MODREK ("we", "our", or "us") is committed to safeguarding the privacy and security of our users’ personal data in compliance with the Saudi Personal Data Protection Law (PDPL) issued by the Saudi Data & Artificial Intelligence Authority (SDAIA). This Privacy Policy describes how we collect, use, store, and protect your personal data when you access or use our website and services (collectively, the "Services"). By accessing or using our Services, you agree to this Privacy Policy.
1. Personal Data We Collect
Under the PDPL, we are required to specify the types of personal data we collect and the purposes for which we process it. Personal data is defined as any information that directly or indirectly identifies you. The types of personal data we collect include:
1.1 Account and Registration Information
- Identity Data: Your name, email address, contact information, and password for account creation and management.
- Payment Data: If you subscribe to a paid package, we collect payment details such as credit card number and billing information. Payment data is securely processed by our PCI-compliant payment providers.
1.2 Technical and Usage Data
- Device Information: Information about the device you use, including IP address, browser type, operating system, and device identifiers.
- Cookies and Tracking Data: We use cookies and similar tracking technologies to collect information about your usage of the Services. See Section 7 for details on our Cookie Policy.
1.3 Communications and Support Data
- Customer Support Data: Any personal information you provide during interactions with our customer support team, including inquiries or issue resolutions.
- Marketing Preferences: Information about your preferences for receiving marketing communications and notifications.
2. Purposes of Data Processing and Legal Basis
We process personal data strictly in accordance with the PDPL, based on principles of transparency, data minimization, and purpose limitation. The purposes for processing your personal data include:
- Service Provision: To create and maintain your account, provide you with requested services, and personalize your experience.
- Payment and Billing: To process subscription fees, manage billing details, and issue invoices securely.
- Communication: To send essential updates regarding your account, policies, and address user-related issues.
- Marketing and Personalization: To send you relevant offers, content, and advertisements based on your preferences, if you have opted in to receive them.
- Legal Compliance and Security: To comply with Saudi regulations, monitor fraudulent activity, and maintain the integrity and security of our Services.
3. Data Sharing and Disclosure
We only share your personal data in strict accordance with the PDPL and for the purposes outlined in this Privacy Policy.
3.1 Third-Party Service Providers
We may engage third-party service providers to perform certain services on our behalf, such as payment processing, analytics, customer support, and marketing. These providers are bound by contractual agreements to protect your personal data and to use it only as directed by MODREK.
3.2 Legal and Regulatory Compliance
We may disclose your personal data as required by law, including in response to subpoenas, court orders, or active legal processes, and to fulfill any obligations under Saudi law, including those enforced by SDAIA.
3.3 Business Transfers
If MODREK undergoes a merger, acquisition, or sale, your personal data may be transferred to the successor entity under the condition that they uphold this Privacy Policy.
3.4 Protection of Rights and Security
We may disclose personal data to enforce our Terms of Service, protect the rights, privacy, and safety of MODREK and its users, and detect and prevent fraud or security incidents.
4. Data Retention
In compliance with the PDPL, we retain your personal data only for as long as it is necessary to fulfill the purposes for which it was collected or to comply with legal and regulatory requirements.
- Account Data: Retained as long as your account is active or until you request deletion. Some data may be retained for compliance with Saudi laws.
- Transaction Records: Retained as necessary to meet financial reporting and auditing obligations under Saudi regulations.
- Analytical Data: Usage data may be retained in anonymized or aggregated form for analytics purposes.
Upon the end of the retention period, we will securely delete or anonymize your data, as required by PDPL.
5. Data Security
MODREK employs strict security measures to protect your personal data, in accordance with the PDPL and SDAIA guidelines. This includes encryption, access controls, and regular security assessments. However, please note that no system is completely secure, and MODREK cannot guarantee absolute data security. If you suspect any unauthorized access to your account, please notify us immediately.
6. Your Rights Under the PDPL
As a data subject under Saudi law, you have specific rights regarding your personal data. We are committed to facilitating these rights and offer mechanisms for exercising them.
- Right of Access: You may request access to your personal data that we hold, including information on how we process it.
- Right to Rectification: You have the right to request corrections if your personal data is inaccurate or incomplete.
- Right to Deletion: You may request deletion of your personal data, subject to certain exceptions as provided by Saudi law.
- Right to Restriction: You may request restriction of processing in certain circumstances.
- Right to Object: You may object to our processing of your personal data in specific situations.
- Right to Data Portability: Where applicable, you have the right to request a copy of your personal data in a structured, commonly used, and machine-readable format.
To exercise any of these rights, please contact us at support@modrek.com. We may request verification of your identity before processing your request, in accordance with the PDPL.
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your user experience, remember your preferences, and gather usage data. This data is collected with your consent and is used only for purposes compatible with the PDPL.
Types of Cookies We Use:
- Essential Cookies: Required for basic functionality and secure access to our Services.
- Performance Cookies: Help us understand how you use the Services, enabling us to improve our website performance.
- Advertising Cookies: Used to provide personalized advertising and content.
You can manage your cookie preferences through your browser settings. Please note that disabling cookies may impact your experience on our Site.
8. Data Transfers and Storage
MODREK primarily stores data within Saudi Arabia. However, we may transfer data to certain third parties outside of Saudi Arabia as permitted under the PDPL, provided that adequate safeguards are in place to protect your data. These safeguards ensure that any transfers comply with Saudi data protection standards and SDAIA guidelines.
9. Children’s Privacy
In compliance with PDPL, our Services are not directed toward children under the age of 18. We do not knowingly collect personal data from children. If we learn that a child under 18 has provided personal data to us, we will promptly delete such information. Parents or guardians may contact us to request deletion of any information inadvertently collected from children.
10. Modifications to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or to comply with legal and regulatory obligations under PDPL. We will notify you of significant changes by posting an update notice on our Site or through email. We encourage you to review this Privacy Policy regularly.
11. Contact Information
If you have any questions or concerns regarding this Privacy Policy or wish to exercise your rights under the PDPL, please visit our Contact Us page and fill out the form. Our team will get back to you as soon as possible.