ALALAM ALMUTATAWIR COMPANY FOR INFORMATION TECHNOLOGY (AIT)
ALALAM ALMUTATAWIR COMPANY FOR INFORMATION TECHNOLOGY (AIT) places great importance on the privacy of its clients and website visitors and is committed to protecting their personal data.
This Privacy Policy explains how the Company collects, processes, uses, protects, and retains personal data in accordance with the applicable laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL) and its relevant implementing regulations.
By using the Company's website, contacting us, or requesting our Services, you acknowledge that you have read and understood this Privacy Policy and the practices described herein, to the extent applicable to the relevant Service or transaction.
---
1. Scope of the Privacy Policy
This Privacy Policy applies to personal data collected or processed through:
The Company's website.
Contact and service request forms.
Email and official communication channels.
Requests for quotations and technical consultations.
Contracts, agreements, and correspondence with Clients.
Technical support and maintenance Services.
Any other digital services or platforms operated by the Company, where applicable.
This Privacy Policy does not apply to websites or Services operated by third parties that may be accessed through links available on the Company's Website.
---
2. Personal Data We May Collect
The Company may collect and process data necessary to provide its Services and manage its relationship with Clients. Depending on the nature of the interaction, such data may include the following:
Identification Data
Such as:
Name.
Job title.
Name of the organization or company.
Organization-related contact information.
Contact Information
Such as:
Telephone number.
Email address.
Address.
Other contact information provided by the User.
Service and Project Data
Such as:
Details of the Service request.
Project requirements.
Project-related correspondence.
Technical information necessary to provide the Service.
Contract, quotation, and purchase order information.
Technical Data
Certain technical information may be collected automatically when using the Website, such as:
Internet Protocol (IP) address.
Device and browser type.
Operating system.
Date and time of access.
Pages visited.
Technical data relating to Website performance and security.
The Company does not collect more personal data than is necessary to achieve the specified purposes unless there is a lawful basis or required consent for such collection.
---
3. How We Collect Personal Data
Personal data may be collected through:
1. Information entered by the User through Website forms.
2. Direct communication with the Company.
3. Email communications.
4. Requests for quotations or Services.
5. Entering into contracts and agreements.
6. Use of technical support and maintenance Services.
7. Technologies used to operate the Website and improve its security and performance.
8. Other lawful sources, where permitted by applicable laws and regulations.
---
4. Purposes of Collecting and Processing Personal Data
The Company may use personal data for the following purposes:
Responding to Client inquiries and contact requests.
Preparing quotations and technical studies.
Providing technology Services and solutions.
Implementing Projects, contracts, and agreements.
Providing technical support and maintenance Services.
Managing Client relationships.
Communicating regarding Projects, Services, and requests.
Improving the quality of Services and User experience.
Protecting the Website and systems from unauthorized use.
Detecting and addressing security and technical issues and incidents.
Fulfilling legal and contractual obligations.
Exercising legal rights and pursuing lawful claims where necessary.
Any other lawful and specific purposes communicated to the User at the time of collecting the data, where required.
---
5. Legal Basis for Processing Personal Data
The Company processes personal data based on applicable lawful grounds and depending on the nature of the processing, including:
The consent of the Data Subject, where consent is required.
Performance of a contract or taking steps at the request of the Data Subject prior to entering into a contract.
Compliance with a legal obligation.
Pursuing a legitimate interest in accordance with applicable legal requirements and controls.
Protecting vital interests where permitted by applicable law.
Any other lawful basis permitted under the Personal Data Protection Law and its relevant implementing regulations.
---
6. Sharing of Personal Data
The Company does not sell or rent Clients' personal data to third parties.
Personal data may be shared or disclosed, where necessary and subject to applicable legal requirements, with:
Technology service providers that assist the Company in operating its systems.
Hosting and technology infrastructure providers.
Email and technical communications service providers.
Partners or suppliers involved in the implementation of a specific Project, where necessary.
Competent governmental or regulatory authorities where disclosure is required or permitted by law.
Consultants or professional service providers where necessary and to the extent required.
The Company endeavors to ensure that any sharing of personal data is limited to the specified purpose and to the extent necessary to achieve that purpose.
---
7. Transfer of Personal Data Outside the Kingdom
Certain technology Services or systems used by the Company may require personal data to be processed or stored by service providers or technical infrastructure located outside the Kingdom of Saudi Arabia.
In such cases, the Company shall comply with the applicable legal requirements and controls governing the transfer or disclosure of personal data outside the Kingdom, where applicable.
