Privacy Policy

​​​​​1.Introduction

The National Center for Privatization & PPP (NCP) was established by Council of Ministers Resolution No. 355 dated 6/7/1438AH. It reports directly to the Council of Economic and Development Affairs (CEDA) and operates as an independent entity with full legal, financial, and administrative autonomy. The Center functions based on commercial principles and standards, with the flexibility and authority required to fulfill its responsibilities in accordance with the financial and administrative regulations outlined in the Statute of NCP. The primary objective of NCP is to support the developmental goals of the sectors targeted for Private Sector Participation (PSP), aligning with relevant plans, programs, and resolutions to ensure coordination, flexibility, efficiency, and effectiveness in the PSP process.

​​​2.Acceptance of the Privacy Policy

Your use of the NCP’s website constitutes your acceptance of this Privacy Policy and the terms and conditions governing it. If you do not agree to this policy, you should refrain from using any of the services provided through the Center’s website. When navigating to another website, you should review its privacy policy to understand the adopted privacy practices.

3.Date of Last Policy Update

The Privacy Policy was last updated on 14/08/1446 AH, corresponding to 13/02/2025.

4.Personal Data We Collect

Investor Data (Mandatory): This data is collected to register investors in NCP database to communicate with them and inform them about PSP and Public-Private Partnership (PPP) projects upon launch. The data is collected directly through an electronic registration form, which includes the following information: (name, job title, e-mail and contact numbers).

Cookies (Optional): This data may be collected indirectly through third parties, such as user behavior analytics provided by certain websites, with the aim of providing the best user experience.

5.Disclosure of Your Personal Data

We will not disclose your personal data to any third party except in compliance with applicable laws and regulations related to PSP and PPPs. You can review these regulations here.

6.Legal Basis for Collecting and Processing Your Personal Data

Personal data is collected and processed based on your implicitly agree to comply with this Privacy Policy of the data subject. The data subject has the right to withdraw any time, unless another legal requirement applies. To withdraw, you may contact the Data Management Office (DMO) at NCP via email at: dmo@ncp.gov.sa

7.Mandatory Collection of Personal Data and Potential Risks of Incomplete Data Collection

The center is committed to collecting the personal data necessary to provide its services and ensure efficient and high-quality performance. The provision of the required personal data is mandatory to complete the services and procedures provided by the center. Failure to provide such data will hinder the completion of requests or access to services. The potential impacts and risks associated with not completing the data collection process include the following:

  • Inability to process the request or execute the service.
  • Inability to communicate with the user to update the status or respond to inquiries.
  • Cancellation or rejection of the request if the required data is not provided or if incomplete data is submitted.
  • Delays in processing procedures due to missing necessary data.
  • Restricted access to certain digital services that require authentication using personal data.

8.Data Storage and Disposal

Your data is securely stored with a cloud computing service provider within the Kingdom of Saudi Arabia. The data is deleted three years after the date of its storage, in compliance with the policies and regulations issued by the National Cybersecurity Authority.

9.Your Rights Regarding the Processing of Your Personal Data

Under the Personal Data Protection Law, you are entitled to the following rights, subject to the nature and purpose of data processing:

Right to Information (Access): You have the right to know how your personal data is collected, the legal basis for its collection, how it is processed, stored, and disposed of, and the parties to whom it may be disclosed. Full details can be found in the Privacy Policy.

Right to Access and Review Your Personal Data: You have the right to access and review your personal data by logging into the investor portal and browsing your profile.

Right to Correct Your Personal Data: You have the right to request correction of your personal data if you believe it is inaccurate, incorrect, or incomplete. This can be done by logging into the investor portal, browsing your profile, and clicking the “Edit” button. Updates will be made immediately.

Right to Request Destruction of Your Personal Data: You have the right to request the destruction of your personal data under certain conditions unless there are legal grounds for retaining it. To request destruction, please contact the DMO at NCP via email: dmo@ncp.gov.sa

Right to Withdraw Consent: You have the right to withdraw your consent to the processing of your personal data at any time, unless there are legal reasons that require otherwise. You can submit your request to the Center through the DMO at the following email: dmo@ncp.gov.sa

10.Contact Information of the Center

You can contact the National Center for Privatization & PPP (NCP) for general inquiries through the following contact details: dmo@ncp.gov.sa

  • Responsible Department: Public Relations and Marketing Department
  • Phone Number:+966 11 835 2354
  • Email: info@ncp.gov.sa
  • Address: 7252 Al Yasmeen District, Riyadh, 13325-2573, Saudi Arabia



For inquiries regarding personal data subject rights, you can contact the DMO at the Center using the following contact details:

  • Responsible Department: Data Management Office (DMO)
  • Phone Number:+966 11 835 2354
  • Email:dmo@ncp.gov.sa
  • Address: 7252 Al Yasmeen District, Riyadh, 13325-2573, Saudi Arabia



For inquiries regarding personal data subject rights, you can contact the DMO at the Center through the following contact details:

  • Responsible Department: Data Management Office (DMO)
  • Phone Number:+966 11 835 2354​
  • Email:dmo@ncp.gov.sa
  • Address: 7252 Al Yasmeen District, Riyadh, 13325-2573, Saudi Arabia



If no response is received within 30 business days from the date of complaint submission, you may escalate your complaint to the relevant authority: The Saudi Data and Artificial Intelligence Authority for (SDAIA), through the following contact details: