Privacy Policy

WEBSITE PRIVACY POLICY

ARO Drilling (ARO, we, our, us) respects your privacy. This Privacy Policy is formulated in accordance with personal data protection laws in the Kingdom of Saudi Arabia (KSA) to help you understand the nature of the information we collect from you, whether as a visitor to our main website (www.arodrilling.com) or via our online job application website (careers.arodrilling.com), and how ARO treats and processes this data. About us

ARO is a world-class offshore drilling contractor that owns, operates, and manages a fleet of high-specification and premium jack-up rigs in Saudi Arabia.

ARO (Saudi Aramco Rowan Offshore Drilling Company) is a joint venture between Saudi Aramco, the world's largest oil and gas company, and Valaris Companies, an industry-leading, global drilling contractor. The 50/50 joint venture marks a major milestone towards the development of a competitive Saudi energy sector, as encapsulated in Saudi Aramco's In-Kingdom Total Value Add (iktva) program and Saudi Vision 2030.

How Can I Contact ARO?

We want to hear from you if you have thoughts or questions about this Privacy Policy.

Feel free to contact us via email at: privacy@arodrilling.com

1. What Personal Information Does ARO Collect?
   
   

   A. If you are a visitor to our main website, we collect and process some data directly from you, as follows:

   
   
   

   Category	Type of data	Required or optional	Purpose of collection	Method of collection
   Account data	Browser type and version Operating system Device type Pages visited Time spent on pages Search queries Aggregated demographic data	Required	This information is collected for analytical purposes through integration with Google Analytics.	Collected through Google Analytics API integration.

   
   
   

   B. If you apply for a job with us, we will collect and process the following data from you (in addition to the above information if you also visit the main website):

   
   
   

   Category	Type of data	Required or optional	Purpose of collection	Method of collection
   Applicant data	Name Physical and/or email address Telephone number Employment history Education history Nationality Proof of right to work Medical data (OGUK medical test) Criminal background check	Required	This information is collected to open and maintain your application. It may also be used to conduct a background check (which we conduct after a candidate accepts an offer).	Collected directly through you; via a recruiting company; or via public posting on job sites like LinkedIn.
   Applicant Data	Any accessibility needs Dietary restrictions	Optional	This information may be collected if you are invited to interview in person.	Collected directly through you or via a recruiting company.

   
   
   

   C. From both website users and applicants, we also collect and process some of your data indirectly, as follows:

   
   
   

   Category	Type of data	Required or optional	Purpose of collection	Method of collection
   Automatic information	IP Address Location information Device information Log information	Optional	We collect this data to provide the best user experience.	Indirectly using cookies or third-party service providers




2. Why and How Does ARO Collect and Use My Personal Information?
   
   

   We use your personal information to operate, provide, develop and improve the websites and, for applicants, to open and maintain your employment application. These purposes include:

   
   
   
   1. Compliance with legal obligations
      
      

      In certain cases, we collect and use your personal information to comply with local laws, including but not limited to national security.

   
   
   2. Compliance with contractual obligations
      
      

      We collect and use your personal information to comply with our obligations under our contracts.

   
   
   3. Operating, improving and personalizing our website
      
      

      We use the information we collect to provide and operate our website. We also use the information we collect to understand your needs and improve and personalize our website so that you have a better experience.

   
   
   4. Fostering safety and security
      
      

      We use information we collect to provide for the safety and security of our website, and your account. This includes verifying your identity, authenticating your account, and defending against fraud, unauthorized use, and illegal activity. We also use the information to evaluate and affect the safety and quality of content on our website - this includes investigating and enforcing our terms and conditions, as well as applicable law.

   
   
   5. Communicating with you
      
      

      We use the information we collect to communicate with you, including about job applications and changes to our policies and terms.

   
   
   6. Marketing
      
      

      If you’re open to hearing from us, subject to your consent, we may also send you marketing messages from time to time.

   
   
   7. Research 
      
      

      We use information you share with us, or that we collect to conduct research, surveys, and troubleshooting to help us operate and improve our website.




3. What are the Legal Bases for Processing My Personal Information?
   
   

   In accordance with local data protection laws, we rely on one or more of the following legal bases for processing your data, wherever applicable:

   
   
   
   1. You have given your consent to the processing (for example, when you submit a job application);
   
   
   2. The processing serves your actual interest;
   
   
   3. It is necessary to fulfil a statutory obligation under local laws;
   
   
   4. It is necessary to fulfil a contractual obligation to which you are a party;
   
   
   5. It is necessary to protect your vital interests;
   
   
   6. It is necessary for reasons of substantial public interest; and/or
   
   
   7. Our legitimate interests that do not conflict with or impact your rights.



4. How Long Does ARO Store My Personal Information?
   
   

   Your personal information is stored for as long as it is necessary, according to defined retention periods, to fulfil the purposes for which it was collected as described in this policy, and for satisfying any legal, regulatory, accounting or reporting requirements.

   
   

   Additionally, for website users, we keep your personal information only as long as necessary to operate our website and for ARO's legitimate and essential business purposes, such as:

   
   
   • maintaining the performance of the website;
   
   
   • making data-driven business decisions about new features and offerings;
   
   
   • complying with our legal obligations;
   
   
   • resolving disputes.
   
   

   For job applicants, we keep your personal information only as long as necessary to make employment decisions and to comply with applicable laws and regulations.

   
   

   When we no longer need to use your information and there is no need for us to keep it to comply with our legal or regulatory obligations, we will either remove it from our systems or depersonalize it so that we can't identify you. For unsuccessful job applicants, we generally delete your application after 3 years, unless you indicate you would like us to retain your application for any future job openings.




