Jazalla Privacy Statement
Jazalla Commercial Services Company ("Jazalla", "we", "us" or "our") is committed to protecting the privacy and security of Personal Data and confidential business information processed through the Jazalla website, applications, marketplace, ERP services, and related digital services (collectively, the "Platform").
This Privacy Statement explains how Jazalla collects, uses, stores, protects, discloses, transfers, retains and otherwise processes Personal Data and certain business information in connection with the Platform. Jazalla processes Personal Data in accordance with the applicable laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL), its Implementing Regulations, and the Regulation on Personal Data Transfer Outside the Kingdom, as applicable.
1. Information Covered by this Privacy Statement
This Privacy Statement applies to Personal Data relating to individuals who:
- Register or create an account on the Platform;
- Use Jazalla services;
- Act on behalf of a company or organization;
- Communicate with Jazalla;
- Participate in marketplace transactions;
- Submit or respond to RFQs, tenders, quotations or proposals;
- Use Jazalla ERP or business-management services; or
- Otherwise interact with Jazalla.
This Privacy Statement also explains how Jazalla handles certain Company Information and Confidential Company Information submitted through the Platform.
2. Types of Information We Collect
Depending on how you use the Platform, Jazalla may collect and process the following categories of information.
2.1 Personal Data
- Full name;
- Email address;
- Telephone/mobile number;
- Job title or position;
- Company affiliation;
- Username and account credentials;
- Photograph, where voluntarily provided;
- Identification or verification information where required for a particular service;
- Communications with Jazalla;
- Information necessary to administer user permissions and access; and
- Technical and usage information associated with your account.
2.2 Company Information
A company using Jazalla may provide information including:
- Legal company name;
- Commercial Registration (CR) information;
- VAT registration information;
- Business activities;
- Business address;
- Website;
- Business telephone numbers;
- Industry classification;
- Manufacturing activities;
- Products and services;
- Plant and facility information;
- Local-content information or scores;
- Supplier/customer information;
- Procurement and sales information; and
- Other information required to create and operate a company profile.
Certain Company Information may be publicly displayed as described in Section 6.
2.3 Confidential Company Information
Companies may also submit information that is commercially sensitive or confidential, including:
- Quotations and prices;
- RFQs, tenders and proposals;
- Purchase orders;
- Contracts;
- Supplier and customer information;
- Financial records;
- Accounting records;
- ERP records;
- Transaction information;
- Inventory information;
- Employee information;
- Bank information;
- Payment information;
- Business plans;
- Investment information; and
- Other information that is not designated or intended to be public.
Jazalla treats such information as confidential, subject to this Privacy Statement, applicable agreements and the Terms & Conditions.
2.4 Technical Information
- IP address;
- Browser type;
- Operating system;
- Device information;
- Log information;
- Date and time of access;
- Pages or services accessed;
- Security and authentication information; and
- Other technical information necessary for operating and securing the Platform.
3. How We Collect Information
Jazalla may collect information:
- Directly from you;
- From your company or organization;
- When you create or use an account;
- When you submit information through the Platform;
- Through transactions conducted through the Platform;
- Through government or publicly available sources where legally permitted;
- Through authorized third-party service providers;
- Through integrations and APIs;
- Through cookies and similar technologies; and
- Through communications with Jazalla.
Where Company Information is obtained from official or publicly available sources, Jazalla may use and display that information in accordance with applicable law and the purposes of the Platform.
4. Why We Process Personal Data
Account and Platform Administration
- Create and manage user accounts;
- Authenticate users;
- Administer access and permissions;
- Verify users or companies;
- Provide requested services; and
- Maintain account security.
Business and Marketplace Services
- Facilitate communication between buyers, suppliers and service providers;
- Facilitate RFQs, tenders, quotations and proposals;
- Generate purchase orders and commercial documents;
- Facilitate marketplace transactions;
- Support procurement, sales and service activities;
- Facilitate payments and related transaction processes; and
- Support business-for-sale and investment-opportunity functions.
ERP and Business Management
To provide and operate accounting, procurement, sales, services, HR, project management, inventory, reporting and other authorized business-management services.
