Privacy Policy

Last Updated: March 8, 2025

1. Introduction

Welcome to the Digital and Social Innovation Center ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy in accordance with the Saudi Personal Data Protection Law (PDPL). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

We collect the following categories of personal information:

Personal Identifiers: Name, email address, phone number, date of birth, gender
Location Information: Region, geographic location for in-person events
Profile Information: Nationality, organization, interests
Event Participation Data: Event registrations, attendance, participation history
Payment Information: For paid events, we collect bank name and IBAN (for verification purposes only)
Device Information: IP address, device type, operating system, browser type

3. How We Collect Information

We collect information through:

Direct interactions when you create an account or register for events
Automated technologies when you use our platform
Third parties such as payment processors (with your consent)

4. Purpose of Data Collection

We collect and process your personal data for the following purposes:

To create and manage your account
To process event registrations and manage event participation
To provide personalized event recommendations based on your interests
To communicate with you about events, updates, and services
To improve our platform and services
To ensure the security of our platform
To comply with legal obligations

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

Consent: Where you have given clear consent for us to process your personal data for a specific purpose
Contract Performance: Processing necessary for the performance of our contract with you
Legitimate Interests: Processing necessary for our legitimate interests, provided these interests do not override your fundamental rights and freedoms
Legal Obligation: Processing necessary to comply with our legal obligations

6. Data Sharing and Disclosure

We may share your personal information with:

Service Providers: Third-party vendors who perform services on our behalf (e.g., payment processing, data analysis)
Event Organizers: For events you register for, limited to information necessary for event management
Legal Authorities: When required by law, court order, or governmental regulation
Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. After this period, your data will be deleted or anonymized.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

Encryption of sensitive data
Regular security assessments
Access controls and authentication procedures
Staff training on data protection

9. Your Rights

Under the PDPL, you have the following rights regarding your personal data:

Right to Access: You can request access to your personal data
Right to Rectification: You can request correction of inaccurate data
Right to Erasure: You can request deletion of your data under certain circumstances
Right to Restrict Processing: You can request restriction of processing under certain circumstances
Right to Data Portability: You can request transfer of your data to another service provider
Right to Object: You can object to processing based on legitimate interests
Right to Withdraw Consent: You can withdraw consent at any time

To exercise these rights, please contact us using the details provided below.

10. International Data Transfers

We may transfer your personal data to countries outside Saudi Arabia. When we do, we ensure appropriate safeguards are in place to protect your data and comply with the PDPL requirements for cross-border transfers.

11. Children's Privacy

Our platform is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@digitalinnovation.sa

Phone: +966 XX XXX XXXX

Address: Digital and Social Innovation Center, Alkhobar, Saudi Arabia