Privacy Policy

Privacy Policy

Last Updated: 29/01/2025

This Privacy Policy pertains to:

CODE for Communications and Information Technology, a Single Person Limited Liability Company registered under Commercial Registration No. (1010739970) and headquartered in Prince Sultan Street, Al-Sulaymaniyah District, Riyadh, Kingdom of Saudi Arabia.

Definitions

1. “CODEIT”: All programs, websites, systems, products, services, applications, and trademarks of CODE for Communications and Information Technology.

2. “CODE”: CODE for Communications and Information Technology.

3. “User”: Anyone who accesses, benefits from, or deals with “CODEIT.”

4. “Data”: Any information—regardless of its source or form—that can lead to the identification of an individual specifically, or makes it possible to identify them directly or indirectly. This includes, for example, name, personal identification number, addresses, contact numbers, license numbers, records, personal property records, bank account numbers, credit card numbers, still or moving images of the individual, and other personal data.

5. “Third Party”: Any party outside the contractual relationship between CODE and the User, whether a member of the User’s group, a service provider, or any other natural/legal person.

6. “Regulations”: The applicable and in-force regulations in the Kingdom of Saudi Arabia.

Introduction

This Policy constitutes a legally binding agreement between the User and CODE. The User’s acceptance of this Policy is signified by their access to or use of “CODEIT,” and such acceptance includes all policies and privacy practices of CODE as well as the User’s consent to the processing of Data in accordance with the provisions herein.

CODE is committed to safeguarding the privacy and security of personal data collected and processed when a User accesses or uses “CODEIT.” Since CODE acts as the controller of personal data collected from Users, this Privacy Policy sets out how the Data is collected, the purpose of its collection and processing, the methods of protection, and disclosure of personal data in line with the Personal Data Protection Law in the Kingdom of Saudi Arabia.

Scope and Application

This Privacy Policy applies to the processing of personal data by CODE, including the data of the User and any Third Party serving the User. It governs the collection, storage, use, and disclosure of personal data obtained through “CODEIT.”

Data Collection

CODE collects personal information from the User and registered suppliers as necessary to operate “CODEIT” and to comply with regulatory standards. Such information includes, but is not limited to:

• Account Data, such as personal or business name, personal or corporate ID number, addresses, contact numbers, license and record numbers, bank account numbers, credit card numbers, and other personal data.

• Technical Data, including information required to use “CODEIT,” such as the User’s IP address, usage data, details about the device used, operating system, browser, location, and other technical data.

• Images of the Store and Profile Information.

• Financial Data, including data collected for payment transactions and related purposes.

• Screen Recording, Screenshots, and Other Video Recordings (only when requested by CODE Support).

• Contact Data, including information exchanged when communicating with CODE, such as correspondences, direct conversations, emails, or any other form of communication.

CODE does not collect any data about the User’s device or activities outside the system, nor does it use any activity information for any purpose other than operating the system and sending limited marketing information.

Methods of Collecting Personal Data

Personal Data is collected and processed in several ways, including:

1. Services: When the User visits or registers or subscribes to any of the services provided by CODE.

2. Direct Communication: When contacting CODE via customer service channels, including (but not limited to) email, telephone calls, instant messages, the website, social media accounts, or by submitting forms.

3. Surveys: When the User participates in surveys conducted by CODE, information such as opinions and preferences may be collected.

4. Cookies: A small text file stored on the User’s computer or mobile device upon visiting any “CODEIT” service, used to gather and store information about the User’s interaction with any “CODEIT” services. Cookies help improve the User’s experience in various ways, such as remembering User preferences, tracking activities, improving website performance, and managing advertisements.

The User can control cookie settings through their browser settings, including rejecting or deleting cookies.

Purpose of Data Processing

CODE (the “First Party”) collects and processes personal data for various purposes, including but not limited to:

• Enabling the User to utilize “CODEIT.”

• Developing and improving services.

• Supporting CODE’s operations and systems.

• Verifying the User’s identity.

• Understanding customers’ needs.

• Marketing.

• Responding to inquiries and complaints.

• Fraud prevention.

• Fulfilling contractual requirements.

• Meeting legal and regulatory requirements.

• Ensuring compliance with the regulatory requirements of the Zakat, Tax and Customs Authority in Saudi Arabia.

• Providing support and assistance to the User in relation to “CODEIT.”

• Enhancing the performance and features of “CODEIT” and enabling the User to benefit from offers based on their use of “CODEIT.”

