Skip to main content

Version: 1.0

Classification: Public

1: About Us

Al Khozama Investment Co. ("Al Khozama", "we", "our", or "us") is an investment and business services organization operating within the Kingdom of Saudi Arabia. Through its digital platforms, including its website and other online communication channels, the organization engages with customers, business clients, and vendors for business communications, service enquiries, and relationship management. We are committed to protecting personal data and ensuring that such data is collected, processed, stored, and protected in accordance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia and its implementing regulations.

 

 2: Personal Data we collect

When individuals interact with our website or digital communication channels, Al Khozama Investment Co. collects limited personal data necessary to respond to enquiries and manage communications. The personal data collected is categorized as follows:

Mandatory Data (Directly Collected)

We collect the following personal data directly from individuals: Name, Email Address, and Phone Number. Providing this data is mandatory for us to respond to your enquiries, create an account, or provide the requested services. Failure to provide this mandatory information may result in our inability to fulfill your request or provide the service.

Indirect Data (Technical & Usage)

In addition to the personal data provided directly, certain technical information related to website usage may be collected automatically through cookies and analytics technologies. This includes IP addresses, browser type, device information, and usage patterns to support website performance monitoring and service improvement.

 

 3: Methods of Collecting Personal Data

Personal data is collected through two primary methods:

Direct Collection: This occurs when individuals voluntarily provide their personal data through online forms, account registration processes, support enquiry submissions, or when subscribing to communications from the organization. In such cases, individuals knowingly provide their contact details for the purpose of communicating with Al Khozama Investment Co.

Indirect Collection: This occurs through technical tools such as cookies, website analytics services (specifically Google Analytics), or similar tracking technologies. These technologies collect information about website interactions and usage patterns to help the organization understand how visitors use its website and improve the quality of services offered through digital platforms.

 

4: Purpose of Collecting Personal Data

The personal data collected through our website and digital platforms is used strictly for legitimate and defined purposes related to our business operations. These specific purposes are:

  • Support Enquiries: To respond to support requests, questions, and service enquiries submitted by customers, clients, or vendors.
  • Marketing Communications: To send promotional materials and updates where individuals have provided explicit consent.
  • Account Creation: To facilitate the creation and management of user accounts on our digital platforms.
  • Analytics: To monitor website performance and analyze usage trends.
  • Service Improvement: To enhance the functionality, security, and overall user experience of our digital services.

In all circumstances, Al Khozama Investment Co. ensures that only the minimum amount of personal data necessary to achieve the intended purpose is collected and processed, adhering to the data minimization principle.

 

 5: Legal Basis for Processing Personal Data

Al Khozama Investment Co. processes personal data in accordance with the lawful bases permitted under the Saudi Personal Data Protection Law. Depending on the nature of the interaction, personal data may be processed based on the consent of the individual, particularly where personal data is used for marketing communications or optional services. Personal data may also be processed where it is necessary to fulfil contractual or service-related obligations, such as responding to enquiries or managing communications with clients or vendors.

In certain cases, personal data processing may also be based on the legitimate interests of the organization, such as maintaining website functionality, improving services, and ensuring the effective operation of digital platforms, provided that such interests do not override the rights and freedoms of individuals. Personal data may also be processed where required to comply with applicable legal or regulatory obligations.

Where processing relies on consent, individuals may withdraw their consent at any time without affecting processing activities carried out prior to the withdrawal.

 

 6: Use of Personal Data

Personal data collected by Al Khozama Investment Co. is used solely for the purposes for which it was collected. This includes managing communications with customers, clients, and vendors, responding to service or support enquiries, maintaining digital accounts where applicable, and providing updates related to services or business communications. Personal data is also used to send marketing communications where individuals have agreed to receive such information.

Technical data collected through cookies and analytics tools is used to monitor website usage, identify areas for improvement, enhance website functionality, and support the development of better digital services. All processing activities are carried out in accordance with applicable legal and regulatory requirements.

 

 7: Marketing Communications

We will only send marketing communications if you have provided your explicit consent. Marketing communications are entirely optional, and you are not required to consent to marketing to use our services. You have the right to withdraw your consent (opt-out) at any time by clicking the "unsubscribe" link included in every marketing email or by contacting us directly.

