Effective Date: 29/09/2026

1. Introduction and Scope

Arabian Plastic Industrial Co. (APICO) is committed to protecting your personal data and respecting your privacy in accordance with the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations.

This Policy explains how your personal data is collected through www.apico.com.sa, used, stored, and destroyed, and describes your rights and how to exercise them. APICO is the data controller responsible for processing the personal data covered by this Policy.

This Policy covers information submitted through the website inquiry form and its subsequent processing within APICO’s systems to respond to inquiries, prepare quotations, and follow up on requests. It does not cover employee data, job applications, or customer data collected through other channels, which are covered by separate privacy notices.

2. Personal Data We Collect and How We Collect It

We collect personal data directly from you when you complete the website inquiry form, including:

• Name.
• Company name.
• Email address.
• Telephone number.
• City.
• Inquiry type.
• Message text and any information you provide within it.

All fields in the inquiry form are mandatory, and the request cannot be submitted without completing them. Providing inaccurate information may prevent us from contacting you or processing your request.

Please limit your message to information necessary for your inquiry and avoid including sensitive personal data or information unrelated to your request.

3. Processing Purposes and Legal Basis

We process your personal data based on the consent you provide through the consent checkbox in the inquiry form for the following purposes:

• Responding to your inquiry and communicating with you about it.
• Understanding your requirements relating to APICO’s products and services.
• Preparing quotations and following up on related requests.

We do not use inquiry form data to send marketing communications or process it for purposes incompatible with its collection purpose, except where permitted by law.

You may withdraw your consent by contacting our Data Protection Officer. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. It may prevent us from continuing to handle your request where that processing depends on your consent.

4. How We Process and Share Personal Data

Inquiry data is recorded in APICO’s systems. Authorized employees review and use it to communicate with you, prepare quotations, and follow up on requests, with access permissions appropriate to their responsibilities.

APICO uses technology service providers to host systems and store data under arrangements and contracts designed to protect it. We do not sell your personal data or share it with other parties for their independent marketing purposes.

We may disclose personal data to competent authorities to comply with a legal requirement or an enforceable judicial request.

5. Data Storage and Protection

Personal data is stored electronically in APICO’s systems and associated backups. Some of this data is stored and processed outside the Kingdom of Saudi Arabia in accordance with applicable legal requirements and under appropriate protective arrangements and safeguards.

APICO implements technical and organizational measures to protect personal data against unauthorized access or disclosure, loss, damage, and unlawful alteration. These measures include encrypted website connections, access permissions based on job responsibilities, multi-factor authentication for the systems used, and backups.

6. Data Retention and Destruction

We retain inquiry and quotation data for as long as necessary to process and follow up on the request. Once the collection purpose has been fulfilled, the data is securely deleted or destroyed through manual or automated procedures, depending on where it is stored.

Exceptions apply where retention is required for a specified period by law or where the data relates to ongoing judicial proceedings that require its retention. The data is destroyed once the applicable retention period or reason for continued retention ends, in accordance with legal requirements.

7. Your Personal Data Rights

Subject to the conditions and exceptions under the PDPL and its Implementing Regulations, you have the right to:

• Be informed: Understand how your data is collected and processed, the legal basis, and the purpose.
• Access: Access your personal data held by APICO.
• Obtain a copy: Request your personal data in a clear and readable format.
• Correction: Request correction, completion, or updating of your personal data.
• Destruction: Request destruction of personal data that is no longer needed, subject to legal retention requirements.
• Withdraw consent: Withdraw your consent to processing that relies on it.
• Complain: Submit a complaint to the competent authority concerning the processing of your personal data.

8. Exercising Your Rights and Contacting Us

APICO has appointed a Data Protection Officer to oversee privacy matters. To exercise your rights or submit a privacy-related inquiry or complaint, please contact:

Email: [email protected]
Telephone: +966126380101
Address: Industrial City 1, Street 45, Phase 3, Jeddah, Kingdom of Saudi Arabia.

Please explain the nature of your request and provide sufficient information to identify the relevant data. We may request additional information only as necessary to verify your identity and protect your data against unauthorized disclosure.

The Data Protection Officer reviews requests and coordinates with the relevant department to address them and respond within the legally prescribed timeframes.

Contacting APICO does not limit your right to submit a complaint to the Saudi Data & AI Authority (SDAIA).

9. Updates to This Privacy Policy

We may update this Policy to reflect changes in our data processing practices or applicable legal requirements. The updated version will be published on the website with its effective date, and additional notice will be provided where legally required.

Updating this Policy does not, by itself, constitute your consent to any new processing that requires separate consent.