The English text below is the English privacy statement the owner supplied in the legal pack. It is shorter than the Arabic Privacy Policy and is not a translation of it. The Arabic Privacy Policy is the authoritative text.
Procura Platform respects the privacy of individuals and processes Personal Data in accordance with applicable laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law and its Implementing Regulations.
Procura may act as:
- Controller, where Procura determines the purposes and means of processing; or
- Processor, where Procura processes Personal Data on behalf of a Buyer or Customer.
Procura collects only Personal Data reasonably necessary for specified and lawful purposes and maintains appropriate organizational, administrative and technical safeguards.
Personal Data may include identity, contact, corporate, account, procurement, billing, payment, technical, authentication and transaction information.
Procura may process Personal Data to:
- provide Platform services;
- manage accounts;
- administer procurement workflows;
- process RFQs and quotations;
- facilitate Buyer-Supplier transactions;
- provide support;
- maintain security;
- prevent fraud;
- process subscriptions and billing;
- comply with legal requirements;
- improve services; and
- conduct permitted communications and marketing.
Where consent is required, Procura will obtain and document consent in accordance with applicable requirements.
Personal Data may be disclosed to Buyers, Suppliers, service providers, subprocessors, payment providers, professional advisers, regulators, governmental authorities and law-enforcement bodies where legally permitted or required.
Some service providers may operate outside Saudi Arabia. Where Personal Data is transferred or made accessible outside the Kingdom, Procura will apply the safeguards and requirements applicable under Saudi data-transfer regulations.
Procura will retain Personal Data only for as long as necessary for the relevant purpose or as required by applicable law, contractual obligations or legitimate legal requirements.
Data Subjects may have rights to information, access, obtain a readable copy, correction, completion, updating, destruction where applicable and withdrawal of consent where consent is the legal basis, subject to applicable limitations.
Privacy requests may be submitted to:
Procura may update this Privacy Policy from time to time. Material changes will be communicated where required.
Effective Date: xxxxxxx
Operating disclosures for this release of the platform
This section is written by the platform. It is not part of the owner's document text, and it states what the platform actually does in this release.
- Hosting: the current infrastructure is hosted in the European Union (Frankfurt, Germany) on managed cloud infrastructure. It is not inside the Kingdom. Hosting inside the Kingdom is planned.
- Sign-in: by a one-time code sent to the email address, or by a Google account. Multi-factor authentication is not available yet.
- Electronic invoicing: not available yet. Invoices carry the tax-invoice fields (VAT number, VAT at 15%, totals); there is no integration with the ZATCA e-invoicing platform, and the invoices issued from the platform are not certified electronic invoices.
- Payments: the platform holds no funds and executes no payments. It records payment instructions and bank references only.
- Sealed bids: bids are encrypted when submitted and are opened only at the stated deadline.