Privacy Notice

This General Privacy Notice (hereafter the “Notice”) is maintained by Saudi Basic Industries Corporation, a company established under the laws of the Kingdom of Saudi Arabia (KSA), with its principle place of business at its Head Quarters, located at Airport Road, Qordoba, Riyadh, (Telephone: +966112258000 and fax +966112259000) and its wholly owned affiliates (“SABIC” or “we”, “us”, “our”).

SABIC is committed to protect and respect your privacy. SABIC will only collect and process personal data to the extent it is permitted to do so and with your consent (where required by applicable laws and regulations), and will process personal data in a lawful, fair, and transparent manner. 

This Notice explains what personal data we collect, for what purpose, to whom we disclose the data, and for how long we keep the data. Additionally, we describe your rights and how you can invoke them. By “personal data” we mean any information through which we can identify you as an individual (e.g. name, telephone number, email or other related information) including sensitive personal data. 

The Notice was last updated on 18 December 2024.

Local requirements:

This Notice provides information regarding the uniform minimum standard for SABIC with respect to protection of Personal Data worldwide. Where local laws require stricter standards than those described in this Notice the stricter standards prevail. 

For the processing of personal data of residents of the European Union: SABIC Limburg B.V. (Europaboulevard 1, 6135 LD Sittard, The Netherlands, Chamber of Commerce: 14073232) is designated as the main establishment of SABIC within the European Union. 

For the processing of personal data of residents of the People’s Republic of China (“PRC”, which for the purpose of this Notice excludes Hong Kong SAR, Macau SAR and Taiwan) the following entities are the data controller: wholly-owned subsidiaries or branches of SABIC in China mainland, including but not limited to, SABIC (Shanghai) Trading Co., Ltd., SHPP (Shanghai) Co., Ltd. and its branches, SABIC Innovative Plastics (China) Co., Ltd., SABIC Innovative Plastics (Chongqing) Co., Ltd., SABIC (China) Research & Development Co., Ltd., SABIC (China) Holding Co., Ltd and its branches. For the avoidance of doubt, this list shall not be considered exhaustive and shall be changed from time to time according to SABIC's investment in China mainland. 

For the processing of personal data of national residents of KSA: Saudi Basic Industries Corporation is responsible for data processing.

For the processing of personal data of residents of California: please be sure to review Section 9 “Additional Information for California Residents” below for important information, as required by California privacy laws.

What personal data do we collect and process, and how do we collect your personal data? 

The types of personal data that SABIC collects and processes will depend on the relationship we have with you:

• (Prospective) customers or suppliers and contact persons or representatives of (prospective) customers or suppliers: In order to establish and maintain a business relationship with you we process the following personal data: 

  • contact information (such as title, name, email, phone, business name, business address, role, industry); 

  • identifying, authenticating, location and/or professional data (such as completed supplier due diligence or confirmation of screening process);

  • financial information (such as bank account or invoicing details); and

  • other personal data you disclose in the course of your relationship with SABIC.

• Website visitors and newsletter subscribers: 

  • Contact information (name, email, preferences) when you sign up to receive our newsletter;

  • Account information (account username, password, contact details, country, business name, function, industry, photo, the services you request through your account, and other information you choose to share with SABIC) when you register and use online services provided by SABIC such as the SABIC Simulation Portal or ColorXpress (“Online Services”); and

  • Automatically collected data. We use cookies to make this website easier and better to use, to tailor our products and services to your interests and needs and marketing purposes. Cookies are files or pieces of information that may be stored on your computer (or other devices) when you visit a site. Please see our Cookie Policy for further details about the cookies we use to operate this (and other) website(s) and how you can disable or enable them.

• Visitors to SABIC premises or attendees at SABIC webinars and events:

  • contact information (such as name, email, business address, role);

  • video surveillance footage and/or access records (recorded on SABIC premises by the use of video surveillance equipment (CCTV) or access logging systems)

We will not use your contact information for product or promotional advertising unless you have specifically requested to receive product information.

If you provide us with personal data about other individuals, please ensure that they have given you consent to do so and that they are aware of our Notice.

For what purposes and legal bases do we use your personal data? 

In order for us to provide you with our products and services we need to process your personal data for the reasons set out in this Notice. Any personal data received by us will be used for the purposes indicated in this Notice or in a separate notice provided to you. Except for where permitted by law, we will not process your personal data in a manner that is inconsistent with the defined purpose for which it was collected.

Legal basis for collecting and processing personal data under certain privacy laws:

Certain laws, including the EU General Data Protection Regulation (“GDPR”) and KSA data protection law, require that we inform you of the legal bases for our processing of your personal data. In such cases, SABIC will only process personal data when it has a legal basis for doing so. In particular, SABIC processes your personal data when the processing is needed for the performance of our contract with you, when SABIC is legally obliged to do so, or when the processing is necessary for the legitimate interests of SABIC (or those of third parties). Where required by applicable law, SABIC will also obtain your consent to process your personal data.

