Privacy Notice

This website is owned by Aluminium Bahrain B.S.C. (“Alba”). Alba is a company incorporated in the Kingdom of Bahrain and operates internationally through its offices and subsidiaries.

Alba is committed to protecting the confidentiality, integrity, and security of Personal Information and to respecting the privacy of its customers, employees, suppliers, service providers, and other individuals whose Personal Information it collects and processes.

This Privacy Notice explains how Alba collects, uses, discloses, and protects Personal Information, and the rights available to individuals in accordance with the Bahrain Personal Data Protection Law (PDPL) and other applicable data protection laws.

Alba processes Personal Information solely for legitimate business purposes related to its operations in aluminium product sales and services and does not process Personal Information for purposes other than those set out in this Privacy Notice.

 

2. Definitions

For the purposes of this Privacy Notice:

• "Personal Information" means any information relating to an identified or identifiable individual. This includes direct identifiers such as name, identification numbers and contact details, and indirect identifiers such as online identifiers, IP addresses, cookies, device IDs, and data that, when combined with other information, can identify an individual.
• "Processing" means any operation performed on Personal Information, such as collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure, erasure or destruction.
• "Controller" means the entity that determines the purposes and means of processing Personal Information. For this website, the Controller is Alba.
• "Processor" means a party that processes Personal Information on our behalf under our instructions.

 

3. Data Protection Governance

Alba maintains a structured data protection governance framework to ensure compliance with applicable laws and regulatory requirements.

• The Board of Directors has ultimate oversight of data protection and privacy risk.
• The Board Audit and Risk Management Committee (BARMC) oversees the effectiveness of internal controls relating to data protection, cybersecurity, and information governance.
• Senior Management is responsible for implementing and maintaining appropriate data protection controls.
• The Compliance Function is responsible for the day-to-day oversight, monitoring, and administration of data protection requirements, including policy implementation, training, and regulatory engagement.
• Alba designates a Data Protection Guardian (DPG), where required, to oversee compliance and act as a point of contact for data subjects and regulatory authorities.

 

4. Collection and Categories of Information

Alba collects the following categories of Personal Information through its website:

• Identity data;
• Contact data;
• Technical and usage data;
• Marketing and communications data;
• Interests and engagement data;
• Service history; and
• Any other information voluntarily provided through website interactions.

Sensitive or special categories of Personal Information will only be collected where necessary and subject to appropriate safeguards, including access controls, encryption, and, where required, explicit consent.

 

5. How We Collect Information

Alba collects Personal Information through:

• Direct interactions via website portals (including vendor registration, customer platforms, subscriptions, contact forms, and career applications);
• Communications via email or social media;
• Automated technologies or interactions such as cookies, server logs, and analytics tools; and
• Third-party service providers (such as analytics providers).

 

6. Cookies and Tracking Technologies

Cookies are small text files stored on your device that enable website functionality and improve user experience.

Alba uses the following categories of cookies:

• Strictly necessary cookies for core functionality and security;
• Performance and analytics cookies to understand website usage;
• Functional cookies to remember user preferences; and
• Targeting cookies (if applicable), as disclosed on the website.

Users may manage cookie preferences through browser settings or the website cookie banner. Disabling certain cookies may impact website functionality.

 

7. Purpose and Legal Basis for Processing

Alba processes Personal Information in accordance with the PDPL and other applicable laws, and only where a valid legal basis exists.

Processing is undertaken for the following purposes:

• administering and operating the website;
• responding to enquiries and providing requested services;
• recruitment and human resources administration;
• complying with legal and regulatory obligations; and
• improving services, systems, and user experience.

The legal basis relied upon include:

• performance of a contract or pre-contractual steps;
• compliance with legal obligations;
• legitimate business interests (subject to appropriate balancing); and
• consent, where required.

Where consent is relied upon, it may be withdrawn at any time.

If required information is not provided, Alba may be unable to provide certain services or respond to requests.

 

8. Age Limitation and Children’s Data

This website is intended for individuals aged 18 and above. Individuals under the age of 18 should not use the website or provide Personal Information without the prior, verifiable consent of a parent or legal guardian.

Where Personal Information relating to minors is processed in connection with Alba programmes or activities, such processing is undertaken only with verifiable parental or guardian consent and is limited to what is strictly necessary for the relevant purpose.

 

9. Sharing Your Information

Alba does not sell or share your Personal Information or use it for cross-context behavioral advertising.

