Privacy Policy

Badri Solutions

“By accessing our website, you consent to the terms outlined in this policy.”

BADRI Privacy Policy in Accordance with PDPL (Personal Data Protection LAW – 2024)

This Privacy Policy sets out how BADRI uses and protects any information that BADRI collects, processes and stores.

At BADRI, we prioritize the protection of your personal data and are dedicated to complying with Saudi Arabia’s Personal Data Protection (PDP) laws. This policy details how we collect, use, store, and safeguard your personal information. We adhere to these laws for all individuals we interact with, including customers, suppliers, employees (whether in-sourced, out-sourced, or contractual), and any third parties.

“Personal Data” is any information that identifies a person specifically or could lead to their identification, including (but not limited to): name, driver’s license number, phone number, email address, or social security numbers. This policy covers the processing of all types of Personal Data, whether in electronic form (such as emails and documents created with word processing software) or in physical files and hard copies that are organized in a manner allowing access to information about individuals.

  1. BADRI as Data Controller / Processor
    • BADRI as a data controller has the responsibility to protect the privacy and rights of data subjects. We determine the purposes and means of the processing of Personal Data and is responsible for communicating with all processors.
    • BADRI ensures that Personal Data disclosed to BADRI is collected and processed according to the principles and regulations of the Personal Data Protection Law (PDPL), and only authorized and qualified persons can access your data. In case of any data breach, you will be notified and provided with the needed information about the breach.
  2. BADRI as Data Collector
    • BADRI only collect personal data that is relevant and necessary for our business operations and services.
    • Personal data may include but is not limited to: name, contact information, email address, and any additional information you provide voluntarily.
    • BADRI obtain your personal data directly from you or through your interaction with our website.
  3. Processing and Usage of Personal Data by BADRI
    • Your personal data will be used exclusively for the purposes for which it was collected, except in the following cases:
      • You have given explicit consent.
      • The personal data is publicly available or sourced from a publicly accessible platform.
      • We are legally obligated or permitted to do so.
      • The processing is necessary to protect the health or safety of an individual or group.
      • The data is stored or processed in a way that does not reveal your identity.
    • Your explicit consent, which you may withdraw at any time unless:
      • There is a contractual requirement;
      • A legal obligation exists;
      • The processing is necessary for legitimate interests, public interest, or the exercise of official authority.
    • Your personal data may be used to deliver our services, address your inquiries, enhance our website, and provide you with relevant updates.
    • We will only use your personal information for marketing purposes with your explicit consent. By giving consent, you agree that we may use your personal details, such as your name, email address, or phone number, to send you promotional content, newsletters, updates, and other marketing communications. You can withdraw your consent at any time by contacting us.
    • BADRI respects your preferences regarding marketing communications. If you no longer wish to receive these communications, you can opt-out by unsubscribing from our mailing list or by contacting our customer support team. Once you opt-out, we will stop using your personal information for direct marketing, except when required by law or for essential service-related communications.
  4. Usage of Personal Data Outside KSA
    • BADRI ensures proper and lawful transfer of Personal Data outside the kingdom.
    • BADRI does not transfer Personal Data to another country if it will put Data Subjects’ rights at risk or if the other country does not provide an adequate level of protection.
    • BADRI is responsible for conducting appropriate due diligence when sharing personal data.
    • BADRI does not transmit data overseas more than it is required for business purposes and falls under the lawful basis.
  5. Data Retention
    • We retain your personal data for as long as necessary to achieve the purposes outlined in this policy, or as required by applicable law.
    • We may retain your data even after the original purpose has been fulfilled in the following circumstances:
      • If the data is relevant to a legal matter, it will be retained until the matter is resolved and then permanently deleted.
      • If the personal data is related to an ongoing judicial case, it will be retained until the legal proceedings are concluded and will be destroyed thereafter.
    • We retain your personal data for the duration necessary to fulfill the purposes outlined in this policy, or as required by applicable laws.
    • We have the right to retain information even after the purpose for which it was collected has been met, in the following two cases:
      • If the data is essential to a legal matter and must be retained for that purpose, it will be destroyed after the matter is resolved.
      • If the personal data is closely related to a case pending with a judicial authority and its retention is required for this purpose, in which case it is destroyed after the completion of the judicial proceedings.
  6. Data Sharing
    • We do not share your personal data with third parties unless required by law or with your explicit consent. Any disputes arising from or related to this Data Protection Policy, including but not limited to issues concerning the collection, processing, storage, or disclosure of personal data, will fall under the exclusive jurisdiction of the courts of the Kingdom of Saudi Arabia. The competent courts will be determined based on the location of our organization and the applicable laws of Saudi Arabia.
    • BADRI places a strong emphasis on ensuring the secure transfer of personal data across borders when necessary. Our policy enforces robust safeguards and legal frameworks to ensure that data is protected to the same level as within our local jurisdiction. By following this policy, we reaffirm our commitment to maintaining data integrity and protecting individuals’ privacy, regardless of where the data is physically stored.
  7. Data Storage
    • We employ appropriate technical and organizational measures to safeguard the security and confidentiality of your personal data.
    • Your personal data is stored on secure servers and is accessible only to authorized personnel.
  8. Use & Storage of Cookies
    • We use cookies and similar technologies to improve your browsing experience on our website.
    • These technologies gather non-personal information, such as your IP address and browser type, to enhance the functionality of our website.
  9. Data Subject Rights
    • You have the right to request the correction or deletion of your personal data held by BADRI, subject to any legal obligations, by contacting our Data Office at ([email protected]).
    • Where applicable, you may withdraw your consent for the processing of your personal data at any time.
    • You have the right to update your personal data collected and stored by our organization by contacting our Data Office at ([email protected]).
    • To exercise your rights or if you have any questions or concerns regarding the handling of your personal data, please contact us using the information provided in this policy.
  10. Policy Updates
    • We may periodically update this policy to reflect changes in our practices or legal obligations.
    • We encourage you to review this policy regularly to stay informed about how we safeguard your personal data.
  11. Warranties
    • We are committed to implementing appropriate technical and organizational measures to protect the personal data collected and processed by our organization. These measures are designed to ensure the confidentiality, integrity, and availability of the data and to prevent unauthorized access, disclosure, alteration, or destruction.
    • We pledge to comply with all relevant data protection and privacy laws and regulations in the jurisdictions where we operate. This includes adherence to NDMO & SDAIA Standards, Saudi Arabia’s Personal Data Protection Laws, and other applicable legislation. We will ensure that all personal data collected and processed is done so in a lawful manner, respecting the rights of data subjects.
    • We are dedicated to transparency in our data processing practices and will provide clear and concise information about how personal data is collected, used, disclosed, and retained. We will inform individuals about the purposes of data processing, the legal basis for such processing, and any third parties with whom their data may be shared. Additionally, we will offer mechanisms for individuals to exercise their rights under applicable data protection laws, including the right to access, rectify, erase, restrict processing, and object to the processing of their personal data.
  12. Adherence to the Law
    This Data Protection Policy and any personal data processing conducted by our organization will be governed by and interpreted in accordance with the laws of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (if applicable) and any other relevant data protection and privacy legislation.
  13. Help Line
    If you have any questions, concerns, or requests regarding our Privacy Policy or the handling of your personal data, please contact us at: [email protected]