This Privacy Policy (“Policy”) is a legally binding agreement between you (“User”, “you”, or “your”) and nupco (“we”, “us”, or “our”), the government entity in the Kingdom of Saudi Arabia.
We respect your privacy and are committed to protecting it through our compliance with this Policy, which describes the types of information we may collect from you or that you may provide (“Personal Data”) on the Platform and any related services (“Services”), and our practices for collecting, using, storing, protecting, and disclosing that Personal Data. It also outlines the choices available to you regarding our use of your Personal Data and how you can access and update it. This Policy is in accordance with the Personal Data Protection Law (“Law”) in force in the Kingdom of Saudi Arabia.
Data Collection
You may use and benefit from the Platform without revealing your identity or revealing any details that could be used to identify you as a specific, identifiable individual. Occasionally, you may be asked to provide certain personal data to benefit from certain Platform services. You may also choose not to provide any personal data, but you may be unable to benefit from certain Portal services as a result. We invite users to contact us if they have any questions about the requested information.
The collection of personal data is directly related to the Portal’s objectives and does not conflict with any applicable legal requirements. The techniques and means of collecting personal data will be relevant to the user’s circumstances, direct, clear, and secure, and free from deception, misleading, or extortion. If it becomes apparent that previously collected personal data is no longer necessary to achieve the purpose for which it was collected, the Platform will refrain from collecting such data and will immediately discard and destroy any previously collected data.
Before collecting your personal data, the Portal will ensure that the following criteria are met:
- Justification for collecting your personal data.
- The purpose for collecting your personal data, whether all or part of it is mandatory or optional, along with additional information about the processing of the data that does not conflict with the purpose of collection or is stipulated by law.
- The identity and reference address of the personal data collector, where applicable, unless for security purposes.
- The entity or entities to whom the personal data will be disclosed or described, and whether such data will be transferred, disclosed, or processed outside the Kingdom.
- The potential effects and risks of non-compliance with the personal data collection procedures.
- The privacy and protection of your data as stipulated by law.
- Other elements specified by the regulations depending on the nature of the activity undertaken by this entity.
In the event that personal data is collected from non-users, the following conditions will be met:
- The personal data owner’s consent to do so, in accordance with the provisions of the law.
- If the personal data is publicly available or collected from publicly available sources.
- If the entity is a public entity, and the personal data is not directly owned or processed for a purpose other than the purpose for which it was collected, or is required for security purposes, implementing another system, or to meet judicial requirements in accordance with regulations.
- If compliance with this prohibition may harm the personal data owner or affect their vital interests, in accordance with the provisions specified by regulations.
- If the collection or processing of personal data is necessary to protect public health or safety, or the life or health of a specific individual or individuals.
- If the personal data is not recorded or stored in a format that enables the owner to be directly or indirectly identified and identifiable.
What Data Do We Collect?
You may use and benefit from the Platform without revealing your identity or revealing any details that could be used to identify you as a specific, identifiable individual. Occasionally, you may be asked to provide certain personal data to benefit from certain Platform services. YThe platform retrieves your personal data available on the Government Integration Bank (GSB). Personal data, regardless of its source or form, can explicitly identify an individual or make them directly or indirectly identifiable. This data includes name, personal identification number, addresses, contact numbers, license numbers, personal records and property, bank account and credit card numbers, still or moving images of the individual, and other data of a personal nature.
It includes any process performed on personal data by any means, whether manual or automated, including collection, recording, archiving, indexing, arranging, formatting, storage, modification, updating, integration, retrieval, use, disclosure, transmission, publication, data sharing, interconnection, blocking, scanning, and destruction.ou may also choose not to provide any personal data, but you may be unable to benefit from certain Portal services as a result. We invite users to contact us if they have any questions about the requested information.
Automatic collection of information
The platform’s servers automatically collect your Internet Protocol (IP) address when you visit the platform. (Your IP address is the computer number you use, which allows other internet-connected devices to determine where data is being sent from the platform and to collect certain information, such as browser type and search engine, but without identifying you personally.) The platform’s use of your IP helps diagnose problems with its servers and compile statistics to measure platform usage (such as the number of visitors and the computer language you use). The platform does not allow anyone outside its technical team to view your IP.
Cookies
The Platform may store cookies on your computer when you visit the Platform. Cookies are pieces of data that uniquely identify you as a user and can be used to improve your experience with the Platform and better understand your needs and how you use government digital services. In general, most browsers are set up to allow cookies by default, but you can also reset your browser to refuse all cookies or to alert you when cookies are being sent.
Geographical location
You may occasionally be asked to consent to sharing your geographic location to use certain services offered by the platform. User geolocation will benefit from the availability of personalized services on the platform.