Communications
- Respond to inquiries;
- Provide service notifications;
- Communicate with users;
- Provide security alerts;
- Provide information relating to transactions; and
- Send marketing communications where legally permitted and, where required, with appropriate consent.
Security and Fraud Prevention
- Detect and prevent fraud;
- Protect accounts;
- Investigate misuse;
- Maintain cybersecurity;
- Prevent unauthorized access; and
- Protect Jazalla, users and third parties.
Legal and Regulatory Compliance
To comply with applicable laws, regulations, court orders, regulatory requirements, tax requirements, and lawful requests from competent authorities.
5. Legal Basis for Processing
Depending on the circumstances and applicable law, Jazalla may process Personal Data on the basis of:
- Consent;
- Performance of a contract or taking steps at the request of the Data Subject;
- Legitimate interests where permitted by applicable law;
- Compliance with a legal or regulatory obligation; or
- Another lawful basis permitted under applicable Saudi laws and regulations.
Jazalla will seek consent where consent is required by applicable law. Where processing is based on consent, the individual may withdraw consent, subject to applicable legal limitations and the lawfulness of processing that occurred before withdrawal.
6. Public Company Information
Jazalla is a B2B marketplace and business network. Accordingly, certain Company Information is intended to be visible to other companies and Platform users.
Where applicable, Public Company Information may include:
- Company legal name;
- Commercial Registration number;
- VAT registration number;
- Business activities;
- Website;
- Business address;
- Designated business telephone numbers;
- Industry classification;
- Manufacturing classification;
- Products and services;
- Plant or facility information designated for publication;
- Local-content information or score where authorized or lawfully sourced;
- Company profile information; and
- Other information expressly published or authorized by the Company.
Public Company Information may be obtained from official government records, publicly available sources, or directly from the Company. A Company acknowledges that information it publishes or authorizes for publication through the Platform may be viewed by other Platform users and, where applicable, visitors to publicly accessible portions of the Platform.
7. Confidential Company Information
Jazalla recognizes that companies may provide commercially sensitive information through the Platform.
Unless information is expressly designated as public, obtained from a public or official source, or authorized for publication, Jazalla will treat Company Information that is reasonably understood to be confidential as Confidential Company Information.
Jazalla will not intentionally publish or commercially disclose Confidential Company Information to unrelated third parties for their independent commercial purposes without the Company's authorization, except where:
- Disclosure is necessary to provide a service requested by the Company;
- Disclosure is necessary to complete or administer an authorized transaction;
- Disclosure is necessary to authorized service providers acting on Jazalla's behalf;
- Disclosure is necessary to prevent fraud, security incidents or misuse;
- Disclosure is required by law, court order or a competent authority; or
- Otherwise permitted by the Company's agreement with Jazalla.
Jazalla will implement reasonable technical and organizational measures to protect Confidential Company Information against unauthorized access, use, disclosure, alteration, loss or destruction.
8. Company Data Ownership
Subject to the rights granted to Jazalla under the Terms & Conditions, the Company retains ownership of its Company Data and content submitted to the Platform. Jazalla does not acquire ownership of a Company's confidential business records merely because the Company stores or processes those records through Jazalla.
Jazalla may process Company Data to the extent reasonably necessary to provide, maintain, secure, support, improve and administer the Platform and the services requested by the Company.
9. Use of Aggregated and Anonymized Information
Jazalla may create statistical, aggregated, anonymized or de-identified information from Platform data for legitimate business purposes, including platform analytics, service improvement, benchmarking, market analysis, performance measurement, research and development, reporting, and improving Jazalla's products and services.
Jazalla will not use such information in a manner intended to identify an individual where the information has been properly anonymized or de-identified.
12. Banking and Open Banking Information
Where a Company uses a banking or open-banking integration through Jazalla, bank information may be processed through the applicable financial technology or banking provider. Jazalla will process bank information only for the authorized purpose and in accordance with applicable agreements, permissions and laws.
Where authentication is performed directly with a bank or authorized financial institution, Jazalla does not control the bank's authentication mechanisms. Jazalla personnel will not access bank passwords or authentication credentials unless explicitly required and lawfully authorized for a particular service.
The specific terms, consent and security arrangements applicable to the relevant banking or open-banking service will also apply.
