Privacy Policy

We collect personal data that you voluntarily provide to us when you: • Submit a data subject access request • Register for an account on our platform • Contact us for support or inquiries • Subscribe to our newsletter This information may include your name, email address, phone number, national ID (for identity verification), and any other information you choose to provide. We may also automatically collect certain information when you visit our platform, including your IP address, browser type, device information, and browsing patterns through cookies and similar technologies.

We use the personal data we collect for the following purposes: • To process and fulfill your data subject access requests • To verify your identity as required by applicable data protection laws • To communicate with you about your requests and account • To send you administrative information and updates • To improve our platform and user experience • To comply with legal obligations under Saudi PDPL and other applicable regulations • To protect against fraud and unauthorized access

We may share your personal data in the following situations: • With your explicit consent • With service providers who assist us in operating our platform (under strict data protection agreements) • To comply with legal obligations or respond to lawful requests from public authorities • To protect our rights, privacy, safety, or property • In connection with a business transaction such as a merger or acquisition We do not sell your personal data to third parties under any circumstances.

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include: • Encryption of data in transit and at rest • Access controls and authentication mechanisms • Regular security assessments and audits • Employee training on data protection practices • Incident response procedures However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Under the Saudi Personal Data Protection Law (PDPL) and other applicable regulations, you have the following rights: • Right to Access: Request a copy of your personal data • Right to Rectification: Request correction of inaccurate data • Right to Erasure: Request deletion of your personal data • Right to Restriction: Request limitation of data processing • Right to Data Portability: Receive your data in a portable format • Right to Object: Object to certain processing activities To exercise any of these rights, please submit a request through our platform or contact us at pdpl@privaxm.com.

If you have questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Officer at: Email: pdpl@privaxm.com We will respond to your inquiry within 30 days as required by Saudi PDPL.