This policy explains what personal information Silent Core Industries collects through this website, why we collect it, who processes it on our behalf, and what you can ask us to do with it.
This website is operated by Silent Core Industries Company, registered in the Kingdom of Saudi Arabia under Unified Commercial Registration No. 7055152396 and VAT Registration No. 315009688900003, operating from Jeddah, Saudi Arabia.
In this policy, Company, we, us and our mean Silent Core Industries Company. You and your mean any person who visits this website, submits an enquiry, or holds an account with us.
For any question about this policy or about the personal information we hold, contact us at info@silentcoreindustries.com.
2. What this policy covers
This policy covers silentcoreindustries.com and the customer account area reached through it.
It does not cover other companies' websites that we link to. Our site links out to external pages — for example a map location, a manufacturer's technical document, or WhatsApp. Following such a link takes you to a service we do not control, governed by that provider's own privacy policy.
It also does not cover information you send us directly by email, telephone or WhatsApp outside the website. That correspondence is handled under our ordinary business practice rather than through the systems described here.
3. Information you give us in an enquiry
When you submit a service request through the website, we record the details you enter so that the right department can understand and answer it:
Your name, mobile number, and email address where you provide one
Your preferred language, so we can reply in English or Arabic
The vessel type and any equipment details you describe
The type of request, the category and issue you select, and the description you write
Your city, whether the request is urgent, and any preferred date
Whether you asked us to create an account for you
Whether you confirmed that you had read this policy
The description field is free text. Please include the technical detail we need to help you, and avoid entering personal information that is not relevant to the work.
Each enquiry is given a reference and routed by email to the department responsible for that category. We record which department it went to.
4. Files you upload
You may attach photographs or documents to an enquiry — typically pictures of equipment, nameplates, alarm displays or existing reports.
These files are stored in our storage account and linked to your enquiry. We use them only to diagnose and quote the work you asked about. Please do not upload documents containing identity, financial or other sensitive details that the technical work does not require.
5. Account and sign-in information
You do not need an account to send an enquiry. If you create one, we hold your name, email address, mobile number where given, your preferred language, and your account status.
There are two ways to sign in, and each involves different data:
Google sign-in — we ask Google only for your basic profile: your name, email address, whether Google has verified that address, your profile picture, and the account identifier Google assigns you. We do not receive your Google password and we cannot see your Gmail, contacts, files or any other Google data.
Email and password — we store only a salted, deliberately slow cryptographic derivation of your password, never the readable password. We send a one-time email code when you register, recover a password, or sign in from a new or untrusted device. The code is also stored only as a salted cryptographic hash.
To stop account access being abused, we record a cryptographic hash of the network address the request came from and count failed password and code attempts. We hash rather than store the address itself, and short-lived attempt records are deleted automatically.
Mobile verification by SMS is built into the website but is not currently switched on, so no mobile verification codes are being sent or stored at this time.
6. Google user data
If you sign in with Google, we receive a limited set of Google user data: your name, your email address, whether Google has verified that address, your profile picture, and the unique account identifier Google assigns you. We request no other permission. We cannot read your Gmail, your contacts, your calendar, your Drive files, or anything else in your Google account.
We use that data for one purpose: to create and authenticate your Silent Core Industries customer account, so that you can see your own enquiries and service records. It is held in our customer database alongside the account it belongs to, and protected by the measures described in section 14.
You can disconnect Silent Core Industries from your Google account at any time in your Google account security settings, which stops any further access. To have the account and the data we hold about you deleted, email info@silentcoreindustries.com; we will delete it, apart from records we are legally required to keep, and we will tell you which those are.
7. Service, quotation and payment records
If your enquiry becomes actual work, the resulting records are linked to you: appointments, job records, technical findings, quotations and their line items, invoices, payments and refunds, warranty records, and messages exchanged about the work.
Where you approve a quotation through the website, we record who approved it, the name entered as signatory, the time of the decision, a hash of the network address and the browser identification string. This exists so that an approval to carry out chargeable work can be evidenced later — by you as much as by us.
We also keep an internal audit log of significant actions taken on records in our system.
8. Information collected automatically
Our hosting provider processes the technical information any website receives in order to serve a page and to defend against attack: the network address of the request, the browser identification string, the page requested and the time.
9. Cookies
After you sign in, one cookie holds your session. A second cookie marks a browser that has successfully completed new-device email verification, so we do not send a code on every later sign-in from that browser.
