PUBLIC
PUBLIC
Template Release:
PUBLIC
PUBLIC
1
PUBLIC
2
3
4
PUBLIC
5
5.1
•
•
•
•
•
•
•
• IP
•
5.1.1
•
•
•
•
•
5.1.2
5.1.3
•
•
5.2
PUBLIC
5.3
•
•
•
•
•
•
•
5.4
•
•
•
PUBLIC
•
•
•
5.5
5.6
5.7
5.8
5.9
PUBLIC
T: +966 11 813 1100
F: +966 11 813 1101
E: contact@site.sa
site.sa
6550 Almuhir (Digital City)
Unit No. 8, An Nakheel District
Riyadh 12382-3711
Kingdom of Saudi Arabia
Privacy Policy
Policy
Policy Level: Management
Policy Owner: Risk & Compliance
PUBLIC
T: +966 11 813 1100
F: +966 11 813 1101
E: contact@site.sa
site.sa
6550 Almuhir (Digital City)
Unit No. 8, An Nakheel District
Riyadh 12382-3711
Kingdom of Saudi Arabia
Table of Contents
1. Definitions and Abbreviations ................................................................................... 7
2. Purpose ..................................................................................................................... 8
3. Scope and Applicability ............................................................................................. 8
4. Compliance & Exceptions ......................................................................................... 8
5. Policy Statements ..................................................................................................... 8
5.1. Types of Collected Data ..................................................................................... 8
5.2. Data Protection ................................................................................................... 9
5.3. Use of User’s Data ........................................................................................... 10
5.4. Share of User’s Data ........................................................................................ 10
5.5. Cookies ............................................................................................................. 11
5.6. Store of Personal Data ..................................................................................... 11
5.7. Personal Data Retention Period ...................................................................... 11
5.8. User Right ......................................................................................................... 12
5.9. Changes to this Privacy Policy......................................................................... 12
PUBLIC
T: +966 11 813 1100
F: +966 11 813 1101
E: contact@site.sa
site.sa
6550 Almuhir (Digital City)
Unit No. 8, An Nakheel District
Riyadh 12382-3711
Kingdom of Saudi Arabia
1. Definitions and Abbreviations
Terms/Abbreviation
Description
SITE/Company
Saudi Information Technology Company.
Personal Data
Every data – of whatever source or form – that would lead to the identification
of the individual specifically, or make it possible to identify him/them directly or
indirectly, including: name, personal identification number, addresses, contact
numbers, license numbers, records, personal property, bank account and
credit card numbers, fixed or moving pictures of the individual, and other data
of personal nature.
Sensitive Data
Every personal data that includes a reference to an individual's ethnic or tribal
origin, or religious, intellectual or political belief, or indicates their membership
in nongovernmental associations or institutions, as well as criminal and security
data, biometric data, genetic data, credit data, health data, location data, and
data that indicates that both parents of an individual or one of them is unknown.
Information
Any data are processed, organized, structured or presented in a meaningful
context.
User Data
Any Personal Information or other data or information collected by or on behalf of
the SITE from users of the SITE products or of any website or service operated or
maintained by the
SITE.
User
Any user, employee, individual or entity that uses SITE’s services/products.
Processing
Any process performed on data by any means, whether manual or automated,
including processes of collection, recording, archiving, indexing, arranging,
formatting, storing, modifying, updating, merging, retrieving, using, disclosing,
transferring, publishing, data
sharing or interconnecting, blocking, erasing and destroying.
Collection
The controlling entity obtaining personal data in accordance with the provisions of
the Law, whether from its owner directly, or from his representative, whoever has
legal guardianship
over him, or another party.
Transfer
Transferring data from one place to another for processing it.
Consent
voluntarily agree in writing to what proposed by SITE.
PUBLIC
T: +966 11 813 1100
F: +966 11 813 1101
E: contact@site.sa
site.sa
6550 Almuhir (Digital City)
Unit No. 8, An Nakheel District
Riyadh 12382-3711
Kingdom of Saudi Arabia
2. Purpose
The Privacy Policy contains the provisions and directions of Saudi Information
Technology Company in the area of Data Privacy. The purpose of this Policy is to set
out the basis on which SITE will process various types of data such as; personal data
that SITE collects about the Users of SITE’s services or products, or that the data Users
provide to us, in connection with their use of our services (the “User”).
3. Scope and Applicability
This Policy applies to all Users and employees and any other entities or individuals that
SITE might collect their data –including but not limited to- Personal Data to provide
them with a service/product. This includes contractors, consultants, third party
associates and any temporary employees.
SITE collects, uses, stores, and shares User information when:
• User access and/or use SITE’s website and all other digital platforms where
this Privacy Policy is posted.