5. Does ARO Share My Personal Information?
   
   

   We may disclose your personal data to the following parties. You should know the ways we share your information, why we share it, and how you can control it:

   
   
   

   Entity to which the data will be disclosed	Capacity	The type of data which may be disclosed	The purpose of the disclosure
   Recruitment Companies	Service provider	Job application information Employment history Education history	We may share your information in order to help us assess your application and conduct background checks which are required to determine your suitability to join our team.
   Aramco	Customer	All data mentioned in section 1.	To facilitate the provision of our products and services.
   Advertising Companies	Service provider		Advertisers may learn information from your engagement with their ads on or off the ARO website. For example, if you click on an external link or ad on our services, that advertiser or website operator might figure out that you came from the ARO website, along with other information associated with the ad you clicked, such as characteristics of the audience it was intended to reach and other ARO-generated identifiers for that ad.
   SaaS Provider	Service provider	All data mentioned in section 1.	Your information may be accessed by our information technology service providers who help us keep our website operational. Moreover, we may share or disclose your information to detect, prevent, or otherwise address fraud, security or technical issues.
   Governmental, security and judicial authorities in KSA	Authority	All data mentioned in section 1.	We only share information if disclosure is necessary to comply with a law, regulation or judicial request; to protect the safety, rights, or property of the public, any person, or ARO. We may also preserve, use, share, or disclose your information if it is necessary protect the safety of any person, protect the safety or integrity of our platform, including to help prevent spam, abuse, or malicious actors on our services, or to explain why we have removed content or accounts from our services.

   
   

   Other than as set out above, you will receive a notice when personal information about you might be shared with third-parties, and you will have an opportunity to choose not to share the information.




6. DOES ARO TRANSFER MY PERSONAL INFORMATION OUTSIDE OF KSA?
   
   

   We strive to ensure your personal data is protected when transferred outside KSA in compliance with local data protection laws.
   
   If your personal information is transferred across borders by us or on our behalf, we use appropriate safeguards to protect your personal information in accordance with this Privacy Policy and applicable law. These safeguards include agreeing to standard contractual clauses or model contracts for transfers of personal information among our affiliates and among our suppliers and partners. When in place, these contracts require our affiliates, suppliers and partners to protect personal information in accordance with applicable privacy laws.




7. HOW DOES ARO KEEP MY PERSONAL INFORMATION SAFE?
   
   

   We design our systems with your security and privacy in mind. We have implemented various safeguards to guard against unauthorised access and unnecessary retention of personal information in our systems. These include anonymization, encryption, access, and retention policies.




8. HOW CAN I TAKE CONTROL OF MY PERSONAL INFORMATION?
   
   

   Under local data protection laws, you have rights in relation to the information that we have about you. To exercise these rights, you may contact us at the above email.

   
   
   1. Right to be informed
      
      

      You are entitled to be informed how we collect your personal data, legal basis for collection and processing, how such data is processed, stored, destroyed, and to whom it will be disclosed. You can access all details through the Privacy Policy or contact us using the above-mentioned information.

   
   
   2. Right to access personal data
      
      

      You may be entitled to request access to your personal data i.e. to request that we disclose to you the personal data that we have collected about you, the categories of sources from which the data was collected, the purposes of collecting the information, the categories of third parties we have shared the data with, and the categories of personal data that have been shared with third parties for a business purpose (along with other information you may be entitled to under law). You may also be entitled to request to know the specific pieces of personal data about you that we have processed. In some instances, you may have the right to receive the data about you in a portable and readily usable format.

   
   
   3. Right to request correction
      
      

      We provide you the ability to correct the accuracy or completeness of personal data that we process about you, if you believe something needs correction (and/or completion). You may only correct and/or complete personal data that is about you.

   
   
   4. Right to request destruction
      
      

      Subject to certain conditions, you may be entitled to request that we delete/erase personal data about you (also known in some jurisdictions/regions as the “right to be forgotten”). Subject to compliance with applicable local data protection laws, we may not delete/erase personal data about you when we require the data or when necessary to fulfil a legal obligation.

   
   
   5. Right to withdraw consent
      
      

      You may, at any time, withdraw your consent which you previously gave in relation to processing of your personal data, and where the processing relied on your consent as a legal basis.

   
   
   6. Right to lodge a complaint
      
      

      Without prejudice to any other administrative or judicial remedy you might have, you may have the right to lodge a complaint with local state regulators/data protection authorities if you believe that we have infringed applicable privacy or data protection requirements when processing personal data about you. If you wish to exercise such right, please contact the Saudi Data and Artificial Intelligence Authority (SDAIA) through the National Data Governance Platform.
      
      Unless otherwise stipulated by the law, you will not be required to pay any fees in return for exercising your rights. In case of submitting a request for exercising this right, you will receive a response within [30] days. This period may be extended for another [30] days in case actioning your request requires disproportionate effort, or if we receive multiple requests from you, in which case we will notify you in advance of the extension with the reasons for delay.




9. Are Children (under the age of 18) allowed to Use ARO's websites?
   
   

   In order to use our websites, you must have the legal capacity to give consent to the processing of your personal information in KSA.




10. Will This Policy Change?
    
    

    The most current version of this Privacy Policy governs our processing of your personal information and we may revise this Privacy Policy from time to time as needed.
    
    If we do revise this Privacy Policy and make changes, we will notify you and an opportunity to review the revised Privacy Policy before you continue to use our website.

Last updated: Dec,2025