Data Processing
Your personal data will not be processed unless reasonable efforts have been made to verify its accuracy, completeness, currency, and relevance to the purpose for which the provisions of the regulations were collected. To protect data and information, the platform applies the highest security standards. Sensitive data and any data that must be kept confidential under legal requirements, controls, and additional processes are encrypted. Sensitive data includes information about an individual’s ethnic or tribal origin, religious, intellectual, or political beliefs, or membership in civil society organizations or associations, as well as criminal and security data, biometric data that identifies genetic data, insurance and health data, location data, credit data, and information about an individual’s parents, whether anonymous or one of them.
Our technical team is only authorized to process this information to provide services that meet your requirements. We never disclose your IP address to anyone other than the portal’s technical team.
Disclosure of Information
Your data may be made available to government officials in exceptional circumstances where such a need arises; however, it will never be made public without your prior consent.
Your personal data will only be disclosed in the following cases:
- If you consent to its disclosure in accordance with the provisions of the law.
- If your personal data was collected from a publicly available source.
- If the party requesting the disclosure is a public body, for security purposes, to adopt another system, or to meet judicial requirements in accordance with the provisions specified by the regulations.
- If the disclosure is necessary to protect the public interest, public safety, or the life or interests of a specific individual or individuals.
- If the disclosure will be limited to processing the data in a manner that does not specifically identify the owner of the personal data or any other individual. The data will not be disseminated, exchanged, or sold to any third party without your prior consent.
The platform will not publish your personal information if any of the following conditions are met:
- It poses a threat to security, harms the Kingdom’s reputation, or conflicts with its interests.
- It affects the Kingdom’s relations with other countries.
- It prevents the disclosure of a crime, violates the accused’s rights to a fair trial, or affects the integrity of existing criminal proceedings.
- It endangers the safety of an individual or individuals.
- It constitutes a violation of the privacy of an individual other than the owner of personal data, as defined in the regulations.
- It conflicts with an incomplete or incapable interest.
- It violates applicable professional obligations.
- It involves a breach of an obligation, procedure, or court ruling.
- It reveals a confidential source of information that should not be disclosed in the public interest.
Right to Access or Modify
Any user who provides the platform with their personal data has the right to access or correct it. They can modify their personal data through the platform, or request modification of their personal data by sending an email to [email protected].
Data Retention
Your personal data will be retained and used for the period necessary to comply with legal requirements. Your personal data will also be destroyed and disposed of once the purpose for which it was collected has ended. If all identifying information about the owner has been removed in accordance with the controls stipulated by the regulations, the platform may retain this data after the purpose for which it was collected has ended.
This platform will retain personal data after the purpose for which it was collected has ended only in the following circumstances:
- If there is a systematic justification for keeping it for a specific period, it must be destroyed at the end of that period or the purpose for which it was collected has ended, whichever is longer.
- If personal data is relevant to a case before a judicial authority and its retention is required for that purpose, it will be destroyed after the completion of the judicial proceedings in the case.
Data Analytics
The Platform may use third-party analytics tools that employ cookies or other similar information-gathering technologies to collect standard internet activity and usage data. The information collected is used to create statistical reports on user activity, such as the number of times a user visits the Platform and uses its services, the pages visited, the length of time users stay on each page, etc. Data from these analytics tools is also used to monitor and improve the performance of the Platform and its services. It’s worth noting that we do not use third-party analytics technologies to track or collect personally identifiable information about our users, and any information collected through statistical reports will not be associated with any individual user.
Links to Other Sites
This policy applies only to the Platform. Since the Platform contains links to other resources that we do not own or control, if you navigate to another website through the Platform, you should read that website’s privacy policy to learn about its information security measures and applicable privacy policy.
Personal Data Protection
We are committed to protecting the privacy and confidentiality of personal data and not accessing it without personal consent, except in legal cases where disclosure is required by law. We secure the information you provide by storing it on computer servers in a secure, controlled environment, protected from unauthorized access, use, or disclosure. We also maintain adequate administrative, technical, and physical safeguards to protect against unauthorized access, use, modification, or disclosure of personal data under our control.
We also maintain adequate administrative, technical and physical precautions to secure the personal data under our control against unauthorized access.
Changes to the Privacy Policy
The Portal has the sole discretion to update this Privacy Policy at any time. The updated version of this Policy will be effective immediately upon posting unless otherwise stated. Your continued use of the Platform and its Services after the effective date of the updated Policy (or any other action specified then) will constitute your acceptance of those changes. To view the most recent update, the user should review the updated date at the bottom of this page. We may also provide notice of recent updates in other ways at our discretion, such as through the contact information you have provided.
Accept the Privacy Policy
You acknowledge that you have read this Policy and agree to all its terms and conditions. Your use of the Platform constitutes your acceptance of this Policy and the terms and conditions governing it. If you do not agree to this Policy, you must not use any of the content or services provided through the Platform.
Contact Us
If you have any questions, concerns or complaints regarding this Policy, the data we hold about you, or if you wish to exercise your rights, we invite you to contact us via one of the communication channels below:
- Phone: +966 9200 18184
- Email: [email protected]
- Contact Form
- Working Hours: 24/7
- Response Time: 24 Hours
