Al Khozama Investment Co.
Version: 1.0
Classification: Public
- About us
Al Khozama Investment Co. ("Al Khozama", "we", "our", or "us") is an investment and
business services organization operating within the Kingdom of Saudi Arabia. Through its
digital platforms, including its website and other online communication channels, the
organization engages with customers, business clients, and vendors for business
communications, service enquiries, and relationship management. We are committed to
protecting personal data and ensuring that such data is collected, processed, stored, and
protected in accordance with the Personal Data Protection Law (PDPL) of the Kingdom of
Saudi Arabia and its implementing regulations.
- Personal Data We Collect
When individuals interact with our website or digital communication channels, Al Khozama
Investment Co. collects limited personal data necessary to respond to enquiries and
manage communications. The personal data collected is categorized as follows:
Mandatory Data (Directly Collected)
We collect the following personal data directly from individuals: Name, Email Address, and
Phone Number. Providing this data is mandatory for us to respond to your enquiries, create
an account, or provide the requested services. Failure to provide this mandatory
information may result in our inability to fulfill your request or provide the service.
Indirect Data (Technical & Usage)
In addition to the personal data provided directly, certain technical information related to
website usage may be collected automatically through cookies and analytics technologies.
This includes IP addresses, browser type, device information, and usage patterns to support
website performance monitoring and service improvement.
- Methods of Collecting Personal Data
Personal data is collected through two primary methods:
Direct Collection: This occurs when individuals voluntarily provide their personal data
through online forms, account registration processes, support enquiry submissions, or
when subscribing to communications from the organization. In such cases, individuals
knowingly provide their contact details for the purpose of communicating with Al Khozama
Investment Co.
Indirect Collection: This occurs through technical tools such as cookies, website analytics
services (specifically Google Analytics), or similar tracking technologies. These technologies
collect information about website interactions and usage patterns to help the organization
understand how visitors use its website and improve the quality of services offered through
digital platforms.
Purpose of Collecting Personal Data
The personal data collected through our website and digital platforms is used strictly for
legitimate and defined purposes related to our business operations. These specific
purposes are:
- Support Enquiries: To respond to support requests, questions, and service
enquiries submitted by customers, clients, or vendors.
- Marketing Communications: To send promotional materials and updates where
individuals have provided explicit consent.
- Account Creation: To facilitate the creation and management of user accounts on
our digital platforms.
- Analytics: To monitor website performance and analyze usage trends.
- Service Improvement: To enhance the functionality, security, and overall user
experience of our digital services.
In all circumstances, Al Khozama Investment Co. ensures that only the minimum amount of
personal data necessary to achieve the intended purpose is collected and processed,
adhering to the data minimization principle.- Support Enquiries: To respond to support requests, questions, and service
- Legal Basis for Processing Personal Data
Al Khozama Investment Co. processes personal data in accordance with the lawful bases
permitted under the Saudi Personal Data Protection Law. Depending on the nature of the
interaction, personal data may be processed based on the consent of the individual,
particularly where personal data is used for marketing communications or optional
services. Personal data may also be processed where it is necessary to fulfil contractual or
service-related obligations, such as responding to enquiries or managing communications
with clients or vendors.
In certain cases, personal data processing may also be based on the legitimate interests of
the organization, such as maintaining website functionality, improving services, and
ensuring the effective operation of digital platforms, provided that such interests do not
override the rights and freedoms of individuals. Personal data may also be processed where
required to comply with applicable legal or regulatory obligations.
Where processing relies on consent, individuals may withdraw their consent at any time
without affecting processing activities carried out prior to the withdrawal.
- Use of Personal Data
Personal data collected by Al Khozama Investment Co. is used solely for the purposes for
which it was collected. This includes managing communications with customers, clients, and
vendors, responding to service or support enquiries, maintaining digital accounts where
applicable, and providing updates related to services or business communications. Personal
data is also used to send marketing communications where individuals have agreed to
receive such information.
Technical data collected through cookies and analytics tools is used to monitor website
usage, identify areas for improvement, enhance website functionality, and support the
development of better digital services. All processing activities are carried out in accordance
with applicable legal and regulatory requirements.
- Marketing Communications
We will only send marketing communications if you have provided your explicit consent.
