Privacy Notice

Privacy Notice

Scope of Policy

Consent to the Privacy Notice

By using Musaned platforms and services, whether through the Platform or App, you agree to this Privacy Policy, and by accepting this Notice, you agree to all of the following, which include, but are not limited to: (collecting, processing, storing, transferring, and making your personal data available, and disclosing and sharing them with government agencies as required by regulations and laws) and in accordance with the policies, controls, and conditions that govern Musaned platforms and services.

Data and Information We Collect About You

1. Regarding your use of Musaned platforms and services (Musaned Platform or App), the following information is collected: personal data, user-entered data required upon registering on the channels provided by the Company to serve users (e.g. names, personal identification numbers, addresses, contact numbers, user photos, etc.), data exchanged during our communication with you (e.g. customer support requests and reports received from you), and payment data (e.g. data collected for the purpose of making payment transactions, bank account numbers, and credit cards).

2. Cookies: The Platform may store cookies on your device when you visit it via a web browser. Cookies are pieces of data that uniquely identify a user and can provide a better understanding of the Website and its user base. The use of cookies is limited to the Musaned Platform when accessed through web browsers, and is not used within the Musaned App.

3. Most browsers automatically accept cookies. However, you can configure your browser to reject all cookies or to receive a notification when a cookie is being sent. Please note that some or all of the services offered on this Website may not function correctly if you reject cookies, as we may link the information we store in cookies to any personally identifiable information you provide on the Platform.

4. Once you visit the Platform, the Website's server automatically records your IP address (your IP address is a unique numerical identifier assigned to your device), which allows other devices connected to the Internet to determine the destination of the data they are sending out, and to collect some information such as the type of browser and search engine, the date and time of the visit, and the URL of any site that referred you to the Website, for operational, security, and analytical purposes, excluding the identification of your personal identity.

5. The user may sometimes be asked to agree to select their geographical location in order to benefit from some of the services offered on the Website.

How We Collect Your Personal Data

Personal data may be collected directly from you in various ways, including:

1. Products and services: When you access, provide your data, use Musaned platforms and services via the Platform or App, or sign a contract to become our client and use one of our products or services.

2. Direct or indirect interactions: When you complete and submit a form to us through the Platform, mobile/smartphone applications, email, mail, or via phone call to our contact center. This includes any personal data you provide when making an inquiry, participating in a promotional offer, or through any other form of communication with us.

3. Social media interactions: Any posts and interactions you have directly with us on our social media channels.

4. Browsing surveys: Data about how you use our Platform, including the date and time of your visit, the type of Internet browser you use, and how you were referred to our Platform.

5. Web surveys: Our online web surveys enable us to collect specific data, such as your feedback on the appearance and functionality of our Platform and App. Additionally, we may also request information about various customer service elements. Your feedback is vital and valuable to us, enabling us to improve the quality of our customer service. Given that providing your name and other details is optional.

6. Data related to the digital experience across all digital channels and platforms, including but not limited to: interaction data, platform usage data, and communication data across digital channels. This is done to improve service quality and design personalized digital experiences.

Links to Other Websites and Third Parties

This Notice applies to Musaned platforms and services. If you move to another website or platform through Musaned platforms and services, you must read the notices and privacy policies of that website or platform to determine their information security practices and privacy policy.

Legal Basis for Collecting and Processing Your Personal Data

The Company/Musaned services process your personal data in accordance with the provisions of the Personal Data Protection Law issued by Royal Decree No. (M/19), dated 09/02/1443 AH, and its Implementing Regulations issued on 05/09/1444 AH. This processing is carried out based on the mandates entrusted to the Ministry of Human Resources and Social Development (HRSD) and in accordance with the laws and regulations governing the labor market in the Kingdom of Saudi Arabia.

Accordingly, data is processed upon any of the following provisions:

Relevant legislation:

1. The Regulation for Domestic Workers and Those in Similar Positions.

2. Rules for Practicing Recruitment Activity and Providing Labor Services.

3. Any other relevant legislation or ministerial decisions in force in the Kingdom of Saudi Arabia, even if not expressly stated in this Policy.