Both account cookies are set as HttpOnly, so page scripts cannot read them; as Secure, so they travel only over an encrypted connection; and as SameSite=Lax, which limits their use when another site links to ours. The session cookie lasts only for the browser session unless you select Remember me; the trusted-device cookie expires automatically after a limited period. Both can also be revoked on the server.
We set no advertising, analytics or preference cookies. A short-lived entry in your browser's own storage may be used to remember that you have already seen the homepage opening animation.
10. Why we use your information
We use the information described above only for the following purposes:
To read, route, answer and follow up your enquiry
To diagnose the technical problem you have described and prepare a quotation
To arrange and carry out inspections, repairs and installations
To issue quotations, invoices and warranty records, and to process payment
To create and secure your account, and to verify that a sign-in request is genuinely yours
To keep the accounting, tax and service records that Saudi law requires us to keep
To protect the website and our customers against fraud, abuse and attack
We do not use your information for automated decision-making that produces legal effects, and we do not use it for marketing without asking you first.
11. Who else processes your information
We do not sell your personal information. We share it only with service providers who process it on our instructions so that the website can function:
Cloudflare — hosts the website and provides the database and file storage in which enquiries, accounts and uploads are held.
Google — provides Google sign-in, if you choose that method. Google receives the fact that you signed in to our site; we receive only the basic profile described in section 5.
Resend — delivers our automated email, such as sign-in codes and enquiry notifications to our own staff. Resend's delivery infrastructure operates through Amazon Web Services.
Neo — provides our company mailboxes, so email correspondence with us is held there.
We may also disclose information where we are legally required to do so by a competent Saudi authority, or where it is necessary to establish, exercise or defend a legal claim.
12. Transfers outside Saudi Arabia
The providers listed above operate international infrastructure. This means your information may be processed on servers outside the Kingdom of Saudi Arabia — for example, our automated email is currently delivered through infrastructure located in the Asia-Pacific region.
Where information is transferred outside the Kingdom, we rely on the protections offered by these providers under their own data protection commitments. If you would like to know where a specific category of your information is held, contact us and we will tell you.
13. How long we keep it
We keep information only as long as there is a reason to:
Sign-in codes and their supporting records expire within minutes and are deleted automatically.
Sessions end when you sign out or when the session expires.
Enquiries, service records, quotations and invoices are kept while the work is live and afterwards for as long as we must retain accounting, tax and warranty records under Saudi law.
Uploaded files are kept with the enquiry or job they belong to.
14. How we protect your information
The measures we apply include:
All traffic to and from the website is encrypted in transit, and plain unencrypted access is refused.
Passwords are stored only through PBKDF2-HMAC-SHA-256 with a unique random salt and a deliberately high work factor; readable passwords are never stored.
One-time sign-in codes are stored only as salted cryptographic hashes, never as readable text, and are compared in a way designed to resist timing attacks.
Network addresses used for abuse prevention are stored as hashes rather than as addresses.
Password and verification-code requests are rate-limited per email address and per network address, and a code is invalidated after a small number of failed attempts.
Access to customer records within our system is restricted by role.
Account pages are excluded from caching, so private data is not stored by intermediate servers.
No system can be guaranteed completely secure. If a breach occurs that affects your personal information, we will act in accordance with the notification requirements that apply to us.
If you believe you have found a security vulnerability in this website, please report it to info@silentcoreindustries.com. Our security contact details are also published at /.well-known/security.txt.
15. Your rights
Subject to the conditions and exceptions of the Saudi Personal Data Protection Law, you may ask us to:
Tell you what personal information we hold about you and why
Provide you with a copy of it
Correct information that is inaccurate or incomplete
Delete information where we no longer have a lawful reason to keep it
Stop using your information for a particular purpose
To make a request, email info@silentcoreindustries.com from the address associated with your enquiry or account, or contact us by another means and we will verify your identity before acting. We will not charge you for a reasonable request.
Some information cannot be deleted on request where we are required to keep it — an issued invoice being the clearest example. Where that applies, we will tell you which records are affected and why.
If you are not satisfied with our response, you may raise the matter with the competent supervisory authority in the Kingdom of Saudi Arabia.
16. Children
This website is intended for businesses and adult vessel owners and operators. It is not directed at children, and we do not knowingly collect personal information from anyone under eighteen. If you believe a child has provided us with personal information, contact us and we will delete it.
17. Changes to this policy
We may update this policy as the website develops or as our legal obligations change. The version published on this page is the version that applies.
Questions, requests and complaints about this policy should be sent to info@silentcoreindustries.com, or by post to Silent Core Industries Company, Jeddah, Kingdom of Saudi Arabia.