13. Payment and Escrow Information
Where Jazalla facilitates or integrates with payment or escrow-related services, information necessary to process, reconcile, secure, release or refund funds may be shared with the applicable payment, banking, escrow or financial service provider.
Jazalla will not use payment information for purposes unrelated to the authorized transaction except where permitted by applicable law or agreement.
15. Information Security
Jazalla maintains reasonable technical and organizational security measures appropriate to the nature of the information processed. These measures may include:
- Access controls;
- Authentication mechanisms;
- Encryption where appropriate;
- Network security;
- Firewalls;
- Malware protection;
- Vulnerability assessments;
- Security monitoring;
- Backups;
- Disaster recovery;
- Business continuity procedures;
- Employee confidentiality obligations; and
- Security reviews and audits where appropriate.
No internet-based system can be guaranteed to be completely secure. Jazalla therefore cannot guarantee absolute security, but will take reasonable measures to protect information against unauthorized access, use, disclosure, alteration, loss or destruction.
16. Personal Data Breaches
Where Jazalla becomes aware of a Personal Data breach, Jazalla will assess and respond to the incident in accordance with applicable Saudi laws, regulations and regulatory requirements. Where notification to a competent authority or affected individuals is legally required, Jazalla will make such notifications within the applicable legally prescribed timeframe.
17. Data Retention
Jazalla retains Personal Data and Company Data only for as long as reasonably necessary to provide the requested services, maintain business and transaction records, comply with legal or regulatory obligations, resolve disputes, enforce agreements, prevent fraud and misuse, maintain security, or satisfy other legitimate and lawful purposes.
When information is no longer required, Jazalla will delete, anonymize or otherwise dispose of it in accordance with applicable law and its data-retention procedures.
18. Data Transfers Outside the Kingdom
Jazalla seeks to maintain appropriate safeguards for Personal Data processed through its Platform. Where Personal Data is transferred or disclosed outside the Kingdom of Saudi Arabia, Jazalla will comply with the applicable requirements of the PDPL, its Implementing Regulations and the Regulation on Personal Data Transfer Outside the Kingdom, including applicable necessity, safeguards, assessments and contractual requirements.
Jazalla will limit any transfer or disclosure outside the Kingdom to the minimum Personal Data necessary for the relevant purpose and will implement the safeguards required by applicable law before or in connection with the transfer or disclosure, where applicable.
19. Your Rights
Subject to applicable law and its conditions, Data Subjects may have rights including:
- The right to be informed about the legal basis and purpose of processing;
- The right to access Personal Data;
- The right to obtain Personal Data in a readable and clear format, where applicable;
- The right to request correction, completion or updating of inaccurate, incomplete or outdated Personal Data;
- The right to request destruction of Personal Data where legally applicable;
- The right to withdraw consent where processing is based on consent; and
- Other rights provided under applicable Saudi law and regulations.
Requests may be submitted to Jazalla using the contact information in Section 24. Jazalla will handle requests in accordance with applicable law and applicable procedures, including any conditions or exceptions established by law.
20. Company Rights Regarding Company Data
Companies may request, subject to applicable law and contractual obligations:
- Access to their Company Data;
- Correction of inaccurate Company Data;
- Export of their Company Data;
- Deletion of Company Data where legally and operationally permissible; and
- Clarification regarding how their Company Data is processed.
Certain records may need to be retained for legal, accounting, tax, regulatory, security or transaction-related purposes.
21. Third-Party Websites and Services
The Platform may contain links to third-party websites or integrate with third-party services. Jazalla is not responsible for the privacy practices of third parties operating those websites or services. Users should review the applicable privacy policies and terms of those third parties.
22. Children
The Platform is intended for businesses and adult users. Jazalla does not knowingly seek to collect Personal Data from children except where permitted by applicable law and where necessary for a legitimate service.
23. Changes to this Privacy Statement
Jazalla may update this Privacy Statement from time to time to reflect changes to the Platform, our services, applicable laws and regulations, data-processing practices, or security requirements.
Material changes will be communicated through appropriate means, including publication on the Platform and, where appropriate, email notification.
24. Contact Us
For privacy questions, requests or complaints, please contact:
Jazalla Commercial Services Company
Al Khobar, Kingdom of Saudi Arabia
Email: [email protected]