Purposes of processing:

We will process your data for specific and limited purposes which are linked to a legal basis set out above. These purposes are: 

• For the performance of our agreement with you: such as to carry out the support and services under the commercial agreement that we concluded or will conclude with you on behalf of your company, for the purposes of billing or invoicing, communicating with you in relation to the agreement, product delivery, processing orders, purchasing materials, supplies and equipment, completing supplier due diligence and customer screening processes, licensing agreements and non-disclosure agreements, etc.

• To comply with legal obligations: monitoring and ensuring compliance with applicable laws and regulatory requirements, communications relating to such obligations, and responding and complying with lawful requests by regulators and law enforcement.

• For SABIC’s legitimate (business) purposes: such as to manage our internal client database in order to maintain contact with clients and prospects, to keep track of our financials and services, to operate and expand our business activities and services, to develop and improve our services and products, to undertake market research, to improve the effectiveness of our marketing, to engage with third party contractors, suppliers and business partners, to host promotional activities, webinars and events, to offer our Online Services, to operate company policies and procedures, to maintain standards of safety and security in our systems and premises, to resolve disputes or manage enquiries and to enable SABIC to make corporate transactions.

• To protect our rights: to protect our sites and business operations including to prevent and detect fraud, unauthorized activities and access, or other misuse where we believe it is necessary to investigate, prevent or take action regarding illegal activities, or in cases of suspected fraud or situations involving potential threats to the safety or legal rights of any person or third party, or violations of our agreements or this Notice.

• To communicate with you about SABIC’s products and activities: to provide newsletters or otherwise contact you about our products or services. We may send you marketing information based on information you have provided to us, products and services that you have previously purchased, or your use of any Online Services which you have registered for (for example, documents or services which you have requested). If you are located in a jurisdiction that requires consent to receive electronic marketing messages, we will only send you such messages if you opt-in to receive them. In such case, you may opt-out of receiving such marketing messages at any time by following the instructions in the communication you received from us. You may also control your marketing preferences via your profile settings on the Online Services or by reaching out to us using the contact details provided in part 8 (“What are your rights?”) below. 

What do we do to protect your personal data? 

SABIC has taken reasonable and appropriate technical, physical, and organizational measures to protect your personal data against unauthorized access or disclosure, unlawful processing, accidental loss or damage, and unauthorized destruction. Including as appropriate measures such as applying access controls, providing security awareness and training for personnel, setting up security breach procedures, undertaking audits, and implementing controls around data integrity, storage and transmission and disposal of data. 

SABIC requires third party service providers, who process personal data on its behalf, to implement similar security and confidentiality measures.

To whom do we disclose your personal data and why? 

To fulfill the purposes above, SABIC may need to disclose to, transfer or otherwise share your personal data with other SABIC entities or with a third party. In general, we may disclose, transfer or otherwise share personal data as follows:

• With SABIC group entities: SABIC is a global company, your personal data may be shared amongst our affiliated and subsidiary companies, who are subject to this Notice when processing your personal data. 

• With service providers: SABIC may disclose personal data to third party service providers where is it necessary for the provision of a services. These services include data storage and analytics, for web hosting, IT technology, infrastructure and security, handling payment transfers, advisory services, maintenance and other similar services. When SABIC outsources processing activities, it will ensure the service provider is bound to implement and maintain adequate data protection and security measures and will comply with applicable privacy laws.

• With advertising and marketing partners: SABIC works with third-party companies to display online advertising that is more relevant. These companies may collect cookie IDs, IP address and other identifiers as well as information about the pages you visit on our sites and other websites, to enable them to display advertising for products and services that may be of interest to you when you visit our website or other websites. For more information about this please refer to section 6 "Cookies and Tracking".

• Where required by law or to protect our rights: In certain instances, and where permitted by applicable law SABIC may be required to disclose your personal data to comply with legal requirements such as to comply with tax authorities or binding requests from other law enforcement authorities or to protect SABIC’s legal rights such as to defend a legal claim where permitted by applicable law. 

• As part of a corporate transaction: Further, if a SABIC business unit is sold or transferred as part of a corporate transaction it may be necessary to disclose your personal data to a purchasing entity including related to due diligence conducted prior to such event where permitted by applicable law.

We may share aggregate or anonymous information with third parties for research, marketing, analytics, and other purposes, provided such information does not identify a particular individual.

International transfers of your personal data? 

In some instances, SABIC may share personal data to group affiliates or other entities and service provided in countries outside your resident jurisdiction. These countries may have data protection laws that are different to the laws of your country, and in some cases, may not be as protective. In such cases, SABIC takes measures to ensure an appropriate level of data protection and security including to implement adequate safeguards (and, where necessary, supplementary measures) to ensure that personal data is afforded a level of protection which is essentially equivalent. 

