Last updated: 2026

Nebras Business Holding (“Nebras”, “we”) is committed to protecting the privacy of visitors to its website, its clients and applicants for its vacancies. This policy explains the types of data we collect, the purposes of processing, the rights of data subjects, and the measures in place to protect information.

1. Data we collect

• Data you provide voluntarily: name, email address, mobile number, organisation name, the content of your message, and your CV and attachments when applying for a role.
• Data collected automatically: IP address, browser and device type, the pages you visited and time spent, for the purposes of performance analysis and improving the user experience.
• Cookies: we use cookies necessary for the operation of the site, and may use analytics cookies to measure performance. You can control these through your browser settings.

2. Purposes of processing

• Responding to your enquiries, consultation requests and partnership proposals.
• Assessing job applications and communicating with candidates.
• Sending the newsletter where you have subscribed, with the ability to unsubscribe at any time.
• Improving site content and performance and measuring channel effectiveness.
• Meeting statutory and contractual requirements.

3. Legal basis for processing

We process your data on the basis of your explicit consent when completing our forms; or to perform a contractual obligation or take preparatory steps towards a contract at your request; or to comply with a statutory obligation; or for a legitimate interest that does not override your fundamental rights and freedoms.

4. Data sharing

We do not sell or rent your personal data to any third party. We may share it only in the following cases:

• With subsidiaries within the group where needed to service your request.
• With technology service providers acting on our behalf under confidentiality and data protection obligations.
• Where there is a lawful request from a competent authority, or to protect our legal rights.

5. Data retention

We retain data for the period necessary to fulfil the purpose for which it was collected, or for the period required by statutory requirements. Applicant CVs are retained in the recruitment database for twelve months unless you request deletion sooner.

6. Data protection

We apply reasonable organisational and technical measures to protect data against unauthorised access, disclosure, alteration or destruction, including access controls, encryption in transit and backups. That said, no method of transmission over the internet can be guaranteed absolutely secure.

7. Your rights

• The right to access your data and to know how it is processed.
• The right to request correction of inaccurate or incomplete data.
• The right to request deletion of your data where the purpose of processing has lapsed or you withdraw consent.
• The right to withdraw consent at any time, without retroactive effect on prior processing.
• The right to object to processing for direct marketing purposes.

To exercise any of these rights, write to us at info@nbh.com.sa.

8. External links

The site may contain links to external websites whose content and privacy policies we do not control, and for whose practices we accept no responsibility.

9. Changes to this policy

We may update this policy from time to time; any update takes effect from the date it is published on this page. We recommend reviewing it periodically.

10. Contact

For any query relating to this policy or to the processing of your data:

• Email: info@nbh.com.sa
• Telephone: +966 13 834 7870
• Address: Al Khobar, Saudi Arabia

Editorial disclaimer

This draft has been prepared as a working framework covering the customary provisions and is not legal advice. It must be reviewed by Nebras’s legal counsel and aligned with the Personal Data Protection Law of the Kingdom of Saudi Arabia and its implementing regulations, together with any sector-specific requirements, before publication.