Privacy Policy – AL Muammal

This Privacy Policy describes how and when we collect, use, and share your information across our software/websites, SMS, APIs, email notifications, applications, programs, buttons, advertisements, commerce services, and other covered services that link to this Policy (collectively referred to as the “Services”), and from our partners and third parties. For example, you send us information when you use our Services on the web, via SMS, or from a software/application we created on devices. When using any of our Services, you consent to the collection, transfer, storage, disclosure, and use of your information as described in this Privacy Policy, including any information you choose to provide that is considered sensitive under applicable law.

Regardless of the country in which you reside, you authorize us to transfer, store, and use your information in any country in which we operate. In some of these countries, privacy and data protection laws and rules regarding when government authorities may access data may differ from those in your country of residence.

Your information is controlled by (the First Party). When this policy refers to “us,” “we,” or “our,” it refers to the controller of your information with us under this Policy. Nevertheless, you alone control the publishing of content you submit through the Services, as provided in the Terms of Service and rules of (the First Party). This privacy notice applies to all employees, customers, visitors, third parties, and others (referred to as “you” or the “User”) who access or use our digital software or platforms, such as (without limitation) our websites, software, customer and employee portals, and social media pages.

If you have any questions or comments about this Privacy Policy, please submit a request through our approved form available on (the First Party)’s websites/software, or by contacting the organization through the contact methods available on the organization’s website or the number provided in this agreement.

Purpose of Collecting Personal Data

We may collect your personal data to provide the following services:

To process orders for products or services and manage account services.
To process inquiries, as required.
To provide requested information.
To complete vendor/supplier registration.
To communicate with customers, investors, prospective employees, and current employees.
To monitor and document communications using emails, SMS messages, and other communication methods, ensuring adherence to high service quality as well as regulatory and legal obligations.
For employment applications or inquiries about job opportunities.
To conduct testing on software and ensure proper software performance.

In accordance with the Personal Data Protection Law (PDPL) in the Kingdom of Saudi Arabia, the legal basis on which we rely to process your personal data in most cases is:

Your Explicit Consent: When we obtain your consent to use your personal data for a specific activity by signature, your agreement to this document or other organization documents, your purchase of the organization’s products, or your acceptance of the privacy policy across software, websites, and services. You are completely free to withdraw your consent by contacting us at any time using the official organization email information from this Privacy Notice / from the “Contact Us” section on the website/software/our programs (this will require you to cease using the software/service).
Performance of a Contractual Obligation: Where we use your personal data to perform a contract or take steps to enter into a contract with you.
Protection of Vital Interests: Where processing achieves a specific interest for you and it is impossible or difficult to contact you.
Achievement of Legitimate Interests / Objectives: Where we use your personal data to achieve our legitimate interests (or those of any third party), provided these interests outweigh any prejudice to your data protection rights.
Execution of a Legal Obligation: Where we need to use your personal data to comply with relevant legal or regulatory obligations.
Achievement of Public Interest: Where processing your data is necessary for reasons of substantial public interest based on applicable law.

Collection and Use of Information

We collect and use your information to provide, understand, and improve our Services.

