Optional Google Analytics and your choice
If you choose Allow analytics, we use Google Analytics 4 to measure visits to the EPS public website and count enquiries accepted by our server. Google receives technical browser and device information and analytics identifiers. Google Analytics is not loaded before your affirmative consent. Declining does not prevent you from using the website or sending an enquiry.
We send only approved public page addresses without query strings or fragments and a fixed page title. We do not send referring-page addresses, enquiry names, email addresses, phone numbers, company names, messages or other form values to Google. The successful-enquiry event records acceptance, not a sale or a guarantee of a response. Advertising storage, advertising personalisation and Google signals are disabled. This tracking does not cover the EPS Portal application.
Your choice is stored in this browser for the configured measurement ID. You can change it using Google Analytics settings at the bottom of the page. Withdrawal stops further Google tracking, clears the website's Google Analytics cookies and reloads the page; it does not delete data already collected. Analytics cookies use a fixed 60-day expiry without extending it on each visit. Google reporting data follows the property's retention settings and Google's applicable policies; cookie expiry is not a promise that all reporting data is deleted then.
This optional processing relies on your consent. Google may process analytics data outside Saudi Arabia. Contact privacy@eps.sa for questions, applicable provider and transfer information, or requests concerning previously collected data.
About EPS and how to contact us
East Protection Security (EPS) is the public-facing name of Himayat al Sharq Establishment (مؤسسة حماية الشرق الامنية), Commercial Registration 7003946147. EPS provides security, life-safety, low-current and infrastructure services to organisations and adult business representatives in Saudi Arabia and is the controller of the personal data described here.
Address: 2nd floor, Building 2117, Prince Turki Street, Al Corniche District, Al Khobar 34413, Saudi Arabia. Privacy enquiries and requests: privacy@eps.sa. Telephone: +966 13 833 3111.
This notice covers the EPS public website at eps.sa, business enquiries through its form and published eps.sa email addresses, privacy requests and recruitment correspondence. It does not cover EPS Portal accounts or compliance evidence, employee systems or third-party websites. The website is intended for adult visitors, business representatives and applicants, and is not directed to children.
EPS has moved its public website to eps.sa. The previous website at epsec.sa and its website aliases now redirect to eps.sa. This change does not change the legal operator or data controller, create a new purpose for existing personal data, or restart its retention period. Use enquiries@eps.sa for business enquiries, careers@eps.sa for recruitment and privacy@eps.sa for privacy matters.
Personal data we collect and how we collect it
When you use the enquiry form, we collect your name, work email address and enquiry message. These fields are required so EPS can receive and respond to your request. Company name is optional. We also process later correspondence about the enquiry.
If you email an address published on this website, we receive your email address, the information you include and related correspondence. We use privacy-request information to locate the relevant records, verify identity where necessary and handle your request. Provide only the information needed for the purpose of your message.
Cloudflare provides website hosting, security and enquiry-form protection and delivery. It receives limited technical data such as IP address, request time, requested URL, browser or device information and security events. Cloudflare Turnstile also processes browser, device, interaction and security signals to distinguish people from automated abuse. Cloudflare may set strictly necessary security cookies when it presents a security challenge.
We use Cloudflare Web Analytics to understand website traffic and improve performance. Its browser script measures page views, referring websites, browser and device type, country and page performance. It uses no analytics cookies, browser storage or fingerprinting. We do not send enquiry form values to analytics or use analytics for advertising.
The Contact page includes an embedded Google map to show the EPS office. When the map loads, your browser connects to Google. Google's own terms and privacy information apply to that service. You can also contact EPS using the email address and telephone number published on this website.
Do not submit passwords, identity documents, CVs, compliance evidence, confidential files, sensitive personal data or information about children through the form.
Why and on what basis we use personal data
EPS uses enquiry data to respond to your request, communicate with you and evaluate a possible quotation or business relationship. It uses technical data to operate and secure the website and prevent abuse. It may also process data to comply with legal obligations or establish, exercise or defend legal claims.
EPS relies on its legitimate interests in responding to requested business communications, assessing recruitment enquiries, operating and protecting the website, and measuring aggregate website performance, where necessary and without overriding your rights or interests. This basis does not cover sensitive personal data. A legal obligation or performance of an existing agreement may apply to the relevant records. Enquiry and recruitment data are not used for direct marketing.