4. The consent of the data subject to the provision of their data for purposes other than the implementation of the provisions of the legislation referred to above, such as products, services provided, and for the purposes of improvement and development.

Your personal data is processed in accordance with the Personal Data Protection Law and its Implementing Regulations, and based on labor market regulations, such as the Labor Law, the Social Insurance Law, the Wage Protection System, Saudization regulations, and regulations for registering establishments and documenting contracts. In cases where there is no legal basis for processing, your explicit consent is required before data collection or sharing.

Purpose of Collecting Personal Data

Personal data is collected and used for several reasons, including but not limited to:

1. Collecting and processing personal data to meet legal, regulatory, operational, and developmental requirements.

2. Fulfilling the necessary data requirements for providing services and electronic transactions.

3. Understanding visitors' needs to improve products and services.

4. Enabling the development, operation, and improvement of the company's products and services and marketing to the Company's clients.

5. Allowing users to access services and conduct transactions.

6. Analyzing data and issuing reports that serve the necessary business requirements, such as statistical reports.

7. Archiving this information and data and/or using it for future communication with you.

8. Resolving inquiries or complaints you may have and improving the user experience across all the Company's communication channels.

9. Developing and improving the business and services provided, or providing innovative solutions or enhancing added value, after obtaining explicit and prior consent from the data subject.

Purposes and Legal Basis for Collecting and Processing Your Personal Data

Sharing Your Personal Data

1. We may exchange, process, and share any information and data you provide us with your full knowledge or collect from you with our partners, or third-party suppliers for legitimate purposes based on regulatory basis or operational needs, including but not limited to, conducting analyses, studies, and surveys, issuing reports, and for commercial purposes. Data is shared in specific ways and for legitimate purposes in a structured manner or a justifiable business need with the aim of achieving a public or private interest.

2. When sharing your personal data, we ensure that it is shared through a secure and trusted environment, in accordance with relevant laws, regulations, and policies. We may take additional steps to ensure the protection of your data by signing a data sharing/processing agreement according to specific terms and conditions that align with data sharing principles.

3. It should be noted that some cases of processing personal data may be carried out without requiring the consent of the data subject. These cases are permitted by the Personal Data Protection Law, and include, but are not limited to: the implementation of regulatory obligations, the implementation of a contract in which the data subject is a party, the protection of a vital interest of the data subject, or the purposes of scientific research in accordance with the regulatory controls specified by relevant laws and regulations.

Sharing, Disclosing, or Transferring Data outside the Geographical Boundaries of the Kingdom of Saudi Arabia

Personal data is transferred outside the Kingdom in accordance with the controls and purposes specified by the Personal Data Protection Law and its Implementing Regulations issued in this regard, and after taking necessary measures to ensure data protection.

Cybersecurity Controls

1. The Company/Musaned services implement cybersecurity controls issued by the competent authorities and in line with best practices and national standards. These include: necessary organizational and technical measures for protecting personal data from unauthorized access, misuse, loss, or alteration; encrypting sensitive information and data that must be kept confidential in accordance with regulatory requirements; managing data access privileges, data encryption; continuous system monitoring for early detection of any unauthorized access attempts; implementing security assessment procedures; and employee training.

2. Appropriate regulatory and technical controls and measures are applied to protect personal data according to the nature of each operational channel, whether through the Musaned Platform or App, and in accordance with the regulatory requirements and controls issued by the competent authorities, taking into account the technical differences between operating environments without compromising the required level of protection.

3. We also apply the controls and standards issued by the National Cybersecurity Authority (NCA), and we adhere to the requirements of the Personal Data Protection Law and its Implementing Regulations, and the standards adopted by the National Data Management Office (NDMO), to ensure the confidentiality and safety of your data and that it is not used or disclosed except in accordance with legal basis or with your consent when necessary.

