Privacy Policy

By using our services or visiting our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please discontinue use of our services and contact us to discuss alternatives.

This policy is issued in compliance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia (Royal Decree M/19, dated 9 Muharram 1443H), its Implementing Regulations, and any amendments issued by the Saudi Data & Artificial Intelligence Authority (SDAIA).

RoadLink Logistics Company is a freight and transportation company incorporated and operating in the Kingdom of Saudi Arabia. Our registered office is at:

For the purposes of the PDPL, RoadLink acts as the Data Controller in respect of the personal data we collect in connection with our services.

We collect personal data in the following categories:

3.1 Data You Provide Directly

• Identity & Contact Data: Full name, company name, job title, email address, phone number, and mailing address provided when registering an account, requesting a quote, or contacting us.
• Shipment & Freight Data: Origin and destination addresses, cargo descriptions, weights, dimensions, declared values, customs documentation, and special handling instructions.
• Consignee & Third-Party Data: Name, address, and contact details of recipients or third parties that you provide for the purpose of completing a delivery.
• Financial Data: Billing address and bank details (where applicable for credit accounts). We do not store full payment card numbers — card processing is handled by PCI-DSS-compliant payment processors.
• Communications: Content of messages, emails, and enquiries you send us, including records of phone calls where permitted by law.

3.2 Data We Collect Automatically

• Usage & Device Data: IP address, browser type and version, operating system, pages visited, time on page, referral source, and other diagnostic data collected via cookies and similar technologies.
• Location Data: GPS coordinates and route data associated with shipments in transit, collected through our fleet management and driver mobile applications.
• Log Data: Server logs including access timestamps, error reports, and API call records related to your account activity.

3.3 Data from Third Parties

• Business partners, freight agents, or referring parties who provide your contact details to arrange a shipment on your behalf.
• Customs and government authorities who share data with us in connection with border clearance and compliance obligations.
• Public directories and commercially available business information sources used for identity verification.

We use the personal data we collect for the following purposes:

Under Saudi Arabia's Personal Data Protection Law (PDPL), we rely on the following legal bases to process your personal data:

• Contract Performance: Processing necessary to fulfil a freight or logistics contract you have entered into with us, or to take steps at your request prior to entering a contract.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including customs law, ZATCA tax regulations, and traffic authority requirements.
• Legitimate Interests: Processing necessary for our legitimate business interests — such as fraud prevention, network security, and service improvement — where these are not overridden by your rights.
• Consent: Where we rely on your consent (for example, for marketing emails), you may withdraw it at any time without affecting the lawfulness of prior processing.
• Vital Interests: In rare circumstances, processing may be necessary to protect the vital interests of an individual.

We do not sell your personal data to third parties. We share data only in the following circumstances and with the following categories of recipients:

• Subcontracted Carriers & Agents: Third-party trucking companies, shipping lines, or freight agents who perform transport services on our behalf, limited to the data necessary to complete your shipment.
• Customs & Government Authorities: Saudi Customs (ZATCA), Ministry of Interior, Saudi Food & Drug Authority (SFDA), and other competent authorities as required by law or for customs clearance.
• Technology Service Providers: Cloud hosting providers, CRM software, fleet management systems, and payment processors, all operating under data processing agreements and bound by confidentiality obligations.
• Professional Advisers: Lawyers, auditors, and insurers where necessary for the conduct of our business.
• Business Transfers: In the event of a merger, acquisition, or sale of business assets, your data may be transferred to the successor entity, subject to the same privacy protections.
• With Your Consent: Any other sharing will only occur with your explicit prior consent.

We retain personal data for as long as necessary for the purposes described in this policy or as required by Saudi law:

After these periods, data is securely deleted or anonymised in accordance with SDAIA guidelines.

Subject to the conditions and exceptions set out in the PDPL, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you and information about how it is processed.
• Right of Correction: Request correction of inaccurate or incomplete personal data.
• Right of Erasure: Request deletion of your personal data where we no longer have a legal basis or legitimate interest in retaining it.
• Right to Restrict Processing: Request that we limit the processing of your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, commonly used format where processing is based on consent or contract.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Withdraw consent at any time where processing is consent-based, without affecting prior processing.

To exercise any of these rights, contact us at privacy@roadlinklogistics.com. We will respond within 30 days of receiving a verifiable request. We may need to verify your identity before processing a request.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA) via sdaia.gov.sa.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• TLS/SSL encryption for all data transmitted via our website and APIs.
• AES-256 encryption for sensitive data at rest in our databases.
• Role-based access controls limiting data access to authorised personnel only.
• Regular security audits, penetration testing, and vulnerability assessments.
• Staff training on data protection and information security policies.
• Incident response procedures to detect, report, and respond to data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify SDAIA and, where required, affected individuals in accordance with the timelines prescribed by the PDPL.

Some of our technology service providers and subcontracted carriers operate outside the Kingdom of Saudi Arabia. When we transfer personal data internationally, we ensure that adequate safeguards are in place as required by the PDPL and SDAIA regulations, including:

• Transfers to countries determined by SDAIA to provide an adequate level of data protection.
• Standard contractual clauses and data transfer agreements approved by SDAIA.
• Your explicit consent, where required, for specific transfers.

Our website uses cookies and similar technologies. For full details on the cookies we use, your choices, and how to manage them, please see our Cookie Policy.

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately at privacy@roadlinklogistics.com and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Post the updated policy on this page with a revised 'Last Updated' date.
• Notify registered account holders by email at least 14 days before the change takes effect.
• Where required by the PDPL, obtain your renewed consent.

Your continued use of our services after the effective date of the revised policy constitutes your acceptance of the changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact our Data Protection Officer: