1 Introduction

Etisalna is committed to protecting the privacy and security of personal data, in accordance with the Saudi Personal Data Protection Law (PDPL) and regulations issued by the Saudi Data and Artificial Intelligence Authority (SDAIA).

This policy explains how we collect, process, use, store, disclose, and protect personal data for users of our services, clients, and visitors to our website.

This policy applies to all current, former, and prospective users of Etisalna's services.

By using our services, you acknowledge that you have read and understood this policy.

2 Data We Collect

We collect only the minimum personal data necessary to provide our services, in accordance with the "data minimization" principle.

2.1 Personal Data

  • Full name
  • Mobile number
  • Email address
  • Business data (Commercial Registration, Tax Number, Address)

2.2 Identity Verification Data

  • National ID, Passport, or Driver's License (used for verification and fraud prevention)

2.3 Financial Data

  • Payment card details
  • Bank account information

2.4 Technical and Usage Data

  • IP address
  • Browser type and version
  • Device information
  • Operating system
  • Website usage and analytics data

We may also collect anonymous statistical data through surveys to improve our services.

We do not collect sensitive personal data unless required by law or necessary to provide the service.

3 Legal Basis for Data Processing

We process personal data based on one or more of the following bases:

  • User consent
  • Performance of contractual obligations
  • Compliance with legal and regulatory requirements
  • Legitimate interests (such as fraud prevention, service improvement, and security enhancement)

Users have the right to withdraw their consent at any time, subject to legal or contractual obligations.

4 Data Processing Purposes

We use personal data for the following purposes:

  • Creating and managing user accounts
  • Processing subscriptions and payments
  • Providing technical support and customer service
  • Improving system performance and user experience
  • Sending administrative notifications and updates
  • Marketing communications (with opt-out option)
  • Fraud prevention and security monitoring
  • Compliance with legal requirements
  • Protecting legal rights and pursuing claims

5 Data Sharing and Disclosure

Etisalna does not sell or rent personal data.

Data may be shared with trusted third parties only when necessary, such as:

  • Cloud hosting service providers (e.g., AWS, GCP)
  • Payment service providers
  • Identity verification services
  • Technical infrastructure providers

We ensure that:

  • Data is shared only for specific and legitimate purposes
  • Third parties are bound by data confidentiality
  • Data Processing Agreements (DPA) are signed
  • All parties comply with applicable laws and regulations

6 Data Security

We implement a range of technical and organizational measures to protect personal data, including:

  • Encryption
  • Access control systems
  • Monitoring and threat detection systems
  • Secure cloud infrastructure

However, no system can guarantee absolute security. Users are responsible for maintaining the confidentiality of their login credentials.

7 Data Retention

We retain personal data only for as long as necessary to:

  • Fulfill the purposes outlined in this policy
  • Comply with legal requirements
  • Resolve disputes and enforce agreements

When data is no longer needed, it is:

  • Securely deleted
  • Anonymized
  • Or securely archived until deletion

8 Data Transfer Outside the Kingdom

Data may be transferred or stored outside the Kingdom of Saudi Arabia using secure cloud infrastructure, only in the following cases:

  • When permitted under the Personal Data Protection Law (PDPL)
  • With adequate safeguards in place
  • Or after obtaining user consent when required

9 User Rights

Under Saudi Personal Data Protection Law, users have the right to:

  • Know the purposes of data collection
  • Access their personal data
  • Request data correction
  • Request data deletion
  • Request processing restriction
  • Object to processing (in specific cases)
  • Request data portability
  • Withdraw consent
  • File a complaint with the competent authority

Requests can be submitted through our support channels.

10 Cookies

We use cookies and similar technologies to:

  • Improve website performance
  • Analyze usage behavior

Users can disable cookies in their browser settings, though some functionality may be affected.

11 Protection of Minors

Etisalna does not collect or process data of individuals under 18 years of age.

12 Privacy Policy Updates

We may update this policy from time to time. Any updates will be published with a new effective date, and continued use of our services constitutes acceptance of the updates.

13 Contact Information

For privacy-related inquiries:

  • Email: info@etisalna.sa
  • Website: https://etisalna.sa
  • Customer Service: Available 24/7

14 Governing Law and Dispute Resolution

This policy is governed by and interpreted in accordance with the laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL).

In the event of any dispute arising out of or relating to this policy, the parties shall first attempt to resolve the dispute amicably through good faith negotiations.

If the dispute is not resolved within thirty (30) days of written notice, it shall be referred to the competent courts in the Kingdom of Saudi Arabia, which shall have exclusive jurisdiction.