• User communicate with SITE in any manner.
• User use SITE’s products and services.
• SITE communicate with certain third-party partners and providers (“Third-
Parties”).
4. Compliance & Exceptions
Compliance with this policy is mandatory. Violations and non-compliance incidents will
result in corrective actions and the appropriate disciplinary actions will be decided
based on an investigation of the violation, and any exceptions related to the policy
provisions must be processed and approved in accordance with authority matrix.
5. Policy Statements
By using SITE’s services/products and accepting our Terms of Use and Privacy Policy,
User acknowledge and agree on the collection and use of personal data in accordance
with this policy.
5.1. Types of Collected Data
• SITE collects data about the User when the User provides it to SITE, when the User
uses SITE’s services/products, or when interacting with SITE’s websites. Such data
collection includes -but not limited to- the following:
o First and last name;
o Username and password (in encrypted format) when you access SITE’s
services;
o Employer or client, business;
PUBLIC
T: +966 11 813 1100
F: +966 11 813 1101
E: contact@site.sa
site.sa
6550 Almuhir (Digital City)
Unit No. 8, An Nakheel District
Riyadh 12382-3711
Kingdom of Saudi Arabia
o Contact information (address, e-mail address, telephone, fax number);
o User’s interest in SITE’s Services;
o Financial information to complete user’s orders;
o Details of user’s visits to the Websites, including traffic data, location data, logs
and other communication data;
o Information about user’s computer and mobile device, and internet connection,
including user’s IP address, operating system, and browser type; and/or
o Interactivity with an e-mail, including opening, navigating, and click-through
information. and when other sources provide it to SITE, as further described
below.
5.1.1. Provided Data
• Data that the User provides which is required to register with SITE’s services or
products. This includes User’s email address as well as any data the User is
required to enter when the User sets up an account with SITE. Alternatively, if
the User’s employer sets up their account on behalf of the User, the User’s
employer may provide this data to SITE so that SITE can provide the User with
access to SITE’s services or products.
• Data that the Users exchange during communications with SITE when the User
chooses to request information about SITE’s services/products, registers with
SITE or requests to receive customer or technical support, or otherwise
communicates with SITE.
• Data that SITE gets from using SITE’s services/products and website.
• Data that SITE collects to improve its provided services and products that
associated with the User’s use of the services or products.
• Data such as internet service providers, vendors, and other partners who help
us deliver our Services from Third Parties.
5.1.2. Payment Information
SITE collects certain payment and billing information when the User registers for
certain paid services or products and required to process their purchase orders.
5.1.3. Automated Collection of User’s Data by SITE
SITE may collect data automatically from the User when they use SITE’s services
or products. Such as:
• Data contained in activity logs, billing, usage volume and statistics.
• Data such IP address, details on the User’s browser and/or device, such as the
screen size, screen resolution, the region (i.e., to choose the proper language).
5.2. Data Protection
Although no system can guarantee the complete security of user’s information, SITE
takes the protection of the User’s Personal Data seriously in alignment with all
applicable laws and regulations, as appropriate to the senility of user’s information, and
will employ all reasonable and appropriate organizational and technical data protection
and security measures and actions to protect the Personal Data from loss, misuse,
unauthorized access, disclosure, alteration and destruction.
PUBLIC
T: +966 11 813 1100
F: +966 11 813 1101
E: contact@site.sa
site.sa
6550 Almuhir (Digital City)
Unit No. 8, An Nakheel District
Riyadh 12382-3711
Kingdom of Saudi Arabia
5.3. Use of User’s Data
• The following reasons explain SITE’s uses of collected data:
o To provide a safe, efficient and customized experience by enhancing the
algorithms used to provide our Websites and Services.
o To manage the service; SITE uses the data it collects to provide SITE’s services
and features to Users, to measure and improve those services and features, and
to provide Users with customer support and properly communicate with you.
o To prevent potentially illegal activities, ensure the security of the service and
protect against fraud or the violation of SITE’s terms, as well as comply with and
enforce relevant terms, conditions and policies, including this Privacy Policy and
other related terms of use.
o To improve SITE’s services or product by analyzing the collected Personal Data.
o To identify and contact Users; SITE may contact Users with service-related
announcements from time to time. They may opt out of all communications
except for essential updates.
o To market, promote and drive engagement with SITE’s services/products that
include communicating new features, survey requests, newsletters, and events
that SITE thinks may be of interest to the User.
o To perform data analytics (including market research, trend analysis, financial
analysis).
• SITE uses data about the User when SITE is given consent to do so for a specific
purpose that is not covered in this policy.
