Privacy Policy

National Lighting Company ("NLC", "we", "our", or "us") values your privacy and is committed to protecting your personal data in accordance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia and the applicable regulations issued by the Saudi Data & AI Authority (SDAIA).

This Privacy Policy explains how we collect, use, store, share, and protect personal data when you visit nlc.com.sa or communicate with us through our online forms.

1. Who We Are

NLC is the data controller responsible for the personal data collected through this website.

• Company name: National Lighting Company (NLC)
• Unified National Number: 7001368005
• VAT Registration Number: 300453771700003
• Address: Second Industrial City, P.O. Box 106, Dammam 34332, Saudi Arabia
• Email: info@nlc.com.sa
• Phone: +966 9200 16374

2. Personal Data We Collect

We may collect the following personal data when you use our website or submit a form:

• Full name
• Company or organization name
• Job title
• Email address
• Phone number
• City or country
• Message or inquiry details
• For vendor and customer registration: company legal and statutory details and the documents you upload (for example Commercial Registration, VAT certificate, National Address, and banking details where you provide them)
• Any information you voluntarily provide through our forms
• Technical data such as IP address, browser type, device type, pages visited, and website usage data
• Cookies and similar tracking data, where applicable

We only collect personal data that is necessary for the purposes described in this Privacy Policy.

3. How We Collect Personal Data

• Contact and inquiry forms
• Newsletter or subscription forms
• Vendor and customer registration forms
• Website analytics tools (only after you accept analytics cookies)
• Cookies and similar technologies
• Direct communication by email, phone, or online channels

4. Why We Use Your Personal Data

• To respond to your inquiries, requests, and quotation needs
• To provide information about our products, services, projects, and solutions
• To process vendor and customer registrations and manage our business relationship with you
• To improve our website, services, and user experience
• To analyze website performance and visitor behavior
• To send marketing communications, only where permitted or where you have given consent
• To protect the security of our website and systems
• To comply with legal or regulatory obligations in the Kingdom of Saudi Arabia

We do not use your personal data for purposes unrelated to the purpose for which it was collected, unless permitted by law or with your consent.

5. Cookies and Website Analytics

Our website uses essential cookies needed for basic functionality, and optional analytics cookies (Google Analytics) to understand how visitors use the website.

Analytics cookies are not loaded until you accept them. On your first visit a consent banner asks for your choice; nothing is sent to Google Analytics unless you select "Accept". You can change your choice at any time using your browser settings, or by clearing the stored choice to bring the banner back. Where analytics run, we enable IP anonymization.

Separately from Google Analytics, our own website server keeps anonymous visit statistics for all visitors, without cookies. It records only the page address, the website you arrived from (domain only), campaign tags in the link, page language, device type (mobile, tablet or desktop), your browser's time zone, and whether links such as WhatsApp, phone or datasheet links were used. This information is stored only as daily totals. We do not store IP addresses, device identifiers or anything that identifies you, and these statistics are not shared with third parties.

Cookies may collect information such as your IP address, browser type, device type, pages visited, and time spent on the website. Disabling cookies may affect some website functions.

6. Sharing Personal Data

We may share personal data with trusted third parties only when necessary, including:

• Our website hosting provider
• Email and newsletter delivery providers (for example Brevo) used to send transactional and subscription emails
• Analytics service providers (Google Analytics)
• Government or regulatory authorities when required by law

We require third parties that process personal data on our behalf to protect the data and use it only for the agreed purpose. We do not sell personal data.

7. Transfer of Personal Data Outside Saudi Arabia

In some cases personal data may be processed or stored outside the Kingdom of Saudi Arabia, for example when using international email delivery or analytics providers. Where personal data is transferred outside Saudi Arabia, we take the appropriate measures required by the applicable laws and regulations to protect it.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purpose for which it was collected, unless a longer retention period is required by law or legitimate business needs. When personal data is no longer needed, we securely delete, anonymize, or destroy it.

9. Data Security

We apply appropriate technical and organizational measures to protect personal data from unauthorized access, loss, misuse, alteration, disclosure, or destruction. These measures may include access controls, secure storage, system monitoring, encryption where appropriate, and internal data protection procedures. No transmission over the internet can be guaranteed 100% secure.

10. Your Rights

Subject to applicable law, you may have the right to:

• Be informed about how your personal data is collected and used
• Access your personal data and request a copy of it
• Request correction of inaccurate or incomplete data
• Request deletion or destruction of your personal data where permitted
• Withdraw your consent where processing is based on consent

To exercise your rights, please contact us at info@nlc.com.sa.

11. Marketing Communications

We may send you marketing communications about our products, services, or updates only where permitted by law or where you have provided consent. You may opt out at any time by contacting us or using the unsubscribe link included in our emails.

12. Children's Privacy

Our website is intended for business and general informational use. We do not knowingly collect personal data from children. If we become aware that a child's personal data has been collected without proper authorization, we will take appropriate steps to delete it.

13. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, website, or legal requirements. The updated version will be published on this page with a revised "Last updated" date.