Privacy Policy

Privacy and Cookie Policy

Premium Support Facility Management Company Ltd. (“PSFM”, “we”, “us”) operates https://www.premium-sa.com. This policy explains how the website handles personal data, cookies and similar technologies. It applies to website visitors, clients, prospective clients, candidates, suppliers and portal users.

Personal data we collect

Contact, quotation, callback and service-booking workflows may collect a name, company, job title, email address, telephone or WhatsApp number, city/site location, service market, requested service, site type, manpower quantity, project scope, timing, contract details, message and optional attachment. Recruitment workflows may also collect employment history, skills, education, salary/availability information, identification details voluntarily supplied in the form, a photograph, CV and supporting documents. Vendor registration may include business contact and supplier qualification documents.

The website also processes request metadata needed for operation and security, including IP address, browser/user-agent, page URL, referral source, timestamps, form-security results and relevant error or security logs. The AI Assistant processes the message and selected page context that a visitor chooses to submit.

Purposes and processing basis

We use data to answer enquiries, assess service requirements, prepare or follow up quotations, review applications and suppliers, deliver requested portal functions, secure forms, prevent abuse, maintain business records and operate the website. Depending on the context, processing is based on the visitor’s consent, steps requested before a service arrangement, performance of an agreed service, compliance with applicable obligations, or another basis permitted by applicable law. Optional analytics, marketing and external-media technologies rely on the visitor’s category choice.

Forms, files and retention

Submissions are stored in PSFM’s application database and, where a file is supplied, in the website’s protected or controlled file storage. Relevant PSFM teams and approved support providers may receive the information to handle the request. PSFM keeps records only for as long as reasonably needed for the enquiry, quotation, recruitment or supplier review, an active business relationship, security, accounting, dispute handling or applicable record obligations. The exact period depends on the record and must follow PSFM’s approved internal retention rules; this policy does not create an unverified fixed period.

Service providers and external recipients

• DreamHost and supporting hosting/IT services: website hosting, database, files, request and security logs.
• Google: Google Analytics 4, Google Tag Manager, consent-gated Google Maps, and reCAPTCHA used on protected form submission.
• Meta: consent-gated Meta Pixel; WhatsApp is opened only when a visitor chooses an external WhatsApp link.
• OpenAI: when the public AI provider is enabled, the assistant message and selected page context are sent server-side to the OpenAI Responses API. A local fallback is used when that provider is unavailable or not configured. Do not submit unnecessary sensitive information to the assistant.
• Approved email-delivery providers: deliver form notifications and acknowledgements. Management must keep the named production provider list current.
• Cloudflare CDN (portal asset only): the authenticated portal may request a Font Awesome stylesheet from cdnjs, which receives normal web-request metadata.

Facebook, Instagram, LinkedIn, TikTok, YouTube, Google Business Profile and other external links are not embedded social widgets in the audited public pages. Their own terms apply after a visitor follows a link.

International processing

Some hosting, analytics, security, AI, email or communication providers may process data outside Saudi Arabia. PSFM must use approved providers and apply the transfer and contractual safeguards required for the relevant data and applicable Saudi requirements. Legal/management approval of the provider register and safeguards remains required.

Cookie Policy and similar technologies

Essential: visa_session supports the Laravel session and locale; XSRF-TOKEN protects forms. The consent choice is stored in first-party localStorage as psfm_cookie_consent_v1. These operate without optional consent. reCAPTCHA may load when a protected form is submitted for security.

Preferences: Google Maps remains blocked until preference/external-media consent. The AI interface may use sessionStorage key psfm-ai-proactive-greeting to avoid repeating its greeting.

Analytics: after analytics consent, PSFM first-party measurement may use sessionStorage keys beginning psfm-lead-click-. Google Analytics 4 may set _ga and _ga_*. Google Tag Manager does not require a dedicated cookie but may load only the approved tags described in this policy.

Marketing: after marketing consent, Meta Pixel may set or read _fbp and _fbc. Provider cookie names can change; PSFM must keep the consent configuration and this policy aligned with the live tags.

Optional categories default to off. Visitors can accept all, reject non-essential technologies, or customize categories. Choices can be changed or withdrawn at any time through “Cookie Settings”. Withdrawing a category prevents its scripts from loading after the page refresh; browser controls may also remove previously stored provider cookies.

Security

PSFM uses access controls, form validation, rate limits, anti-spam checks, CSRF protection and operational logging appropriate to the website. No internet service can be guaranteed completely secure; users should avoid sending information that is not needed for their request.

Your choices and privacy rights

Subject to applicable law, an individual may ask about PSFM’s handling of their personal data and request access, correction, deletion or another available right, and may withdraw consent where consent is the processing basis. A request may be limited where PSFM must keep a record for an active service, security, legal, accounting or dispute purpose.

Contact and policy dates

Privacy requests: info@psfm-sa.com. Website: https://www.premium-sa.com.

Effective date: 26 July 2026. Last updated: 26 July 2026.