سياسة الخصوصوية

Contact Information:

Department/Responsible Team: The department in charge of applying the provisions of the Personal Data Protection System within the Company.
Address: Riyadh, Saudi Arabia.
Phone Number: 0598733272
Email: [email protected]
Commercial Registration No.: 4030410242

1.1 This policy outlines the personal data to be collected, the purpose of processing it, how it will be used, the legal basis for its collection and processing, the parties to whom the data may be disclosed (if any), the geographical scope of processing, the retention period of the data, and how it will be destroyed.
1.2 It also clarifies the rights of data subjects, how they can exercise their rights, and how to contact the concerned department.
1.3 The policy ensures that individuals have access to their data in a clear and accessible manner, as required by the Personal Data Protection Law and its implementing regulations issued by Royal Decree No. (M/19) on 1443/02/09 (referred to as the "Law" in this policy).
1.4 Adalah Information Systems Technology LLC., a company established in Saudi Arabia and the owner and operator of Qanoniah platform (hereinafter referred to as "Qanoniah"), is committed to maintaining the confidentiality and privacy of users’ data and using it to enhance service delivery in compliance with the applicable laws and regulations in Saudi Arabia.
1.5 By using the company’s website, users consent to this privacy policy

2.1 Data Collected:
- 2.1.1 Legal Research Product Plan:
  - Full name (mandatory).
  - Email (mandatory).
  - Mobile phone number (mandatory).
  - Profile picture (optional).
- 2.1.2 Human Resources Plan:
  - Full name (mandatory).
  - Email (mandatory).
  - Mobile phone number (mandatory).
  - Profile picture (optional).
  - Employee data (optional).
  - Header/logo of the beneficiary company (optional).
2.2 Purpose of Collecting Personal Data:
- Full name, mobile phone number, and email: Used for account verification, enabling login to the platform, and responding to user inquiries, suggestions, or complaints.
- Profile picture: Added to the user’s account file upon login.
- Employee data and company logo: Used to facilitate templates and contracts provided as a main service by the platform.

3.1 Data is collected directly through electronic registration forms where users enter their information. No personal data is collected from other parties.
3.2 Data is also indirectly collected through cookies when users visit the website.

Personal data collected directly or indirectly is used to:
- Complete registration processes.
- Improve user experience.
- Provide services related to Qanoniah's stated activities.

5.1 Personal data is stored in Saudi Arabia (Dammam) via cloud services provided by Google through a contract with CNTXT. These servers are secured with advanced technologies in line with the policies of the National Cybersecurity Authority and international standards. Data is destroyed after three years of storage in a secure manner that ensures it cannot be accessed or restored.
5.2 Administrative and technical measures (e.g., data encryption, anonymization, and tokenization) are used to protect personal data against unauthorized access, leaks, or damage.

6.1 Data is collected and processed based on the explicit consent of the data subject, which can be withdrawn at any time unless another legal basis exists.
6.2 In accordance with the provisions of the Personal Data Protection System, the legal basis for processing personal data includes:
- 6.2.1 Explicit consent of the data subject, which can be revoked as outlined in Section 7.
- 6.2.2 Legitimate interests, such as enhancing user experience, verifying account identity, and protecting accounts from unauthorized access.

7.1 Right to Information:
Data subjects have the right to know how their data is collected, the legal basis for its collection and processing, and the methods of its use and destruction.
7.2 Right to Access:
Data subjects can request a readable, electronic copy of their personal data, free of charge, within seven working days by contacting: [email protected].
7.3 Right to Correction:
Data subjects can request correction, completion, or updates to inaccurate or incomplete data by contacting [email protected]. Updates will be made within seven working days.
7.4 Right to Data Deletion:
Data subjects can request data deletion unless there are legal or contractual retention requirements.
7.5 Right to Withdraw Consent:
Consent to data processing can be withdrawn at any time unless there are overriding legal justifications.
7.6 Right to File Complaints:
Complaints regarding data protection can be submitted to the competent authorities.
7.7 Right to Compensation:
Data subjects can claim damages for violations of the Law.

Personal data may be shared with companies that assist in managing registration requests and providing customer service:
- Intercom: Ensures high-quality customer service.
- HubSpot: Manages subscription requests and client communication.
- Clare AI Limited: Assists in addressing technical issues and inquiries.
- Hotjar: Tracks user navigation to improve the user experience.

Links to external websites are provided for user convenience. The Company is not responsible for the content, operations, or any issues arising from the use of these external websites.

10.1 Complaints can be submitted to: [email protected].
10.2 If unresolved within seven working days, users may escalate to the National Data Management Office via [email protected].

11.1 Updates to the policy will be communicated through user accounts, email, or phone.
11.2 The policy is reviewed and updated periodically to reflect legal or procedural changes.

In the event of any inconsistency or discrepancy between the Arabic and English versions of this Privacy Policy, the Arabic version shall prevail.