Your Rights Regarding the Processing and Protection of Your Personal Data

Under the Saudi Personal Data Protection Law, data subjects have the following rights, which primarily depend on the purpose of collecting and processing personal data:

1. Right to be informed: The data subject has the right to be informed of the purpose of collecting and processing their personal data, the legal basis for this purpose, the content of the data to be processed, the method of collection, the means of storage, and the parties to whom the data will be disclosed (where privacy notices can be one of the means through which data subjects can exercise this right).

2. Right to access your personal data: The data subject has the right to request a copy of their personal data through the available data access channels or via the email address shown in the contact details below.

3. Right to correct your personal data: The data subject has the right to request the correction of their personal data that they believe to be inaccurate, incorrect, or incomplete, through the Company's approved channels, or via the email address shown in the contact details below.

4. Right to delete your personal data: The data subject has the right to request the destruction of their personal data when the purpose of its collection and processing has been fulfilled, under certain conditions that do not contradict legal principles and legitimate interests, and upon the expiration of the legal and regulatory retention period.

5. Right to withdraw your consent to the processing of personal data: You have the right to withdraw your consent to the processing of your personal data at any time, unless there are legal grounds that require otherwise.

6. Right to object to processing: The data subject has the right to object to (the collection, processing, storage, sharing, or disclosure) of their personal data without explicit or implicit consent, or if processing is for direct marketing purposes.

7. Right to restrict processing: The data subject has the right to request the restriction of processing their personal data for any purpose.

8. Right to transfer personal data: The data subject has the right to request the transfer of their personal data (processed data) that was collected directly from them and with their explicit consent to any party according to the policies followed by the Company.

For more details about processing your personal data and how to exercise your rights, you can refer to the Personal Data Protection Law issued by Royal Decree No. (M/19), dated 09/02/1443 AH, and its Implementing Regulations, or any amendments made thereto.

Data Retention Period

We retain your personal data only for the time necessary to fulfill the purpose for which it was collected, and we do not retain it for longer than necessary. We take all measures to ensure that your data is processed and retained in accordance with applicable laws and regulations; these measures include:

1. Data will be retained for the period associated with service provision during which a particular service is provided, or after the purpose of sharing your data has been fulfilled, in accordance with the cases stipulated in this Policy.

2. Data shall be retained for necessary periods of time in accordance with the provisions of other relevant laws and regulations.

Changes to the Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in regulatory requirements, operational practices, or the ways we process your personal data. Any updates will be posted on this page and in the relevant privacy sections of the Platform and App, and the date of the last revision will be indicated. If we make material changes to this Privacy Policy, we will endeavor to notify you through appropriate means, such as a notification on the Platform or App, or via email. Your continued use of the Platform after the posting of any modification constitutes your acceptance of the updated policy. Therefore, we recommend that you review the Privacy Policy periodically to ensure you are aware of any updates. You are solely responsible for the completeness, accuracy, and validity of the data you enter through the Platform or App.

Contact Information for General Inquiries

You may contact us to update your information, submit inquiries and complaints (including those related to data privacy), or receive notifications through the following approved channels:

1. Communication via electronic applications (primary means): Our Website is the official and approved channel for submitting applications and tickets. • Support and Help Page: https://musaned.com.sa/ar/support/create • Contact Us Form: https://musaned.com.sa/ar/contact-us

2. Email: care.e@musaned.gov.sa • For comments related exclusively to the Privacy Policy and Data Protection: DPO@takamol.sa.

3. Text messages: The beneficiary's verified mobile number is used to send notifications, verification codes, and official notices related to services or policy updates.

4. Other official contact channels (call center): • From within the Kingdom: 920002866

5. National Address (for mail correspondence): • Establishment Name: Takamol for Business Services. • Address: Riyadh, Ghirnatah District, Abi Jafar Al Mansour Street. • Postal Code: 13241 - Kingdom of Saudi Arabia.