Latest updated: 14-09-2024

Privacy Policy of Mojarib

Mojarib, owned by Luma for Information Technology (registered under CR No: 1010841501 with the Ministry of Commerce, Kingdom of Saudi Arabia), is committed to protecting the privacy of our users. This policy outlines how we collect, use, store, and disclose personal data in compliance with the Saudi Arabian Personal Data Protection Law (PDPL). By using our platform, you consent to the data practices outlined in this policy.

1. Information We Collect

We collect the following types of personal data:

1.1 Information Provided by Users

  • Personal Information: Name, email address, phone number, and company details when you register or contact us.
  • Survey Responses: Data provided by respondents participating in surveys, including opinions, preferences, and feedback.
  • Payment Information: Billing details such as credit card information and transaction records when you purchase a subscription.

1.2 Automatically Collected Information

  • Usage Data: Information about how you access and use the platform, including IP address, browser type, device information, and operating system.
  • Cookies and Tracking Technologies: We use cookies to enhance user experience, analyze website traffic, and remember user preferences. You can manage cookies through your browser settings.

2. Purpose of Data Collection

We process personal data for the following purposes:

  • Service Provision: To provide access to and use of the Mojarib platform for conducting surveys, collecting responses, and generating reports.
  • Communication: To send notifications about platform updates, customer support, promotional offers, and system alerts.
  • Billing and Payments: To process subscription payments and manage billing.
  • Analytics: To analyze usage trends and improve the platform's features and performance.
  • Legal Compliance: To comply with applicable laws and protect the platform from legal claims and security threats.

3. Legal Basis for Processing Personal Data

We rely on the following legal bases for processing personal data:

  • User Consent: For activities such as sending marketing communications or collecting sensitive personal data, we will seek your explicit consent. Users will be informed of the specific purposes for processing, and they can withdraw their consent at any time.
  • Performance of a Contract: To fulfill our obligations under the Terms of Use, such as processing your survey data and managing your account.
  • Legal Obligations: To comply with regulatory requirements under Saudi Arabian law.
  • Legitimate Interest: To improve our services, prevent fraud, and maintain the security of our platform.

4. Data Subject Rights

Under the PDPL, you have the following rights:

  • Right to Access: You can request access to your personal data we hold by contacting us at contact information provided at the end of this policy. We will respond within 30 days.
  • Right to Correction: You can request the correction or update of inaccurate or outdated personal data. We will process such requests promptly.
  • Right to Deletion: You may request the deletion of personal data that is no longer necessary for the purposes for which it was collected, subject to legal obligations.
  • Right to Object or Withdraw Consent: You can withdraw consent for data processing at any time by contacting us. The withdrawal will not affect the legality of processing based on prior consent.
  • Right to Data Portability: You can request your personal data in a commonly used, machine-readable format for transmission to another service provider.
  • Right to Restrict Processing: You may request the restriction of personal data processing in certain circumstances, such as while contesting the accuracy of data.

To exercise these rights, please contact us at contact information provided at the end of this policy. We will verify your identity before processing your request.

5. Sharing of Personal Data

We do not share your personal data with third parties, except in the following cases:

  • Service Providers: We may share data with trusted third-party service providers to assist us in hosting the platform, processing payments, or providing customer support. These service providers are contractually obligated to comply with PDPL and protect your data.
  • Legal Obligations: We may disclose your personal data if required to do so by law or in response to valid legal requests by public authorities.
  • Business Transfers: In the event of a merger, acquisition, or asset sale, your personal data may be transferred. We will notify you of such events and provide options regarding your data.

6. Cross-Border Data Transfers

We transfer personal data outside Saudi Arabia only when necessary and in full compliance with the Personal Data Protection Law (PDPL). Cross-border transfers of personal data may occur under the following circumstances:

  • Adequate Level of Protection: Personal data will only be transferred to countries that provide an adequate level of protection equivalent to the PDPL.

  • Exceptions: If the recipient country does not offer equivalent protection, we may still transfer personal data if one of the following conditions is met:

    1. The transfer is necessary for the performance of a contract between Mojarib and the data subject or for the implementation of pre-contractual measures at the request of the data subject.
    2. The data subject has explicitly consented to the transfer after being informed of any potential risks.
    3. The transfer is necessary to protect public interest or for national security purposes.
    4. The transfer is required for the establishment, exercise, or defense of legal claims.
  • Regulatory Approvals: Where required by law, we will seek approval from the Saudi Data & Artificial Intelligence Authority (SDAIA) or other relevant authorities before transferring personal data internationally.

  • Safeguards: When personal data is transferred outside Saudi Arabia, we ensure that appropriate safeguards are in place, such as:

    • Data Protection Agreements: Binding corporate rules or contractual clauses that ensure the recipient complies with PDPL standards.
    • Technical Safeguards: Encryption and other technical measures to protect the data during transfer.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy:

  • Survey Data: Survey responses are stored for the duration of the project or contract and may be deleted after Six months unless otherwise requested.
  • Account Information: Personal data related to user accounts will be stored as long as the account remains active. Once an account is closed, personal data will be deleted unless required by law.
  • Payment Data: Financial information is retained only as long as necessary to complete transactions and meet legal obligations.

8. Security of Personal Data

We implement appropriate technical, organizational, and administrative security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our security protocols include:

  • Encryption: All sensitive data, including payment information, is encrypted in transit and at rest.
  • Access Controls: We restrict access to personal data to authorized personnel who need it for specific purposes.
  • Incident Response: In the event of a security breach that affects your personal data, we will notify you and relevant authorities within 72 hours, as required by law.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

  • Enhance User Experience: Remember user preferences and settings.
  • Analytics: Track usage patterns and improve platform performance.

You can manage your cookie preferences through your browser settings. However, disabling cookies may limit your ability to use certain features of the platform.

10. Children's Privacy

The Mojarib platform is not intended for use by children under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without verification of parental consent, we will take steps to delete that data.

11. Changes to This Policy

We may update this Data Privacy Policy from time to time. Any significant changes will be communicated to you through email or a notice on our platform. By continuing to use our services after such changes, you agree to be bound by the updated policy.

12. Contact Us

If you have any questions or concerns about this Data Privacy Policy, or if you wish to exercise your rights under the PDPL, please contact us at:

  • Email: support@mojarib.io
  • Phone: +966583570313
  • Mail: Riyadh, Arabie, 13315, Kingdom of Saudi Arabia