 

 8: Sharing of Personal Data

Al Khozama Investment Co. may share personal data with carefully selected third-party service providers that support the organization's operational activities. Specifically, we share data with providers of Customer Relationship Management (CRM) systems and Email Marketing tools. These third parties process personal data strictly on behalf of the organization and only for the purposes specified in this Privacy Policy.

All third-party service providers are located within the Kingdom of Saudi Arabia and are required to implement appropriate security and confidentiality measures. They must process personal data in compliance with applicable data protection regulations. 

 

9: Cross-Border Transfer of Personal Data

Al Khozama Investment Co. does not transfer or disclose personal data to any party outside the Kingdom of Saudi Arabia. All personal data is stored, processed, and managed exclusively within the Kingdom's geographical borders.

 

10: Cookies and Tracking Technologies

The website of Al Khozama Investment Co. uses cookies and similar technologies, specifically Google Analytics, to support website functionality and improve the user experience. These technologies collect information about how visitors interact with the website, allowing the organization to analyze website performance and improve digital services. Users visiting the website are presented with a cookie consent banner that allows them to accept all cookies, reject non-essential cookies, or manage their cookie preferences according to their preferences. Users may change their cookie settings at any time through the details specified in the Cookie Policy.[SK1] 

 

 11: Personal Data Retention

Personal data collected by Al Khozama Investment Co. is stored securely within systems operated by the organization or its trusted service providers. The organization ensures that personal data is stored in systems located within the Kingdom of Saudi Arabia and protected through appropriate administrative, technical, and organizational security measures.

Personal data will only be retained for as long as necessary to achieve the purpose for which it was collected or to comply with legal and regulatory requirements. Once personal data is no longer required, the organization will securely dispose of such data using appropriate methods designed to prevent unauthorized access, recovery, or misuse. These methods may include secure deletion from digital systems, removal from databases, or destruction of physical records where applicable.

 

12: Data Subject Rights

Under the Saudi Personal Data Protection Law, individuals have a number of rights regarding the processing of their personal data. Individuals have the right to be informed about how their personal data is collected, processed, stored, and disclosed. They also have the right to request access to their personal data held by the organization and to obtain such information in a clear and understandable format. Individuals have the right to request correction of inaccurate or incomplete personal data and to request the deletion of personal data where it is no longer necessary for the purpose for which it was collected. In addition, individuals have the right to withdraw their consent for personal data processing where consent serves as the legal basis for processing.

Requests relating to any of these rights may be submitted by email to [INSERT: privacy@alkhozama.com], through the website contact form at [INSERT: URL], by telephone at [INSERT: phone number], or in writing to the Procurement Department at [INSERT: full postal address]. All valid requests will be responded to within a month’s time from the receipt.

 

13: Complaints and Objections

Individuals who believe their personal data has been processed in a manner inconsistent with the PDPL, or who wish to object to a specific processing activity, may submit a complaint to the Data Protection Officer using [INSERT: DPO@alkhozama.com]. The organization will acknowledge the complaint and provide a substantive written response within 30 calendar days. If the individual is not satisfied with the outcome, or if the organization fails to respond within the stated period, the complaint may be escalated to the Saudi Data and AI Authority (SDAIA) at sdaia.gov.sa or through the National Data Governance Platform at dgp.sdaia.gov.sa, Riyadh, Kingdom of Saudi Arabia.

 

14: Availability of the Privacy Policy

This Privacy Policy is made available to individuals prior to or at the time of collecting personal data. The policy is accessible through the organization’s website and may also be made available through other digital channels where personal data collection occurs. Al Khozama Investment Co. ensures that the policy is presented in clear and understandable language to help individuals understand how their personal data is handled.

 

 15: Updates to This Privacy Policy

Al Khozama Investment Co. may update this Privacy Policy periodically to reflect changes in legal requirements, organizational practices, or digital services. Any updates to the policy will be published on the organization’s website together with the date of the most recent revision. Individuals are encouraged to review this Privacy Policy periodically to stay informed about how their personal data is protected.