Privacy Policy

Introduction

SAH Development Company, operating under SAH Group (“SAH Group”, “we”, “us” or “our”), respects the privacy of visitors to its website and is committed to handling personal data in accordance with the laws and regulations applicable in the Kingdom of Saudi Arabia, including the Personal Data Protection Law and its Implementing Regulations. This Privacy Policy explains what personal data may be collected through the website, why it is collected and processed, how it may be used, stored and disclosed, and how data subjects may exercise their rights.

Scope and Controller

This Policy applies to the SAH Group website and to forms, registrations and digital interactions managed through the website, unless a separate privacy notice is provided for a specific service, event, initiative, programme or platform.

For personal data collected through this website, the controller is SAH Development Company, operating under SAH Group, Riyadh, Kingdom of Saudi Arabia, unless otherwise stated in a specific notice.

Personal Data We May Collect

Depending on how you interact with the website, we may collect the minimum personal data reasonably required for the relevant purpose, including:

• Identification and contact information provided directly by you, such as your name, organisation, job title, email address and mobile number.
• Information you submit through contact, partnership, event, initiative, programme or community registration forms.
• Newsletter or communications preferences where such features are available.
• Technical information generated when you use the website, such as IP address, browser type, device information, access logs, pages viewed and similar usage data, depending on the technologies enabled on the website.
• Any other information you voluntarily provide in correspondence or requests submitted to SAH Group.

SAH Group does not intend to collect personal data through the website that is unrelated to a stated purpose or service.

How We Collect Personal Data

• Directly from you when you complete a form, register for an event or initiative, subscribe to communications, contact us or otherwise submit information through the website.
• Automatically through website logs, cookies or similar technologies, to the extent such technologies are enabled and as described in the Cookie Policy.

Purposes of Processing

• Responding to enquiries, requests for information, partnership requests and other communications.
• Managing registrations for events, initiatives, programmes, communities or services offered by SAH Group.
• Sending newsletters, updates, invitations or marketing communications where the required consent or other lawful basis applies.
• Operating, maintaining, securing and improving the website and its functionality.
• Analysing website performance and usage where analytics tools are enabled and permitted.
• Protecting the website, users and SAH Group systems from fraud, misuse, unauthorised access and other security risks.
• Complying with applicable legal and regulatory obligations and responding to lawful requests from competent authorities.

Legal Bases for Processing

Depending on the relevant activity, SAH Group may process personal data on one or more lawful bases recognised under applicable Saudi laws and regulations, including consent, performance of a contract or steps requested before entering into a contract, compliance with a legal or regulatory obligation, or legitimate interests where permitted and where the applicable requirements and safeguards are satisfied.

Where processing is based on consent, the data subject may withdraw that consent in accordance with applicable law. Withdrawal does not affect processing lawfully carried out before the withdrawal or processing supported by another lawful basis.

Disclosure and Sharing

SAH Group does not sell personal data. Personal data may be disclosed or made available, to the extent necessary and lawful, to:

• Technology, hosting, security, communications, analytics and operational service providers acting on behalf of SAH Group and subject to appropriate confidentiality and data protection obligations.
• Partners or service providers connected with a specific event, programme, initiative or request where such sharing is necessary to provide the relevant service and is consistent with the notice provided to the data subject.
• Government, judicial, regulatory or law-enforcement authorities where disclosure is required or permitted by law.
• Other parties where the data subject has provided consent and consent is required.

Transfers or Processing Outside the Kingdom

Where the operation of the website or a related service requires personal data to be transferred to or processed outside the Kingdom of Saudi Arabia, SAH Group will apply the requirements, safeguards and conditions applicable to cross-border transfers under Saudi law before such transfer or processing takes place.

Retention and Destruction

Personal data will be retained only for as long as necessary to achieve the purpose for which it was collected, unless a longer period is required or permitted by applicable law. When the applicable retention period ends or the purpose no longer exists, personal data will be securely destroyed, deleted or anonymised in accordance with applicable requirements.

Data Security

SAH Group applies appropriate organisational, administrative and technical measures designed to protect personal data against loss, unauthorised access, unlawful disclosure, alteration, misuse or destruction. Security measures are reviewed and adjusted according to the nature of the data, the processing activities and the associated risks.

Data Subject Rights

Subject to the conditions, limitations and exceptions set out in applicable law, data subjects may exercise rights including:

• The right to be informed about the legal basis and purpose of collecting and processing personal data.
• The right to access personal data held by SAH Group.
• The right to request a copy of personal data in a clear and readable format, where applicable.
• The right to request correction, completion or updating of personal data.
• The right to request destruction of personal data when the purpose for retaining it has ended, subject to applicable legal requirements.
• The right to withdraw consent where consent is the legal basis for processing, subject to applicable law.
• The right to submit a complaint to the competent authority in accordance with applicable law.

Requests relating to personal data rights may be submitted through the official contact channels published on the SAH Group website. SAH Group may verify the identity of the requester where necessary and will handle requests within the periods required by applicable law.

Marketing and Communications

Where SAH Group sends direct marketing or promotional communications using personal contact information, it will obtain and record any consent required by law and provide a clear and simple method for the recipient to stop receiving such communications.

Cookies and Similar Technologies

The website may use cookies and similar technologies to operate website features, remember preferences, protect the website and, where enabled, measure performance or usage. Further information is provided in the Cookie Policy.

External Links

The website may include links to third-party websites or platforms. This Privacy Policy does not govern the privacy practices of those third parties. Users should review the applicable privacy notices of third-party websites before submitting personal data to them.

Children's Personal Data

The general SAH Group website is not intended to collect personal data from children. If a specific programme, initiative or service is directed to an age group that requires parental or guardian consent or additional safeguards, SAH Group will apply the relevant legal requirements and provide an appropriate privacy notice for that activity.

Updates to this Policy

SAH Group may update this Privacy Policy to reflect changes in legal, regulatory, operational or technical requirements. The date of the latest version will be shown on this page, and material changes will be communicated by an appropriate method where required.

Contact

For questions about this Privacy Policy or requests relating to personal data, please use the official contact details published on the SAH Group website.