5.4. Share of User’s Data
SITE might share the User’s Data depending on the type of information:
• With user’s consent: SITE may disclose or share user’s information with user
consent. SITE may obtain user’s consent in writing; online, through “click-through”
agreements;
• when user accept the terms of use on SITE’s websites or when user use SITE’s
services;
• orally, either in person or on the phone; or by other means.
• In a business transfer: SITE may disclose or share user data as part of a corporate
business transaction, such as a merger or acquisition, joint venture, corporate
reorganization, financing, or sale of company assets, or in the unlikely event of
insolvency, bankruptcy, or receivership, in which such information could be
transferred to third parties as a business asset in the transaction.
• To non-affiliated Third-Parties: SITE may disclose or share user data with certain
Third- Parties to facilitate user’s access and use of SITE’s websites and SITE’s
services, including but not limited to internet service providers, data analytics
providers, governmental entities, operating systems and platform, service providers
who provide SITE a service (e.g., credit / debit card processing, billing, shipping,
repair, customer service, auditing, marketing, debugging to identify and repair errors
that impair existing intended functionality on SITE’s websites, and/or protecting
against malicious, deceptive, fraudulent, or illegal activity). SITE does not share
sensitive personal data with Third-Parties for marketing purposes. If SITE collect or
PUBLIC
T: +966 11 813 1100
F: +966 11 813 1101
E: contact@site.sa
site.sa
6550 Almuhir (Digital City)
Unit No. 8, An Nakheel District
Riyadh 12382-3711
Kingdom of Saudi Arabia
process personal data for research or statistical purposes, such data will be
anonymized prior to its collection or processing.
• To subsidiaries and affiliates: SITE may disclose or share user’s information with
SITE subsidiaries and affiliates to further facilitate user’s use of SITE’s websites and
services, to identify and repair errors that impede intended functionality, and to
protect against malicious, deceptive, fraudulent, or illegal activity.
• For legal process and protection: SITE may disclose or share user’s information to
satisfy any law, regulation, legal process, governmental request, or where SITE
have a good faith belief that access, use, preservation or disclosure of such
information is reasonably necessary to:
o Enforce or apply agreements, or initiate, render, bill, and collect for SITE’s
Services;
o Protect rights, interests, property or safety;
o In connection with claims, disputes, or litigation - in court or elsewhere;
o Protect users of SITE’s Websites and Services, or other carriers or providers
from
o fraudulent, abusive, or unlawful use of, or subscription to, such services; and
o Facilitate or verify the appropriate calculation of taxes, fees, or other obligations
due to the appropriate government entity.
5.5. Cookies
• SITE may use cookies, beacons, pixel tags, scripts, and other similar technologies
from time to time to support the functionality of SITE’s Websites.
• Cookies are transferred from SITE’s websites to User’s computer, phone or tablet,
and allow us to identify User’s device whenever you return to SITE’s Websites.
• These technologies provide a better experience when User use SITE’s websites,
and allow us to improve SITE’s services. SITE uses session-based cookies that last
only for the duration of User’s session, and are used to keep track of user sessions
in an effort to balance server usage. Cookies do not contain information or data that
may identify a User.
• SITE also may use persistent cookies, but do not use persistent cookies to identify
User or to track usage of other websites. User may opt-out of accepting cookies,
and may disable cookies altogether by modifying User’s individual preferences on
User’s web browser.
5.6. Store of Personal Data
SITE stores User’s Personal Data in the Kingdom of Saudi Arabia. SITE will take all
reasonable actions to ensure that User’s Personal Data is treated securely and in
accordance with this Policy.
5.7. Personal Data Retention Period
SITE will keep user’s Personal information for long as it is necessary in accordance
with the purpose for which it was collected and SITE’s legal and regulatory obligations.
SITE will stop collecting user’s information and data and as soon as practically passable
destroy data previously collected when such data is no longer needed for achieving the
purpose for which it was collected. When SITE dispose of user’s information, SITE will
PUBLIC
T: +966 11 813 1100
F: +966 11 813 1101
E: contact@site.sa
site.sa
6550 Almuhir (Digital City)
Unit No. 8, An Nakheel District
Riyadh 12382-3711
Kingdom of Saudi Arabia
do so in a way that is secure and appropriate to the nature of the information subject to
disposal.
5.8. User Right
SITE provides its Users the right to request for access, update, and correct User’s
Personal Data. The User can also choose to give their consent for receiving emails or
marketing which can be withdrawn by opting-out at any time upon the User’s request.
5.9. Changes to this Privacy Policy
This policy will be updated occasionally or when necessary. SITE encourages Users
to periodically review this Policy to stay informed about how SITE is helping to protect
data -including but not limited to- Personal Data is collects. User’s access to and use
of the services or products are subject to compliance with all applicable laws and
regulations, the applicable agreements(s) and the latest version of this Policy.
PUBLIC
