy
HALA may update this Privacy Policy from time to time to reflect legal, operational, technical, or business changes. The updated version will be posted on this website with a revised “Last updated” date.
Contact us
For privacy questions, requests, or complaints, please contact:
HALA Supply Chain Services Email: Marketing@halagroup.com