Personal Data Protection Policy
Privacy Notice
Chapter 1: Definitions and Objectives
1. Who We Are:
"We are Maharah Human Resources Company, active in the human resources
management sector in the Kingdom by providing workforce services to both
the public and private sectors, and meeting the local market needs through
an integrated system of services, including business sector services,
individual sector services, and localization sector services."
2. Scope of the Privacy Policy:
This policy includes any processing of personal data related to
individuals conducted within the Kingdom by any means, including the
processing of personal data related to individuals residing in the Kingdom
by any means by any entity outside the Kingdom. This includes data of
deceased individuals if it leads to their identification or that of a
specific family member. This policy is fully compliant with the Personal
Data Protection Law in the Kingdom of Saudi Arabia and related applicable
regulations, and it aims to protect personal data and ensure individuals’
rights concerning their privacy.
3. Objectives of the Privacy Policy:
-
To apply the Personal Data Protection Law and applicable regulations in
the Kingdom of Saudi Arabia.
-
To explain how the company processes, uses, or shares your personal data,
and how it is stored.
-
To clarify the measures taken to ensure the confidentiality and security
of personal information, in compliance with the systems and regulations
in the Kingdom.
Chapter 2: Terms and Conditions
4. Types of Information We Collect:
-
Identity Data: Full name / Gender / Date of birth / National ID or
Residency number / Place of residence.
-
Contact Information: Phone number / Email / National address / Work
address.
- Educational Information: Educational level.
-
Data collected from communication with you: Recorded phone calls / Data
from emails / WhatsApp / Data from our social media platforms.
-
Other Data: Data collected through the application, website, or when
filling out forms or direct communication via phone or email.
5. We do not process your personal data unless after verifying the following:
-
Consent: We must obtain your consent before processing or using your
personal data, except in cases allowed by law and applicable regulations.
-
Vital Interests: To protect your interests or those of the Kingdom of
Saudi Arabia.
-
Claims from official or public authorities: Upon request from relevant
official and public authorities.
-
Legitimate Interests: If there is a legitimate interest without harming
your interests and without processing any of your sensitive data.
-
Legal Obligation: We process your personal data if there is a legal
obligation or necessity to fulfill obligations or requirements.
6. How We Use Your Personal Data:
- We process and use your personal data for the following purposes:
-
Providing requested services: To ensure efficient and effective service
delivery, and to tailor offers and services according to your needs.
-
Responding to inquiries and complaints: To handle your inquiries and
complaints promptly and effectively and achieve the desired satisfaction.
-
Improving and developing services and providing a better experience for
you, including utilizing recorded calls and communications for quality
control purposes.
-
Legal and regulatory purposes: Use of personal data for legal practices
and procedures by retaining records as evidence for any legal claims.
-
Compliance with laws, regulations, guidelines, court orders, or requests
from government authorities.
7. With Whom We May Share Your Personal Data:
- Public or regulatory authorities.
- Legislative and governmental authorities.
- Legal advisors.
- Any other party after obtaining your consent.
-
Social media agencies for direct marketing under the following controls:
-
Compliance with the Communications and Information Technology Law and
related systems.
- Obtaining your clear consent.
-
Providing an easy and simplified mechanism for stopping the receipt of
marketing materials at your request.
- Clarifying the name of the sending entity.
-
Immediately ceasing the sending of marketing materials if you revoke
your consent.
8. Retention Period for Your Personal Data:
Your personal data will only be retained for the period necessary to
achieve the purposes outlined and approved by you or as stipulated by the
laws and regulations in the Kingdom.
9. How We Ensure the Security of Your Personal Data:
The company has taken all necessary organizational, administrative, and
technical measures to ensure the security of personal data and the privacy
of its owners, committing to the following:
-
Implementing necessary security and technical measures to mitigate risks
related to personal data leaks.
-
Adhering to relevant controls and standards issued by the National Cybersecurity
Authority.
10. Sharing Your Personal Data with External Parties:
Your personal data is shared with entities outside the Kingdom only if
there is a legal basis that permits it, in compliance with the laws and
regulations in the Kingdom.
11. Your Rights Regarding the Processing of Your Personal Data:
-
Right to know: You have the right to be informed of the collection and
use of your data, including the reason and how your personal data is
collected, the purposes of processing your data, and with whom it will
be shared.
-
Right to access your personal data: You have the right to request access
to your personal data held by the company in a readable and clear format.
-
Right to request a copy of your personal data: You have the right to
request a copy of your personal data in a readable and clear format,
according to the controls and procedures specified by regulations.
-
Right to request correction of your personal data: You have the right to
request the correction, completion, or updating of your personal data.
-
Right to request the destruction of your personal data: You have the
right to request the destruction of your personal data in the following
cases:
-
If you believe that the company no longer needs your personal data for
the purposes for which it was collected.
- If you have formally objected to our use of your personal data.
-
If our use of your personal data violates the law or any other legal
obligations.
-
If you revoke your consent to the collection and processing of your
personal data, and consent was the only legal basis.
-
Right to withdraw consent: You have the right to modify/cancel your
consent to the collection and processing of your personal data if consent
was the only legal basis, unless legal or judicial requirements dictate
otherwise.
-
Right to file a complaint: You have the right to file a complaint with
the relevant authority if your rights are not fulfilled within 90 days
from the date of the incident or your awareness of it.
12. Your Responsibilities:
Ensuring the accuracy and validity of the data provided and updating it
when necessary.
13. Changes to the Privacy Notice:
This privacy notice was updated in 9/2024 and may be updated as needed, and
you will be informed of any updates.