Marketing communications are entirely optional, and you are not required to consent to
marketing to use our services. You have the right to withdraw your consent (opt-out) at any
time by clicking the "unsubscribe" link included in every marketing email or by contacting
us directly.
- Sharing of Personal Data
Al Khozama Investment Co. may share personal data with carefully selected third-party
service providers that support the organization's operational activities. Specifically, we
share data with providers of Customer Relationship Management (CRM) systems and Email
Marketing tools. These third parties process personal data strictly on behalf of the
organization and only for the purposes specified in this Privacy Policy.
All third-party service providers are located within the Kingdom of Saudi Arabia and are
required to implement appropriate security and confidentiality measures. They must
process personal data in compliance with applicable data protection regulations.
- Cross-Border Transfer of Personal Data
Al Khozama Investment Co. does not transfer or disclose personal data to any party outside
the Kingdom of Saudi Arabia. All personal data is stored, processed, and managed
exclusively within the Kingdom's geographical borders.
- Cookies and Tracking Technologies
The website of Al Khozama Investment Co. uses cookies and similar technologies,
specifically Google Analytics, to support website functionality and improve the user
experience. These technologies collect information about how visitors interact with the
website, allowing the organization to analyze website performance and improve digital
services. Users visiting the website are presented with a cookie consent banner that allows
them to accept all cookies, reject non-essential cookies, or manage their cookie preferences
according to their preferences. Users may change their cookie settings at any time through
the details specified in the Cookie Policy.
- Personal Data Retention
Personal data collected by Al Khozama Investment Co. is stored securely within systems
operated by the organization or its trusted service providers. The organization ensures that
personal data is stored in systems located within the Kingdom of Saudi Arabia and protected
through appropriate administrative, technical, and organizational security measures.
Personal data will only be retained for as long as necessary to achieve the purpose for which
it was collected or to comply with legal and regulatory requirements. Once personal data is
no longer required, the organization will securely dispose of such data using appropriate
methods designed to prevent unauthorized access, recovery, or misuse. These methods
may include secure deletion from digital systems, removal from databases, or destruction
of physical records where applicable.
- Data Subject rights
Under the Saudi Personal Data Protection Law, individuals have a number of rights
regarding the processing of their personal data. Individuals have the right to be informed
about how their personal data is collected, processed, stored, and disclosed. They also have
the right to request access to their personal data held by the organization and to obtain
such information in a clear and understandable format. Individuals have the right to request
correction of inaccurate or incomplete personal data and to request the deletion of personal
data where it is no longer necessary for the purpose for which it was collected. In addition,
individuals have the right to withdraw their consent for personal data processing where
consent serves as the legal basis for processing.
Requests relating to any of these rights may be submitted by email to [INSERT:
privacy@alkhozama.com], through the website contact form at [INSERT: URL], by telephone
at [INSERT: phone number], or in writing to the Procurement Department at [INSERT: full
postal address]. All valid requests will be responded to within a month’s time from the
receipt.
- Complaints and Objections
Individuals who believe their personal data has been processed in a manner inconsistent
with the PDPL, or who wish to object to a specific processing activity, may submit a
complaint to the Data Protection Officer using [INSERT: DPO@alkhozama.com]. The
organization will acknowledge the complaint and provide a substantive written response
within 30 calendar days. If the individual is not satisfied with the outcome, or if the
organization fails to respond within the stated period, the complaint may be escalated to
the Saudi Data and AI Authority (SDAIA) at sdaia.gov.sa or through the National Data
Governance Platform at dgp.sdaia.gov.sa, Riyadh, Kingdom of Saudi Arabia.
- Availability of the Privacy Policy
This Privacy Policy is made available to individuals prior to or at the time of collecting
personal data. The policy is accessible through the organization’s website and may also be
made available through other digital channels where personal data collection occurs. Al
Khozama Investment Co. ensures that the policy is presented in clear and understandable
language to help individuals understand how their personal data is handled.
- Updates to This Privacy Policy
Al Khozama Investment Co. may update this Privacy Policy periodically to reflect changes in
legal requirements, organizational practices, or digital services. Any updates to the policy
will be published on the organization’s website together with the date of the most recent
revision. Individuals are encouraged to review this Privacy Policy periodically to stay
informed about how their personal data is protected.
Last updated date: [INSERT DATE]