This Privacy Notice describes how Qiddiya Investment Company, registered in the Kingdom of Saudi Arabia with our office located at Riyadh Digital City, MU04 – 10th Floor, Prince Turki Bin Abdulaziz, Al Awwal Road, Al Nakheel District, Riyadh 12382-6651 (hereinafter referred to as "we," "us," or "our") collects, uses, discloses, and protects information relating to you (your “Personal Data”) in relation to our website at Qiddiya.com and related webpages (our “Website”). For the purpose of data protection laws, we are the data controller. We are committed to ensuring the privacy and security of your Personal Data and complying with the applicable data protection laws in the Kingdom of Saudi Arabia, including but not limited to the Kingdom of Saudi Arabia Personal Data Protection Law (“KSA PDPL”) and its Implementing Regulations (“the Regulations”).
Please read this notice carefully to understand our practices regarding your personal data. If you do not agree with this notice in general or any part of it, you should not access the website, or otherwise provide your personal data to us.
This notice should be read alongside our Cookies Policy and Terms of Use.
At Qiddiya, we may collect Personal Data about you through various channels, including but not limited to:
The types of Personal Data we may collect at Qiddiya include:
At Qiddiya, we may process the above types of Personal Data collected in connection with Qiddiya’s Website, including its programs, in line with the below lawful basis for processing and processing purposes.
We process your personal data in order to perform our contract with you, such as:
We obtain your consent to process your personal data for the following reasons:
In order to be responsive to you, to provide effective services to you, and to maintain our business relationship, as a matter of our legitimate interests, we will use your personal data for:
In addition, we will use some or all of the above personal data to comply with any applicable legal obligations, to enforce any applicable Terms of Use, and to protect or defend the website, our services, our rights, the rights of our users, or others.
At Qiddiya, we may disclose your Personal Data to third parties with your consent, as necessary, or as otherwise required or permitted by law. Specifically, we share your Personal Data in the following circumstances:
Rest assured that we ensure any third parties with whom we share your personal data comply with appropriate data protection and confidentiality measures as mandated by the applicable laws and regulations.
We may transfer your personal data to countries outside of the Kingdom of Saudi Arabia, and your personal data may be processed by staff operating outside of the Kingdom of Saudi Arabia who work for us or one of our third party service providers or partners. We will ensure that adequate safeguards are in place to protect your personal data, as required by applicable data protection laws and regulations. These safeguards may include implementing standard contractual clauses approved by relevant data protection competent authorities or relying on other legal mechanisms recognized by the competent authorities.
We take our responsibility to protect your personal data very seriously. We use physical, technical, and procedural safeguards that comply with applicable legal standards to ensure the security and confidentiality of your personal data from unauthorized access, use, disclosure, accidental or unlawful alteration, destruction and other unauthorized forms of processing. However, we cannot guarantee the security of your personal data transmitted through the website; any transmission is at your own risk.
We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by applicable laws and regulations. We will retain and use your personal data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies. When personal data is no longer required, we securely dispose of, anonymize, or de-identify it.
At Qiddiya, we may collect and process Personal Data concerning your authorized representative(s) if you have designated another person to act on your behalf concerning our services or interactions with us. It is your responsibility to ensure that you have obtained the necessary consent from your representative(s) to provide us with their Personal Data.
You have certain rights regarding your personal data, including:
Please note that a number of these rights only apply in certain circumstances, and all of these rights may be limited by law. Your rights may also depend on the jurisdiction in which you reside.
Please note that this statement outlines your rights and choices concerning your Personal Data when interacting with Qiddiya:
Qiddiya is committed to ensuring that you are properly informed about your rights and has established dedicated channels for you to exercise them effectively. We aim to address all requests or complaints within 30 days and maintain records of all interactions. If you believe any of your Personal Data is inaccurate or incomplete wish to exercise any of these rights or have any privacy-related inquiries, please don't hesitate to contact us using the provided contact details below.
Where we rely on your consent for processing personal data, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. To manage your consent preferences, please contact us using the details provided below.
