This policy explains how Buildora collects, uses, and protects personal information when you visit our website, submit an enquiry or tender, apply for a job, register as a supplier, or visit one of our sites or offices.
1. Who we are
"Buildora", "we", and "us" refer to Buildora Construction & Contracting L.L.C. (Dubai, United Arab Emirates) and its regional entities in Qatar, the Kingdom of Saudi Arabia, Kenya, Nigeria, Ghana, and Rwanda. The entity that engages with you, or that operates the project or office concerned, is the controller of your personal information. Group headquarters in Dubai co-ordinates data protection across the group.
2. Information we collect
Information you give us
- Enquiries and tenders: name, job title, company, email, phone, project details, and documents you upload.
- Job applications: CV, qualifications, employment history, right-to-work information, and references.
- Supplier and subcontractor registration: contact details of company representatives, licences, insurance, and HSE records.
- Newsletter: your email address and subscription preferences.
Information collected automatically
When you use our website we collect technical data such as IP address, browser type, pages visited, and referring site, through server logs and the cookies described in section 8.
Site and office visits
For safety and security, visitors to our construction sites and offices are recorded in visitor logs, and our sites and offices may be monitored by CCTV. Site inductions may record your name, employer, emergency contact, and PPE issue.
3. How we use information
- To respond to enquiries, prepare tenders and proposals, and manage contracts.
- To assess job applications and, if you join us, manage your employment.
- To pre-qualify and manage subcontractors and suppliers.
- To keep people safe on our sites and meet health, safety, and immigration obligations.
- To send our project and HSE bulletin where you have subscribed.
- To operate, secure, and improve our website.
- To comply with legal, regulatory, tax, and audit requirements.
4. Legal bases
We process personal information only where a lawful basis applies under the data protection law of the country concerned — including the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, Qatar Law No. 13 of 2016, the Saudi Personal Data Protection Law, the Kenya Data Protection Act 2019, the Nigeria Data Protection Act 2023, the Ghana Data Protection Act 2012, Rwanda Law No. 058/2021, and, where it applies, the EU and UK GDPR. Depending on the context, these bases are: performance of a contract, compliance with a legal obligation, our legitimate interests in operating our business safely and efficiently, and your consent (for example, for our newsletter).
5. Sharing and international transfers
We do not sell personal information. We share it only with:
- Buildora group entities, where needed to deliver a project or manage recruitment.
- Clients, consultants, and authorities, where required for a project (for example, site access lists or permits).
- Service providers acting on our instructions, such as IT hosting, recruitment platforms, and professional advisers.
- Regulators, courts, and law-enforcement bodies where we are legally required to do so.
Because we operate across several countries, personal information may be transferred between our regional entities and service providers. Where the law requires it, we put appropriate safeguards in place, such as contractual clauses or adequacy assessments.
6. Retention
We keep personal information only as long as needed for the purpose collected and to meet legal requirements. Typically: enquiries for 3 years; unsuccessful job applications for 12 months (or longer with your consent); project and contract records for 10 years after completion to cover defects-liability and decennial-liability periods; and newsletter data until you unsubscribe.
7. Security
Our information security controls include access management, encryption in transit, regular backups, and staff training. Despite these measures no system is completely secure; if a data breach affects you, we will notify you and the relevant authority where the law requires.
8. Cookies
Our website uses strictly necessary cookies to function and, only with your consent, analytics cookies to understand how it is used. You can control cookies through your browser settings. Declining analytics cookies does not affect your use of the site.
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
| session | Keeps the website working between pages | Strictly necessary | Session |
| consent | Remembers your cookie choices | Strictly necessary | 12 months |
| analytics | Anonymous usage statistics | Analytics (consent) | 13 months |
9. Your rights
Subject to the law that applies to you, you may have the right to access your personal information, correct it, request its deletion, restrict or object to its processing, withdraw consent, and request a copy in a portable format. To exercise these rights, email privacy@buildora.example. We respond within 30 days, or sooner where local law requires. You may also complain to the data protection authority in your country.
10. Changes and contact
We review this policy at least annually. The effective date at the top of the page shows when it was last changed; significant changes will be highlighted on this page. For any question about this policy, contact our Data Protection Officer using the details on this page.