Personal Information may be shared, where necessary, with:

• Alba group entities;
• service providers acting as Processors (including IT, hosting, and support providers);
• professional advisers, auditors, insurers, and financial institutions;
• logistics and operational partners; and
• regulatory authorities, courts, or law enforcement bodies where required by law.

All third parties are required to process Personal Information in accordance with applicable laws and appropriate safeguards.

 

10. International Transfers

Personal Information may be transferred outside the Kingdom of Bahrain where necessary for business operations.

Alba ensures that such transfers are carried out in compliance with the PDPL and other applicable laws including by:

• transferring Personal Information to jurisdictions approved by the competent authority as providing an adequate level of protection (“whitelisted” countries);
• where such adequacy decisions do not apply, implementing appropriate safeguards, including contractual protections and internal controls, to ensure an equivalent level of protection; and
• adopting supplementary technical and organisational measures, where required, to safeguard Personal Information during transfer.

All international transfers are subject to appropriate governance and oversight to ensure continued protection of Personal Information.

 

11. Data Security

Alba maintains a risk-based information security framework designed to protect Personal Information against unauthorised access, loss, misuse, or disclosure.

Security measures include:

• access controls;
• encryption (where appropriate);
• monitoring and logging;
• secure infrastructure; and
• staff training.

While Alba takes reasonable and appropriate measures to safeguard Personal Information, no transmission of data over the internet or electronic storage system can be guaranteed to be completely secure. Accordingly, users acknowledge that any transmission of Personal Information is undertaken at their own risk. To the fullest extent permitted by applicable law, Alba disclaims liability for any unauthorised access, loss, or disclosure of Personal Information arising from circumstances beyond its reasonable control.

In the event of a personal data breach, Alba will notify the competent authority and, where required, affected individuals, in accordance with the PDPL and other applicable legal and regulatory requirements.

 

12. Data Retention

Alba retains Personal Information only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal and regulatory requirements.

Retention periods are determined based on the nature of the data and applicable obligations. Where Personal Information is no longer required, it is securely deleted or anonymised.

 

13. Your Rights

Subject to applicable law, individuals have the right to:

• access their Personal Information;
• request correction of inaccurate data;
• request erasure where there is no lawful basis for Processing;
• object to or restrict Processing in certain circumstances;
• withdraw consent where applicable; and
• lodge a complaint with the relevant data protection authority.

Requests may be submitted using the contact details below. Alba will respond without undue delay and in accordance with applicable legal requirements.

 

14. Links to Third‑Party Sites and Safe Browsing

This website may contain links to third-party websites for convenience and informational purposes. Alba does not control, endorse, or assume responsibility for the content, security, or privacy practices of such third-party websites. Alba makes no representations or warranties as to the accuracy, completeness, or reliability of any information contained on third-party websites.

Users access third-party websites at their own risk. To the fullest extent permitted by applicable law, Alba disclaims any liability for any loss or damage arising from the use of, or reliance on, any third-party websites or their handling of Personal Information.

Users are encouraged to review the privacy policies and terms of use of any third-party websites they visit.

 

15. Contact Methods and Privacy Contact

If you have a privacy concern or comments about this Privacy Notice, or if you wish to exercise your rights, please contact us via email: dpg@alba.com.bh.

Alternatively, you may contact Alba by post or by telephone at:

Address: Aluminium Bahrain B.S.C., 150, King Hamad Highway, Askar 951, Kingdom of Bahrain

Telephone: 17830000

 

16. Complaints

You have the right to lodge a complaint with the Bahrain Personal Data Protection Authority or any other competent supervisory or regulatory authority applicable to Alba.

Alba encourages individuals to contact it in the first instance to allow any concerns to be addressed promptly and effectively.

 

17. Consequences of Not Providing Information

Where Personal Information is required to enable Alba to provide services or to comply with legal or regulatory obligations, failure to provide such information may result in Alba being unable to process requests, establish or maintain a relationship, or deliver the relevant services.

Where the provision of Personal Information is optional, individuals may choose not to provide it; however, this may limit access to certain features or functionalities of the website.

 

18. Language Accessibility

This Privacy Notice may be made available in multiple languages. In case of inconsistency, the English version shall prevail.

 

19. Changes to this Privacy Notice

Alba may update this Privacy Notice from time to time. This version was last updated on April 2026. Any changes will be published on this page and, where appropriate, notified through the website.

 

20. Governing Law and Jurisdiction

This Privacy Notice shall be governed by and construed in accordance with the laws of the Kingdom of Bahrain, subject to any mandatory rights and protections afforded to individuals under applicable data protection laws.

 

 

Last updated: April 2026