Basic Account Information: If you choose to create an account with (the First Party), you must provide us with certain personal information, such as your name, username, password, email address, or phone number. On (the First Party)’s application/software, your name and username are publicly listed, including on your profile page and in search results; you may use either your real name or a pseudonym. You may create and manage multiple accounts with (the First Party). If you use (the First Party)’s applications, the contact information you provide to log in is not public. Some of our product features, such as searching, viewing public user profiles, or watching broadcasts on (the First Party)’s services, do not require you to create an account.
Databases, Excel Files, and Other Files/Papers Belonging to (the Second Party): To fix a problem in our software or add a feature, we may need to view or copy the customer’s databases or files, whether electronic or physical. Accordingly, unless a specific contract prohibiting this is signed with the customer, we have the implicit or explicit right to view, copy, and retain them for testing, correction, and operational purposes as we see fit. Furthermore, all or most entered data is uploaded to our servers and devices, which we will use to connect with banks, electronic payment channels, the Zakat, Tax and Customs Authority (ZATCA), government entities/departments, customers, suppliers, partners, and official bodies.
Contact Information: You may use your contact information (such as email address or phone number) to customize your account or enable specific account features—for example, to verify logins or (the First Party) applications via SMS or otherwise. If you provide us with your phone number / approved contact method, you agree to receive messages/communications at that number/method from us. We may use your contact information to send information about our Services, market them, help prevent spam, fraud, or abuse, and help others find your account, including through third-party services and client applications. You can use available settings to control the notifications you receive from (the First Party) applications; your privacy settings control whether others can find you on (the First Party) applications by your email address, phone number, or other details.
Additional Information: You may choose to provide us with additional information to help improve and personalize your experience across our Services. For example, you may choose to upload and sync your address book so we can help you find and connect with users you know, or help other users find and connect with you. We may later adapt content—such as providing suggestions or displaying user accounts and messages to you and other users—based on imported address book contacts. If you communicate with us via email or any other means, we may retain your message, email address, and contact information to respond to your request. If you link your account on our Services to an account on another service to share content between services, that other service may send us your registration/identification information and other authorized details. This information enables cross-publishing, helps us improve Services, and may be retained by us.
Messages, Follows, Lists, Profile, and Other Public Information: (The First Party)’s software is designed primarily to help you exchange information with the world, complete transactions, and accelerate business electronically. Most information you provide through (the First Party)’s services is information you request us to make public. You may provide personal information to be made public on (the First Party)’s services, such as a short bio, location, website, date of birth, or picture. Additionally, your public information includes sent messages, metadata provided with them (e.g., when sent and the client application used), account details (e.g., creation time, language, country, time zone), lists you create, and people you follow. (The First Party) broadly and instantly disseminates public information to a wide audience of users, customers, and services—including search engines, developers, and publishers integrating (the First Party) content into their services, as well as organizations like universities, public health agencies, and market research firms analyzing trends and insights. When sharing information or content like photos, videos, and links across the Services, carefully consider what you make public. We may use this information to make inferences, such as topics of interest to you. Our default setting is to make information provided through the Services public unless deleted. For certain profile fields, visibility settings may be provided to limit who can see that information. If no visibility setting is provided, the profile information is public.
Direct Messages and Non-Public Communications: We offer features allowing more private communication—for example, Direct Messages for private conversations with other users of (the First Party)’s software. When communicating privately through our Services, we store and process your communications and related information. Note that if you interact with public (First Party) content shared via Direct Message (e.g., “liking” a shared message), those interactions may be public. While features like Direct Messages are intended to be private, remember that the recipient may copy, store, and re-share the contents of your communications.
Location Information: We may receive information about your location. For example, you may choose to publish your location in messages and on your profile. You may also set your primary location on (the First Party)’s software or determine location using device data (e.g., precise GPS location, nearby wireless networks/cell towers, or IP address). We may use and store location information to provide specific features (like location-tagged messaging) and to customize/improve Services with more relevant content, directions, stories, ads, and local suggestions.
Links: We may track how you interact with links across our Services—including email notifications, third-party services, and client applications—by redirecting clicks or other means. We do this to help improve our Services, deliver more relevant ads, and share aggregate click statistics (such as how many times a link was clicked). Links, messages, non-public communications (like Direct Messages), and shortened links will be processed through link-shortening services, error reporting, and usage tracking in our software.
Cookies: Many websites and software applications use cookies and similar technologies to collect additional website usage data and improve services. A cookie is a small data file transferred to your device. We may use session and persistent cookies to better understand how you interact with our Services, monitor aggregate usage/web traffic, and customize/improve our Services. Most browsers accept cookies automatically, but settings can be adjusted to reject cookies or prompt you before accepting one. However, some Services may not function properly if cookies are disabled.
Use of Our Services/Software: We receive information from/about you when interacting with our Services even if you haven’t created an account (“Log Data”)—for example, when visiting our websites, signing into our Services, interacting with email notifications, authenticating a third-party website/app via your account, or visiting a third-party site containing a (First Party) button or widget. Log Data may include IP address, browser type, operating system, referring webpage, pages visited, location, mobile operator, device information (including device and application IDs), search terms, or cookie information. We also receive Log Data when you click, view, or interact with links on our Services (including third-party app links). We use Log Data to make inferences (such as topics of interest) and customize content/ads. We retain Log Data as needed for purposes described in this Privacy Policy. (The First Party) also reserves the right to access (the Second Party)’s software if necessary for either party to perform maintenance, updates, or modifications, monitor usage patterns/issues, or upload data to our sites and services.
Widget / Button Data: We may customize Services for you based on visits to third-party websites integrating (First Party) buttons or widgets. When these sites load our buttons/widgets, we receive Log Data including the visited webpage and a cookie identifying your browser (“Widget Data”).
Commerce Services: You may provide payment information—including credit/debit card number, expiration date, CVV, payment type, and billing address (collectively “Payment Information”)—along with a shipping address to complete purchases. To facilitate future purchases, we store Payment Information (excluding CVV) and shipping address. Payment and shipping details are considered private and not made public. To facilitate order fulfillment, we collect and store purchase-generated details (“Transaction Data”), including merchant name, date, time, and transaction value.
Advertising: Our Services are ad-supported. We may use information in this Privacy Policy to make ads more relevant, measure effectiveness, identify devices to serve/cap ads on (the First Party)’s software. We do not use private Direct Message content for ad targeting. (The First Party)’s ad policy prohibits advertisers from targeting sensitive categories (such as race, religion, politics, sex life, or health). We reserve the right to display our branding/badges, run self-promotional ads to increase sales, list (the Second Party) as a client in our advertising, and place advertisements in software printouts and surrounding media as deemed appropriate.
Third Parties and Affiliates: We may receive information about you from third parties, such as other (First Party) users, partners (including ad partners), or our affiliates. For example, users may share or tag you in photos (controlled by your privacy settings). Advertising partners and affiliates may share data like browser cookie IDs, device IDs, cryptographic hashes of account IDs (e.g., email address), demographic data, interests, viewed content, or actions taken on a site/app.

Information Sharing and Disclosure

We do not disclose your personal information except under the specific circumstances below:

User Consent or Direction: We may share or disclose your information at your direction—such as authorizing a third-party web client/app to access your account or directing us to share feedback with a business. When registering/logging into a third-party app using (First Party) applications, contact details (like phone number) may be shared with that app. If you share private communications (like Direct Messages) with a user accessing via a third-party service, that information may be shared with that third-party service.
Service Providers: We engage service providers to perform functions and provide services in multiple countries (e.g., hosting blogs/wikis, analytics tools like Google Analytics, and AI services). Private personal information may be shared with service providers subject to obligations consistent with this Privacy Policy and appropriate confidentiality/security measures. Payment details are shared with payment processors to process payments, prevent/detect fraud, resolve disputes (chargebacks/refunds), and manage card acceptance.
Business Transactions: If you make a payment as part of a commercial transaction through our Services, we may provide the seller, commerce provider, marketplace, or charity with your name, email, shipping address, payment info, and transaction data to facilitate processing, order fulfillment, dispute resolution, and fraud prevention. Please refer to third-party privacy policies for their specific practices.
Law and Harm: Notwithstanding anything to the contrary in this Privacy Policy, we may preserve or disclose your information if reasonably necessary to comply with a law, regulation, legal process, or governmental request; protect any person’s safety; address fraud, security, or technical issues; or protect our rights, users, property, employees, or customers. However, nothing here limits legal defenses or objections you may have against a third party’s (or government’s) request for disclosure.
Business Transfers and Affiliates: In bankruptcy, merger, acquisition, reorganization, or asset sale, your information may be sold or transferred as part of that transaction. This Privacy Policy applies to your transferred data. We may also disclose information to our affiliates to help operate, understand, and improve our services and ad delivery.
Public or Non-Personal Information: We may share/disclose public, aggregated, or non-personal information—such as public user profiles, public messages, followers/following, interaction stats (e.g., link clicks or poll votes), or reports to advertisers regarding unique ad views/clicks after stripping personal details (like name/contact info). Information like your name and username is always public on (the First Party)’s services.

Accessing and Modifying Your Personal Information

If you are a registered user, we provide tools and account settings to access, correct, delete, or modify personal information associated with your account. You can also download certain account data, including your messages.

Keep in mind that search engines and other third parties may retain copies of your public information (such as profile details and public messages).

Right to Know / Request Information

You have the right to know our contact details, the exact reason for data collection, the methods used to collect data, and whether collected data will be shared or sold.

Right to Request Access or Copies

You have the right to access your personal data held by us and obtain a clear, legible copy matching record contents at no cost to you via our approved communication channels.

Right to Request Correction

You have the right to request correction of any collected data if it is incomplete, inaccurate, or outdated.

Right to Request Erasure / Destruction

You have the right to request destruction of collected data. Reasons range from withdrawing consent to data no longer serving its original collection purpose.

Right to Restrict / Limit Processing

You have the right to limit or object to the processing of your personal data by the First Party for special cases and limited durations. While not explicitly codified in the Personal Data Protection Law (PDPL), regulatory authorities have detailed this right in official FAQs.
We are required to ensure you are adequately informed of these rights and to establish dedicated channels for you to exercise them.
If you have any questions, concerns, or complaints regarding compliance with this Privacy Notice and Data Protection Law, or if you wish to exercise your rights or withdraw explicit consent, please contact us without hesitation using the communication methods herein. We will investigate and attempt to resolve complaints/disputes promptly within timelines stipulated by applicable data protection regulations.
For questions or comments regarding processing, privacy practices, or updating provided preferences, contact our Data Protection/Privacy Team at: [email protected]

Disclaimer

This platform/website/software belonging to the First Party (referred to herein as “us,” “we,” “our,” “website,” “platform,” “software,” or “First Party”) is available for your personal use. Access and use are subject to the terms of this Privacy Notice under the laws of the Kingdom of Saudi Arabia. Accessing this platform/website/software constitutes unconditional acceptance of these terms, whether you are a registered user or not.

The organization is not responsible for any losses or expenses incurred by the Second Party resulting from violations committed by the customer (Second Party) or users regarding these agreement terms. Under no circumstances shall the First Party bear legal liability toward the Second Party, any third party, or entity for damages arising from using or inability to use the service. This agreement takes effect from the date of your first use of this platform/software.

Our Global Operations

As described in this Privacy Policy, we may share information with affiliates and third parties, and may be required to disclose information in response to lawful governmental requests (including applicable law enforcement or national security requirements).

Changes to This Policy

We may revise this Privacy Policy from time to time. The most current version governing our use of your information will always be available on (the First Party)’s website under the Privacy/Privacy Policy section. By continuing to access or use the Services after changes become effective, you agree to be bound by the revised policy. The Second Party is required to visit the website periodically to review any privacy policy updates.

Safe Use Policy

By using the First Party’s services/software/applications, the Second Party pledges and agrees NOT to:

Upload or download files containing software, materials, data, or information not owned by or licensed to the customer.
Upload or download files containing viruses, corrupted data, or malicious software, or engage in any activity affecting the integrity, reliability, or availability of site information.
Publish, advertise, promote, or circulate defamatory, illegal, pornographic, obscene, religiously non-compliant, immoral, or unlawful materials/information through the Services.
Use any device, software, or routine to interfere or attempt to interfere with the proper working of the First Party’s services, software, or applications.
Take any action imposing an unreasonable or disproportionately large load on the First Party’s infrastructure.
Commit any act violating the Anti-Cybercrime Law or any other related regulation in the Kingdom of Saudi Arabia.

Intellectual Property Rights

The Second Party acknowledges that all intellectual property rights related to the software—including copyrights, patents, trademarks, and other rights—are the exclusive property of the First Party alone.
The Second Party may not claim ownership rights or make unauthorized modifications to the software.

Definitions / Terminology

Software / Application / Platform / Website / Technology: Refers to the original program and full/partial copies of the software, app, website, or electronic service. It consists of machine-readable instructions, software components, data, audio-visual content (images, text, recordings), and all related licensed materials.
Device / Computer: An electronic device such as a personal computer, mobile phone, tablet, iPad, server, virtual machine, storage device, or similar hardware.