For residents of the European Economic Area, SABIC implements safeguards and where necessary supplementary measures to ensure a level of protection guaranteed within the European Economic Area. You can request a copy of any documentation showing the adequate safeguards that have been taken by contacting us using the details included below. 

For PRC residents, with your consent we may share, transfer, access or store your personal data outside of China where we are satisfied that adequate levels of protection are in place to protect the integrity and security of your personal data or adequate security measures are adopted and in compliance with the applicable laws. Where required by applicable laws, we will put in place appropriate measures to ensure that all processing of your personal data outside of PRC is safeguarded by the equivalent level of data protection in PRC.

For KSA, with your consent we may share, transfer, access or store your personal data outside of KSA, where we are satisfied that adequate levels of protection are in place to protect the integrity and security of your personal data or adequate security measures are adopted and in compliance with the applicable laws. Where required by applicable laws, we will put in place appropriate measures to ensure that all processing of your personal data outside of KSA is safeguarded by the equivalent level of data protection in KSA. 

Cookies and tracking 

Our websites use browser cookies, pixels, and other mechanisms to recognize you when you return to our website so that we can provide you with a customized experience. For more information about the use of cookies on our Site and how you can manage your cookie preferences, you can review our Cookie Policy. 

Do-Not-Track Signals. Our Site does not respond to do-not-track signals. For more information about do-not-track signals, please click here. You may, however, disable certain tracking as discussed above (e.g., by disabling cookies) and set out in our Cookie Policy.

Storage and how long do we keep your personal data? 

Your personal data is stored securely either at our headquarters or at a trusted cloud computing service provider. As required by law, we will only hold your personal data for as long as necessary to fulfill the purposes for which the data is collected before making it non-identifiable (anonymous) or deleting it. We will securely dispose of such data in a manner that prevents access or retrieval, using secure data destruction methods.

This policy applies unless there is a contractual or legal requirement to retain data for a longer period (such as required by trade or tax regulations or to defend a legal claim).

What are your rights to your personal data? 

SABIC is committed to transparently processing your data. Depending upon your jurisdiction and subject to applicable local laws, you have several rights in relation to personal data processed by SABIC. You have the following rights: 

1. Right to be informed: You have the right to be informed about the legal basis and the purpose of the collection of your personal data and information about how your data is processed.
2. Right to access: You have the right to request access to your personal data that we hold about you in a readable and clear format.
3. Right to correction/rectification: You have the right to request correction to your personal data if incorrect, and/or modifications to your personal data if incomplete or not up-to-date.
4. Right to restriction of processing: You may request us to restrict processing of your personal data if you think that the data is inaccurate, our processing is unlawful, or that we no longer need to process your data for a particular purpose 
5. Right to object: Under certain conditions, you may also object to the processing of your personal data unless we consider that we have compelling legitimate grounds for the processing or if we need to continue to process the data to establish, exercise or defend legal claims;
6. Right to erasure: You have the right to request erasure or destruction of your personal data (unless we are required to retain it by law, or to establish, exercise or defend legal claims, or for another one of our legitimate business purposes).
7. Right to withdrawal consent: You have the right to withdrawal your consent to the extent any of your personal data is collected based on consent. Please note that a withdrawal of consent does not affect the lawfulness of any processing which has taken place prior to your consent being withdrawn and that we can only action your request in accordance with applicable law.
8. Right to transmission: you may request the transfer of personal data to a third party if we are processing that data either on the basis of your consent or to perform a contract with you and the processing is carried out using automated means, 
9. Right to lodge a complaint: You have the right to lodge a complaint with the data protection authority in respect of our processing activities regarding your personal data.

For residents of KSA: Please note that in addition to these rights you also have the right to claim compensation. This right to claim compensation includes compensation for material or moral damages as a result of any violation stipulated under the applicable laws.

If you wish to exercise any of the above-mentioned rights, please contact us using the contact information provided below. 

How can you file a complaint? 

If you have any questions about our Notice or have a complaint regarding the manner in which SABIC processes your personal data, or suspect that a personal data breach has occurred, please contact us at dataprotection@sabic.com and provide sufficient details for us to revert to you.

If, in your view, the complaint is not dealt with satisfactory, we fail to respond within 30 days, or you are unsatisfied with how we process your personal data, you may have the right to lodge a complaint with the Data Protection Supervisory Authority established in your country of residence or where you believe your rights have been infringed.

For residents of KSA: you may file a complaint to Saudi Data and Artificial Intelligence Authority via this link.

Changes to this notice

SABIC reserves the right to modify this Notice due to changes of relevant laws and regulations or requirements imposed by local data protection authorities. Any changes will be published and made available here. We will notify you and seek your consent to changes to this Notice where required to do so by applicable laws.

Additional information for residents of California

If you are a California resident, please see the additional information regarding the California Consumer Privacy Act (CCPA).