Privacy Policy

Purpose

The purpose of this Privacy Policy is to inform users of Eyad’s website about how their personal data is collected, used, and protected when interacting with our website. It reflects our commitment to safeguarding user privacy and compliance with the Personal Data Protection Law of Saudi Arabia (PDPL). We aim to ensure transparency in our data-handling practices.

Scope

This Policy applies to all personal data collected through Eyad’s website, including information directly provided by users (e.g., contact details and preferences) and data automatically collected (e.g., cookies and IP addresses). It governs interactions with the website, including form submissions and browsing activities.

Policy Statements

1. Definitions

• Personal Data: Information that identifies an individual, such as name, job title, email address, and other personal identifiers.
• Sensitive Personal Data: Information including race, ethnicity, religious beliefs, health information, and criminal records.
• Data Controller: Eyad or its authorized personnel responsible for determining the purposes and means of processing personal data.

2. Collection of Personal Data

2.1 Direct Interactions We collect personal data directly from users when they:

• Complete forms on our website.
• Communicate with us via phone or email.
• Interact with us on social media platforms.

2.2 Use of Cookies We utilize cookies to enhance user experience and gather data on website usage. Cookies help customize services and monitor traffic patterns.

2.3 Third-Party Sources We may receive technical and usage data from analytics providers and social media platforms, such as Google and LinkedIn.

3. Types of Personal Data Collected

We collect various personal data, including:

• Name and job title.
• Contact information (email, phone number, address).
• Demographic details (postcode, preferences).
• Interaction data (usage data from cookies).
• Feedback and communications from surveys and other channels.

We do not collect sensitive personal data unless required by law.

4. Use of Personal Data

Your personal data is used for the following purposes:

• Enhancing our products and services.
• Sending promotional materials about new offerings.
• Responding to customer service inquiries.
• Personalizing the website based on user preferences.
• Conducting market research.

5. Legal Basis for Data Processing

We process your personal data based on:

• Consent: When you provide explicit consent.
• Contractual Obligations: For services you request.
• Legal Obligations: To comply with legal requirements.
• Legitimate Interest: To improve user experience and services.

5.1 Change of Purpose If personal data needs to be used for a new purpose, we will inform you and explain the legal basis. Explicit consent will be sought if the new purpose is incompatible with the original one.

6. Disclosure of Personal Data

Your data may be shared with:

• Government or regulatory authorities when required by law.
• Third-party service providers assisting in delivering services.
• Marketing partners with your explicit consent.

We ensure third parties maintain adequate data protection measures.

7. Data Protection Measures

We employ physical, technical, and administrative measures to protect your personal data from unauthorized access, disclosure, or destruction. Measures include:

• Regular monitoring of systems to address vulnerabilities.
• Data minimization and access control principles.
• Prompt action and notification in case of data breaches.

8. Data Retention

Your personal data will be:

• Retained only as long as necessary for the purposes it was collected.
• Stored to meet legal obligations in compliance with Saudi Arabian laws.
• Anonymized or securely destroyed when no longer needed.

9. Your Data Protection Rights

9.1 Keeping Your Data Accurate Inform us of changes to your personal data to keep our records up to date.

9.2 Rights Under PDPL

You have the right to:

• Be Informed: About how your data is collected and used.
• Access: Your personal data.
• Rectify: Inaccurate or incomplete data.
• Delete: Data that is no longer necessary.
• Withdraw Consent: At any time, without affecting lawful processing.

We process data subject requests (e.g., access, correction, deletion) within 30 days, with a possible extension of an additional 30 days if necessary.

10. Verification of Identity

To ensure the security of your data, we may request information to confirm your identity before processing requests. Additional details may be required to expedite the process.

11. Intellectual Property Rights

All website content, including text and images, is protected by copyright and intellectual property laws. Reproduction or distribution without prior written consent is prohibited.

12. Review and Updates

This Privacy Policy is regularly reviewed and updated to reflect changes in data practices or legal requirements. The most recent version will be available on our website. Significant changes will be communicated through email or website notifications.

13. Amendments

Eyad reserves the right to amend this Privacy Policy at any time. The effective date of the latest version will be displayed for reference. We encourage users to periodically review the policy.

14. Contact Us

For privacy-related questions or concerns, please contact us via email, social media, or phone as listed on our website.