While we take reasonable steps to protect your personal data, you need to act appropriately to safeguard your information, such as keeping your login credentials secure and promptly notifying us of any unauthorized access to your personal data you may be aware of.
If you are under the age of eighteen (18), you must obtain the consent of your parent or legal guardian before using our website or providing any personal data to us.
We do not knowingly collect personal data from minors without the consent of their parents or guardians. If you believe that we have inadvertently collected the personal data of a minor, please contact us immediately so that we can act appropriately to delete the relevant personal data.
If we seek your consent to process your personal data for a specific purpose in accordance with this Privacy Notice, such consent must be granted on your behalf by your parent or guardian. By using our website, you represent and warrant that you are of the required age in your jurisdiction or have obtained the necessary parental or guardian consent.
At Qiddiya, processing for this purpose is generally based on Qiddiya’s legitimate interests, namely, for security and safety purposes, where we may use closed-circuit television (CCTV) cameras and surveillance systems on our premises. The recorded footage may be used to monitor and investigate security incidents, prevent fraud, and ensure the safety of our employees, residents, visitors, suppliers.
At Qiddiya, processing for this purpose is based on your consent. This may include using your Personal Data, including your email address, mobile number, and mailing address, to deliver advertising directly to you or on our websites as well as sending you marketing communications regarding our promotions, and events. You have the option to withdraw your consent or opt out of receiving marketing communications at any time by following the instructions provided in the communication or by reaching out to us using the contact details provided below. Our marketing communications may include both personalized and non-personalized materials, with personalized materials being tailored specifically based on the information we have about you.
At Qiddiya, processing for this purpose is generally based on Qiddiya’s legitimate interests, namely, to engage with you on social media platforms to provide information, respond to inquiries, and promote our events. Please note that any information you post or disclose on our social media pages may be visible to the public, and you should exercise caution when sharing Personal Data or Sensitive Personal Data.
At Qiddiya, processing for this purpose is generally based on Qiddiya’s legitimate interests, namely, to ensure quality control, assurance, training, and compliance purposes, we may monitor and record telephone calls, including customer service calls and calls with our representatives as well as record electronic communications, such as emails and instant messages, exchanged between you and our representatives. We will notify you if a call is being recorded, and the recorded calls will be overseen in accordance with applicable data protection laws and regulations. These measures are taken to ensure the security of our systems, prevent fraud, and maintain regulatory compliance.
A cookie is a small file that is placed on your computer’s hard drive. Its functions include storing your login and session statuses, recording your user preferences, and analyzing web traffic.
Apart from the data that you elect to disclose and share with us, we cannot access your computer or any other information about you with cookies. Although most browsers automatically accept cookies, you can amend your browser settings to disable cookies or interact with any cookies consent mechanism we provide. This may however prevent you from fully experiencing the website as it was intended.
For more information, please refer to our Cookies Policy.
Our website may contain links to third-party websites or services that are not operated or controlled by us. This Privacy Notice does not apply to such third-party websites or services, and we are not responsible for their privacy practices, content or their use of your information. We encourage you to review the privacy policies of those third parties before providing any personal data to them.
Qiddiya reserves the right to modify or update this Privacy Notice as needed from time to time, including to reflect changes in our privacy practices and legal obligations or in accordance with applicable data protection laws and regulations. We will notify you of any significant changes by posting the updated Privacy Notice on our website or using other appropriate means. We encourage you to periodically review this Privacy Notice for any updates. The revised Privacy Notice will take effect as of the updated effective date stated at the beginning of the notice.
This Privacy Notice shall be governed by and construed in accordance with the applicable laws of the Kingdom of Saudi Arabia. Any disputes arising out of or relating to this Privacy Notice shall be subject to the exclusive jurisdiction of the courts of Kingdom of Saudi Arabia.
Except as otherwise prescribed by applicable law, in the event of any inconsistency between the English language version and local language version of this Privacy Notice, the English language version will prevail.
If you have any questions, concerns, or requests regarding this Privacy Notice or our privacy practices, please contact: DataOffice@qiddiya.com