Who receives the data and where it is processed
Access is limited to authorised EPS personnel and authorised shared-services personnel within Akarem Group (مجموعة أحمد العبدالكريم التجارية) who need the data for these purposes. Cloudflare processes data for hosting, security, Turnstile and enquiry delivery. Form enquiries are sent from a fixed EPS address to a fixed EPS mailbox hosted by Zoho Mail. Email sent directly to the published eps.sa addresses is handled by EPS's business email provider. Professional advisers or competent authorities may receive data when necessary or required by law. EPS does not sell personal data.
Cloudflare and our business email providers may process or route data outside Saudi Arabia. Such processing is subject to the Personal Data Protection Law and the Regulation on Personal Data Transfer Outside the Kingdom. You can contact privacy@eps.sa for information about the providers and safeguards relevant to your data.
Cloudflare also acts as a separate controller when it uses Turnstile security signals to improve its bot-detection capabilities. That processing is explained in the Cloudflare Turnstile Privacy Addendum.
Storage, retention, destruction and protection
Ordinary business-enquiry email is retained for up to 12 months and then deleted. It may be retained longer if it becomes part of an active quotation, contract, dispute or legal matter. CVs sent to the business-enquiry channel instead of recruitment are deleted within 30 days unless temporary preservation is legally required. Recruitment correspondence sent to careers@eps.sa is handled as described below.
Privacy-request records are retained for the period necessary to handle the request and demonstrate its resolution, taking account of applicable legal obligations or a related complaint or dispute.
Our application logs record a request identifier, time, outcome and bounded error code. Cloudflare invocation logs also record request, response and execution metadata, with URL query strings redacted. We do not add enquiry form values or message content to these logs. Logs in our Cloudflare Workers account are retained for three days under the current plan.
Cloudflare Web Analytics reports cover the previous six months. Cloudflare retains unsampled beacon data for seven days and a reduced sample for longer-term storage. The six-month reporting window is not a confirmed deletion deadline. Cloudflare also keeps hosting and security records under its applicable policies.
Deleting email includes removing it from the mailbox and Trash and handling any EPS-controlled downloaded, exported or synced copies. Under Zoho Mail's standard policy, email deleted from Trash remains recoverable on its servers for 30 days. Mailbox deletion therefore does not mean immediate irreversible erasure from the provider's systems.
EPS uses proportionate administrative, technical and organisational safeguards, including encrypted transmission, access restriction, server-side validation, abuse controls and minimised logging. When a retention period ends, EPS deletes or anonymises the data, subject to lawful preservation duties and provider backup cycles.
Recruitment correspondence
The Careers page invites you to email careers@eps.sa with your name, area of expertise, a brief introduction and CV. We receive the contact details, education, experience and skills you choose to include, and any subsequent recruitment correspondence. Sending this information is voluntary, but we may be unable to assess your interest without enough relevant information.
We use this information to review your suitability for work at EPS and communicate with you about recruitment. Access is limited to authorised people involved in that review and the email providers needed to deliver and store the message. The website does not upload or store CVs, create an applicant account or make automated hiring decisions.
We retain recruitment correspondence for up to six months from receipt and delete it earlier when it is no longer needed. If you are in an active recruitment process, we retain the relevant records until that process ends. A legal obligation or dispute may require limited records to be kept longer. We do not retain your CV beyond this period for future recruitment opportunities without a separate notice and choice.
Include only information relevant to recruitment. Do not send identity documents, bank details, sensitive personal data or confidential material from a current or former employer. Do not include another person’s contact details unless you are authorised to provide them.
Your rights and how to exercise them
Subject to the Saudi Personal Data Protection Law and its Regulations, you may request information about processing, access to your personal data, a readable copy, correction or completion, or destruction when the data is no longer needed. You may also complain to the competent authority and claim compensation where the law provides.
Email privacy@eps.sa and state the right you wish to exercise. Provide only enough information to locate the relevant record. EPS may verify your identity proportionately and will respond within 30 days. Where the law permits an extension, EPS may take up to 30 additional days after notifying you in advance and explaining why.
Where processing relies on your consent, you may withdraw it at any time by contacting privacy@eps.sa, without affecting the lawfulness of processing before withdrawal. A recruitment enquiry can also be withdrawn through careers@eps.sa.
Complaints and objections
You may send a privacy complaint or objection to privacy@eps.sa so EPS can investigate. You may also complain to the Saudi Data & AI Authority through the National Data Governance Platform in accordance with the applicable rules; contacting EPS first does not remove that right.
Updates to this notice
EPS updates this notice when its processing practices, providers or legal requirements change. English and Arabic versions are published together with the same version and update date. Material changes are reviewed before the affected processing begins.