---
8. Personal Data Protection and Security
The Company implements appropriate organizational and technical measures to protect personal data against unauthorized access, use, disclosure, alteration, loss, or destruction, taking into account the nature of the data and the risks associated with its processing.
Depending on the nature of the system or Service, such measures may include:
Access control and authorization management.
Protection of systems and technology infrastructure.
Use of appropriate security measures and technologies.
System monitoring and detection of unauthorized activities.
Backup procedures where necessary.
Security incident management procedures.
Awareness and training of employees and authorized Users regarding data protection requirements.
However, no electronic or technological method can be guaranteed to be completely secure.
---
9. Retention of Personal Data
The Company retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or for the period required by applicable laws, contracts, or regulatory requirements.
When there is no longer a lawful or legitimate need to retain personal data, the data will be handled in accordance with the Company's approved procedures and applicable legal requirements.
---
10. Cookies
The Company's Website may use cookies and similar technologies to improve User experience, operate the Website, analyze its use, and enhance its security.
Cookies may be used for purposes such as:
Enabling certain Website functionalities.
Remembering certain settings and preferences.
Improving Website performance.
Analyzing Website usage.
Enhancing Website security.
Users may control cookies through their browser settings. Please note that disabling certain types of cookies may affect the functionality of certain features of the Website.
---
11. Rights of Data Subjects
Under applicable laws and regulations, Data Subjects may have certain rights regarding their personal data, subject to applicable legal requirements, conditions, and exceptions, including:
The right to know the legal basis and purpose for collecting personal data.
The right to access their personal data in accordance with applicable legal requirements.
The right to request a copy of their personal data where permitted by law.
The right to request correction or updating of their personal data.
The right to request destruction of their personal data where permitted by law.
The right to withdraw consent to the processing of personal data where consent is the legal basis for processing.
Any other rights provided under the Personal Data Protection Law and its relevant implementing regulations.
Requests submitted by Data Subjects shall be handled in accordance with the applicable procedures and legal requirements.
---
12. How to Exercise Your Rights
A Data Subject may contact the Company to request the exercise of their rights relating to personal data through:
Email: info@ait.com.sa
Phone: +966 55 104 0060
Address: Kingdom of Saudi Arabia – Riyadh
The Company may request additional information to verify the identity of the person submitting the request and to protect personal data against unauthorized access.
Requests shall be handled within the applicable periods and in accordance with the procedures and controls stipulated under the relevant laws and regulations.
---
13. Children's Data
The Company's Website and Services are not specifically directed at children.
If the Company becomes aware that it has collected personal data relating to a child in circumstances where consent or specific procedures are required under applicable laws, the Company will handle such data in accordance with the applicable legal requirements.
---
14. Third-Party Links and Websites
The Company's Website may contain links to websites or Services operated by third parties.
The Company is not responsible for the privacy practices or content of such websites. Users are advised to review the privacy policies of such third parties before providing any personal data.
---
15. Accuracy of Personal Data
Users are required to provide accurate, complete, and up-to-date personal data when dealing with the Company.
The User is responsible for updating the personal data provided to the Company whenever changes occur, where such updates are necessary for the provision of Services or the performance of contractual obligations.
---
16. Security Incident Notifications
In the event of a personal data incident that requires notification under applicable laws and regulations, the Company shall take the necessary measures to address the incident and notify the competent authorities or affected Data Subjects, where such notification is legally required.
---
17. Amendments to the Privacy Policy
The Company may update this Privacy Policy from time to time to reflect changes in its Services, applicable laws and regulations, or technical practices.
The updated version will be published on the Website together with the date of the latest update.
Users are advised to review this page periodically to remain informed of any changes.
---
18. Contact Us
For any inquiries, requests, or concerns relating to privacy and personal data protection, you may contact the Company through the following channels:
ALALAM ALMUTATAWIR COMPANY FOR INFORMATION TECHNOLOGY (AIT)
Email: info@ait.com.sa
Phone: +966 55 104 0060
Address: Kingdom of Saudi Arabia – Riyadh
---
19. Acknowledgment
By using the website of ALALAM ALMUTATAWIR COMPANY FOR INFORMATION TECHNOLOGY (AIT) or providing personal data to the Company, the User acknowledges that they have read and understood this Privacy Policy and how their personal data may be collected, processed, and used as described herein, subject to the rights and protections granted to them under the applicable laws and regulations of the Kingdom of Saudi Arabia.