Privacy Policy

This Privacy Policy applies to haqum.com and to anyone who visits the site, submits a quote request or contact form, subscribes to our newsletter, or otherwise interacts with us through this website, regardless of the country from which you access it.

This Policy is drafted to comply with the Kingdom of Saudi Arabia’s Personal Data Protection Law (PDPL), issued under Royal Decree No. M/19 dated 9/2/1443H (16 September 2021), as amended by Royal Decree No. M/148 dated 5/9/1444H (27 March 2023), together with its Implementing Regulations and the Regulations on Personal Data Transfers Outside the Kingdom, both issued by the Saudi Data & AI Authority (SDAIA). Where visitors access this site from outside the Kingdom, we also apply internationally recognised data protection principles, including those reflected in the EU General Data Protection Regulation (GDPR), to the extent relevant.

Hamed Al-Qahtani Universal Markets Company is a Saudi limited liability company headquartered in Dammam, Eastern Province, Kingdom of Saudi Arabia, distributing uniforms, safety workwear, flame-resistant clothing, and personal protective equipment across the Kingdom since 1962.

For the purposes of this Policy and the PDPL, HAQUM is the data controller responsible for personal data collected through this website. Our contact details are provided in Section 17 below.

We collect only the personal data necessary to operate this website and respond to your inquiries. Depending on how you interact with us, this may include:

• Contact details — name, company name, job title, location, email address, and phone number, submitted through our quote request or contact forms, or newsletter sign-up.
• Inquiry content — the products, brands, standards, or industries you reference, your stated purpose of inquiry, and any message you provide.
• Technical data — your preferred site language, stored in a cookie, and standard web server logs (such as IP address and browser type) needed to operate and secure the site.
• Communication records — records of calls, emails, or messages exchanged with our sales and customer service team following your inquiry.

We do not knowingly collect sensitive personal data (such as health, religious, or biometric data) through this website, and this site does not process online payments, as HAQUM does not operate e-commerce checkout.

We use personal data only for legitimate business purposes connected to operating this website and serving our customers, including to:

• Respond to quote requests, product inquiries, and customer service messages
• Provide product, pricing, availability, and standards-compliance information across our brand catalogue
• Operate, maintain, and secure this website
• Send newsletter updates you have opted in to receive
• Comply with legal, regulatory, and contractual obligations applicable in Saudi Arabia
• Detect, investigate, and prevent fraud, misuse, or security incidents

We process personal data only where a lawful basis exists under Articles 5 and 6 of the PDPL, namely:

• Your explicit consent — for example, when you subscribe to our newsletter. You may withdraw consent at any time.
• Your actual interest — where processing is necessary to serve a real interest of yours, such as responding to a quote request or inquiry you have submitted.
• Our legitimate interest — in operating, securing, and improving this website, provided the data is not sensitive data and the processing does not prejudice your rights or reasonable expectations.
• Compliance with a legal obligation — under the laws and regulations of the Kingdom of Saudi Arabia.

Where the GDPR applies to a visitor from the European Union, we rely on the equivalent lawful bases under Article 6 GDPR (consent, contract, legitimate interests, and legal obligation).

This website uses a minimal set of cookies. A strictly necessary cookie remembers your language preference (English/Arabic) and your cookie-notice choice. We do not use analytics, advertising, or third-party tracking cookies on this site.

You can clear or block cookies at any time through your browser settings; doing so may reset your language preference or cause the cookie notice to reappear.

We do not sell personal data. We may share it only with:

• Service providers who host this website or support our IT, hosting, and customer inquiry systems, under confidentiality obligations
• Our brand partners (such as Harbor, Dickies, Redkap, MSA, and uvex), only where necessary to fulfil a product inquiry or warranty matter you have raised
• Government authorities or regulators in the Kingdom of Saudi Arabia, where required by law, court order, or a valid regulatory request
• A successor entity in the event of a merger, acquisition, or restructuring of our business, subject to the same protections described in this Policy

We transfer personal data outside the Kingdom of Saudi Arabia — for example, to a hosting or IT service provider — only in accordance with Article 29 of the PDPL and the Regulations on Personal Data Transfers Outside the Kingdom. This means the transfer is made either to a country assessed by SDAIA as providing an adequate level of protection, or subject to appropriate safeguards such as standard contractual clauses, binding common rules, or an accredited certification. Where required, we carry out a documented risk assessment before the transfer, consistent with SDAIA’s Risk Assessment Guideline for Transferring Personal Data Outside the Kingdom, and we limit any transfer to the minimum personal data necessary.

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected — typically for the duration of an active inquiry or business relationship, plus a reasonable period afterward to meet legal, accounting, or dispute-resolution requirements under Saudi law. Newsletter contact details are retained until you unsubscribe or withdraw consent. When personal data is no longer required, we destroy or anonymise it in accordance with the PDPL and its Implementing Regulations.

We maintain administrative, technical, and physical safeguards designed to protect personal data against unauthorised access, disclosure, alteration, or destruction, consistent with our ISO 9001:2015-certified quality management practices. No method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.

If a breach, damage, or illegal access to personal data occurs, we will notify the Saudi Data & AI Authority (SDAIA) within 72 hours of becoming aware of the incident, through the National Data Governance Platform, where the conditions for notification under the Implementing Regulations are met. We will also notify affected individuals without undue delay where the incident may cause harm to them or to their data, together with guidance on protective steps they can take.

Subject to the exceptions and conditions set out in the PDPL and its Implementing Regulations, you have the right to:

• Know the legal basis and purpose for collecting your personal data
• Access the personal data we hold about you
• Obtain a copy of your personal data in a clear, readable format
• Request correction of inaccurate or incomplete personal data
• Request destruction or deletion of your personal data once it is no longer required for the purpose it was collected for
• Withdraw consent at any time, where processing is based on consent (for example, unsubscribing from our newsletter)
• Lodge a complaint with the Saudi Data & AI Authority (SDAIA), the Kingdom’s competent authority for personal data protection

To exercise any of these rights, contact us using the details in Section 17 below. We may need to verify your identity before actioning a request, and we will respond within the period specified in the Implementing Regulations (generally no more than thirty days, extendable in limited circumstances).

If you are a visitor from the European Union and the GDPR applies to our processing of your data, you may also have the rights to data portability, to object to or restrict certain processing, and to lodge a complaint with the supervisory authority in your country.

This website is intended for business and consumer audiences seeking workwear, safety wear, and PPE information, and is not directed at children. We do not knowingly collect personal data from individuals under 18 years of age. If you believe a child has provided us with personal data, please contact us so we can remove it.

This website may link to third-party sites, including brand-partner websites and our social media pages (such as LinkedIn). We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies before providing them with personal data.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements, including future amendments to the PDPL and its Implementing Regulations. The "Last updated" date at the top of this page shows when this Policy was last revised. Where a change materially affects how we process your personal data, we will take reasonable steps to bring it to your attention. We encourage you to review this page periodically.

This Policy is issued in both Arabic and English. In the event of any conflict or inconsistency between the two versions, the Arabic version shall prevail.

If you have questions about this Privacy Policy or wish to exercise your rights over your personal data, please contact us: