Privacy Policy and Personal Data Protection

Preamble

AKFEEK Business Services Est. (AKFEEK) is committed to respecting the privacy of its clients and of visitors to its website and to protecting their personal data, in accordance with the Personal Data Protection Law (PDPL) and its Implementing Regulations in force in the Kingdom of Saudi Arabia.

This Policy sets out the nature of the data that AKFEEK may collect, the purposes for which it is used, the manner in which it is handled and protected, the rights of data subjects and the related means of contact.

1. Definitions

• AKFEEK: AKFEEK Business Services Est., in its capacity as the entity responsible for processing the personal data it collects for the purposes of providing its services, depending on the nature of the relationship.
• Personal data: Any data that leads to the specific identification of an individual, or that makes it possible to identify the individual, directly or indirectly.
• Data subject: The natural person to whom the personal data relates.
• Processing: Any operation carried out on personal data, including its collection, storage, use, sharing and destruction.
• Website: The official website of AKFEEK Business Services Est.: www.akfeek.net.

2. Scope of Application of the Policy

This Policy applies to the personal data that AKFEEK collects through its website, service request forms, email or official means of communication, or in the course of providing its services.

It covers data relating to clients, investors, representatives of businesses, authorized persons, and individuals who communicate with AKFEEK or benefit from its services.

3. Data Collection Mechanism

Depending on the nature of the request or service, the data may include the name and contact details, the capacity of the applicant, the details of the business or activity, the data necessary for the requested service, copies of official or professional documents and supporting documents, and invoice and payment data and transfer receipts. Limited technical data, such as the Internet Protocol address and browser information, may be collected when the website is used, depending on the technologies actually enabled.

4. Methods of Data Collection

AKFEEK may obtain data through:

• Contact and service request forms on the website.
• Documents and information provided directly by the client.
• Communication by email, telephone or WhatsApp.
• Contracts, agreements and correspondence related to the services.
• Government authorities or relevant parties, where obtaining the data is permitted by law and necessary for performing the service.

5. Purposes of Data Use

AKFEEK uses personal data for the following purposes:

• Reviewing client requests and determining service requirements.
• Preparing quotes and agreements.
• Performing and following up on the agreed services and transactions.
• Communicating with clients and informing them of developments in their requests.
• Preparing invoices and records relating to dealings.
• Fulfilling legal and contractual obligations.
• Improving the quality of services and the experience of using the website.

The data is not used for other purposes that are incompatible with the purpose for which it was collected, except as permitted by the applicable laws.

6. Legal Basis for Data Processing

Personal data is processed in reliance on the legal basis appropriate to the nature of the processing, including:

• The consent of the data subject, where required.
• The performance of a contract or the taking of steps related to a request by the data subject prior to contracting, in the cases permitted by law.
• The fulfillment of a legal obligation.
• The pursuit of a legitimate interest in accordance with the controls and conditions set out in the Law.

The data subject may withdraw consent whenever the processing is based on it, without prejudice to any processing that relies on another legal basis.

7. Data Sharing and Disclosure

The nature of AKFEEK’s services may require sharing certain data with:

• The competent government and regulatory authorities.
• Professional entities or service providers connected with carrying out the client’s request.
• Technical and administrative service providers engaged by AKFEEK, when needed.

Data sharing is limited to the extent necessary to achieve the specified purpose, and is in accordance with the regulatory requirements and controls.

AKFEEK does not sell personal data to clients or to any other parties.

8. Data Storage and Protection

AKFEEK shall take appropriate organizational and technical measures to protect personal data against unauthorized access or unlawful use, disclosure, loss or alteration.

Access to the data is restricted to authorized persons, and to the extent necessary for the performance of their duties.

Despite appropriate measures being taken, absolute protection cannot be guaranteed for any means of transmitting or storing data electronically.

9. Data Retention and Destruction

AKFEEK retains personal data for the period necessary to achieve the purposes for which it was collected, or for the period required by the relevant legal or contractual obligations.

When the purpose of retaining the data has ended and there is no legal basis for its continued storage, appropriate measures are taken to destroy it or to remove whatever enables its subjects to be identified, in accordance with the applicable controls.

10. Rights of Personal Data Subjects

The data subject enjoys the rights established under the Personal Data Protection Law (PDPL), subject to the legal conditions and exceptions, including:

• The right to be informed of the legal basis for collecting their data and the purpose of processing it.
• The right to access their personal data.
• The right to request a copy of their data in a clear and readable format.
• The right to request the correction, completion or updating of their data.
• The right to request the destruction of their data where the legal conditions for this are met.
• The right to withdraw consent to processing, whenever consent is the legal basis for it.

A request to exercise rights may be submitted through the means of contact set out below.

Requests to exercise rights are processed without delay, and within a period not exceeding 30 days from receipt of the request; this period may be extended for an additional period not exceeding 30 days in the cases permitted by the Implementing Regulations, with the data subject being notified in advance of the reasons for the extension.

Verification of the identity of the applicant may be required before the request is responded to.

11. Cookies

The website may use cookies or similar technologies to support the functions of the website and improve the user experience, depending on the tools enabled.

The user can control some cookies through the browser settings, and disabling some of them may affect the functions of the website.

12. External Links and Websites

AKFEEK’s website may contain links to external websites or platforms, including government websites.

Data that the user provides directly to those websites is subject to the privacy policies adopted by them, and it is advisable to review those policies before providing any personal information.

13. Transfer of Data Outside the Kingdom

If the provision of services or the operation of technical systems requires personal data to be transferred or disclosed outside the Kingdom of Saudi Arabia, AKFEEK shall observe the regulatory requirements and controls governing this.

14. Amendments to the Privacy Policy

AKFEEK reserves the right to update this Policy when needed, in line with changes in the services or the regulatory requirements.

The updated version is published on the website, with the date of the last amendment indicated.

15. Contact, Inquiries and Complaints

To inquire about the Privacy Policy, submit a request relating to personal data or exercise statutory rights, you may contact:

• AKFEEK Business Services Est.
• Location: Riyadh, Saudi Arabia
• Email: info@akfeek.net
• Contact number: 0500026212
• Website: www.akfeek.net