Legal Basis for Collecting and Processing Personal Data

The processing of personal data by CODE is based on the legal grounds set out in the Personal Data Protection Law, including:

1. Consent: Obtaining the User’s consent, including their acceptance of this Policy, for processing their personal data for the above-mentioned purposes, such as receiving marketing information, surveys, and research studies. The User may withdraw their consent at any time, except in cases where there is a legal basis allowing CODE to continue processing the data. By purchasing, installing, and/or using “CODEIT,” the User agrees to this Policy and grants CODE the right to process their Data to enable their use of “CODEIT” for their business.

2. Legitimate Interests: Processing necessary to satisfy CODE’s legitimate interests, such as improving the system, products, and related services.

3. Legal Compliance: Processing required to comply with legal and regulatory obligations, including, but not limited to, provisions of the Commercial Books Law, the VAT Law and its regulations, and the Personal Data Protection Law and its implementing regulations.

Data Subjects’ Rights

The User has specific rights concerning their personal data, as guided by the Personal Data Protection Law, which CODE follows. These rights include:

• The right to know and be informed about how personal data is used.

• The right to access personal data and request a copy thereof, where technically feasible.

• The right to correct, update, or complete any inaccurate or incomplete personal data.

• The right to request the deletion of their personal data under certain circumstances (see Data Retention Policy).

• The right to withdraw consent to the processing of their personal data (by closing or suspending the account).

To exercise any of these rights, the User (the “Second Party”) must contact CODE (the “First Party”) Support via email at support@codeit.sa. CODE undertakes to fulfill the request within thirty (30) days from the date of submission. If unforeseen or unusual additional effort is required, CODE reserves the right to extend this period by no more than an additional thirty (30) days. Please note that some or all of these rights may be subject to specific exceptions and exemptions specified by applicable laws, and each request will be evaluated on a case-by-case basis.

Protection and Disclosure of Personal Data

CODE affirms that protecting the confidentiality and security of the client’s personal data is a top priority. CODE takes various measures to ensure data is protected from unauthorized access or disclosure, except where required by law or in cases necessary to provide services, technical support, or for analytical purposes. CODE employs reasonable technical, organizational, and administrative measures to safeguard data, including name, age, gender, and contact details. However, please note that no method of data transmission or storage over the internet can be guaranteed to be completely secure.

CODE undertakes not to disclose or share the User’s personal data for commercial purposes with any Third Party unless stated in this Policy or as permitted by Article 15 of the Personal Data Protection Law. CODE may share the User’s information with a Third Party in the following cases:

1. Where the User’s consent has been obtained.

2. Sharing with affiliated companies and companies within the CODE group.

3. Sharing with service providers who provide services on behalf of CODE.

4. Sharing with external partners and service providers who provide services to CODE.

5. Sharing with banks, financial institutions, and payment technology/service providers.

6. Sharing with another party in the event of corporate activities such as acquisition, merger, or restructuring (including due diligence and negotiation), sale of most of CODE’s shares and/or assets, or financial transactions related to the purchase, liquidation, or dissolution of CODE’s business in whole or in part.

Data Retention

Personal information is retained as long as necessary to fulfill the purposes set out in this Policy or as required by law. Upon the User’s termination of the system’s use, the personal information is securely deleted or anonymized from “CODEIT” and from any Third Party processing data on CODE’s behalf, after the legally designated retention period has ended, unless there is a legal obligation to retain it for a longer period or if it is closely connected to a pending case before a judicial authority.

It should be noted that a request by the User to delete or amend personal data may affect the User’s ability to use certain features or services of “CODEIT” or may result in the termination of those services. Additionally, please note that CODE may not be able to retrieve such data once it is deleted.

Updates to the Privacy Policy

CODE reserves the right to update or modify this Privacy Policy at any time to reflect changes in data processing practices or legal requirements. The User is advised to review this Policy periodically for any updates.

Governing Language

This Policy is prepared in both Arabic and English. The English version is a translation of the Arabic version. In the event of any discrepancy between the two, the Arabic version shall prevail.

Contact Information

• Phone: 8003069999

• Email: support@codeit.sa

Effective Date

This Privacy Policy is effective as of 21 January 2024 and applies to all personal data collected or processed by CODE in connection with the system.

By using “CODEIT,” provided by CODE for Communications and Information Technology, Users acknowledge that they have read, understood, and agree to this Privacy Policy.