Privacy notice

This notice explains how pulse by solutions handles personal data about individual contractors, consultants, temporary workers, and external staff who provide services to pulse by solutions or access pulse by solutions sites or systems.

1. Controller and privacy contact details


Controller	pulse by solutions
Official contact details	https://pulsebysolutions.com
DPO contact channel	DMO@pulsebysolutions.com
Notice update record	Effective date: 15/7/2026 \| Version: v1 \| Review owner: DPO with Legal Advisor support

2. About this privacy notice

This privacy notice applies to individual contractors, consultants, temporary workers, secondees, outsourced personnel, and other external staff whose personal data is processed by pulse by solutions for onboarding, access management, engagement administration, security, billing support, or contract performance. It is separate from any confidentiality undertaking or processing agreement that may also apply.

3. Personal data that pulse by solutions may collect

Identity and contact details, such as name, phone number, e-mail address, company affiliation, address, nationality or residency details where relevant, and emergency contact details where required.
Engagement and access details, such as role, assigned project, supervisor, company name, contract period, work location, access approvals, badges, account details, and device or asset assignment records.
Commercial and administrative data, such as timesheets, attendance, payment support details, tax or banking support details where relevant, and invoice-linked contact records.
Security and monitoring data, such as access logs, account usage records, incident records, and records associated with use of approved pulse by solutions facilities, systems, and corporate resources.
Qualification or screening data where relevant to the role, site access, client requirement, or legal obligation.

4. Sources of personal data

Directly from you or from the contracting company during pre-engagement checks, onboarding, account provisioning, access requests, timesheet submission, and day-to-day engagement administration.
From your employer, recruitment or outsourcing partner, approved service providers, site security teams, project managers, IT teams, or compliance teams where lawfully required for the engagement.
From logs, access systems, badges, ticketing platforms, and monitoring tools used to protect pulse by solutions facilities, networks, systems, and information.

5. Why pulse by solutions processes this personal data and the typical legal basis

Purpose of processing	Examples of activity	Typical legal basis under PDPL
Engagement setup and contract administration	Create contractor profile, confirm assignment, manage project records, maintain approved service relationship data	Contract, legitimate interest, or legal obligation
Site, system, and asset access	Issue accounts, badges, remote access, device assignments, and remove access when no longer needed	Legitimate interest, contract, legal obligation
Operational service delivery	Manage timesheets, attendance, ticketing, support tasks, deliverables, and related communications	Contract and legitimate interest
Security, monitoring, and investigations	Protect facilities, systems, and confidential information, monitor access, and investigate incidents or misuse	Legitimate interest and legal obligation where relevant
Payment support and financial administration	Support invoice validation, payment routing, tax or bank detail handling, and audit requirements where applicable	Contract, legal obligation, legitimate interest

6. Who pulse by solutions may share the personal data with

Project managers, HR where relevant, Procurement, Legal, Finance, IT, Information Security, and other authorised internal teams on a need-to-know basis.
The contracting company or service provider where required to administer the engagement.
Approved cloud, platform, hosting, access-control, or support providers used to administer the
contractor engagement and protect company operations.
Public authorities, courts, regulators, or law enforcement bodies where disclosure is legally required or
justified.

7. Additional matters relevant to this audience

This notice does not replace the contractor confidentiality undertaking, access terms, or any controller- processor agreement that may separately apply to the contractor company or service provider.
Where a contractor accesses pulse by solutions systems or facilities, pulse by solutions may process access and monitoring records to protect confidential data, systems, and company assets.
Contractors must ensure that personal data provided to pulse by solutions remains accurate, especially identity, company affiliation, and access administration details.

8. Transfer outside the Kingdom and cloud or remote support

Depending on the service, system, or support arrangement, some personal data may be processed, stored, or remotely accessed outside the Kingdom only where such activity is lawfully approved and safeguarded.
This may include approved cloud platforms, enterprise applications, support channels, backup services, or vendor support arrangements used by pulse by solutions.
Where cross-border processing is relevant, pulse by solutions will apply the required assessment, approval, and safeguard controls before such transfer or access occurs.

9. Retention and destruction

pulse by solutions retains personal data only for as long as needed for the relevant purpose, legal obligation, contract administration, dispute handling, security investigation, or defence of rights.
When the personal data is no longer required, pulse by solutions will destroy, anonymise, or otherwise process it in accordance with its approved retention and destruction rules.
Some categories may be retained longer where labour, tax, accounting, regulatory, security, or legal hold requirements apply.

10. Security measures

pulse by solutions applies role-based access, least privilege, approved system access, logging, monitoring, and other technical and organisational measures appropriate to the sensitivity of the data.
Only authorised personnel, approved service providers, and approved support teams may access the data where such access is necessary for a documented purpose.
pulse by solutions also applies incident handling, access governance, and confidentiality controls to reduce the risk of unauthorised access, disclosure, loss, or misuse.

11. Your Rights

Right	What it means in practice
Right to be informed	You have the right to know the legal basis and purpose for collecting and processing your personal data.
Right of access	You may request access to the personal data that pulse by solutions holds about you, subject to lawful restrictions.
Right to obtain a copy	You may request a readable and clear copy of your personal data in accordance with the applicable rules.
Right to correction or update	You may request correction, completion, or update of inaccurate or incomplete personal data.
Right to request destruction	You may request destruction of personal data when it is no longer needed, subject to legal retention requirements.
Right to withdraw consent	Where consent is the legal basis, you may withdraw that consent. Withdrawal does not affect processing already performed on a valid basis before withdrawal.
Right to complain or object	You may raise a complaint or objection through the official pulse by solutions channel listed in this notice.

12. Updates to this notice

This notice should be issued during contractor onboarding and should remain available through the controlled procurement, project, or external staff administration channel.
This notice may be updated when pulse by solutions changes its processing activities, systems, contact details, legal basis position, or retention rules.
The latest approved version will replace earlier versions and should be made available through the relevant controlled channel for this audience.

13. How to contact pulse by solutions or raise a privacy request

Use the official contact details and DPO channel listed in Section 1 of this notice.
Requests should include enough information for pulse by solutions to verify identity and locate the relevant records.
Where permitted by law, pulse by solutions may request supporting information to confirm identitybefore acting on a request.

14. Internal notice control information


Control reference	PDCP-05
Document owner	DPO with Legal Advisor support
Related records	RoPA entry, collection channel record, notice publication evidence