Privacy Policy

[Rowage Al-Dhakia] Commercial Registration No. 4030547434 (the "Company") values the importance of safeguarding your Personal Data. For this purpose, we have established a detailed Privacy Policy explaining how we handle your personal data when you visit or use the Platform. We recommend that you read this policy carefully before accessing or using the Platform.

By accessing or using the Platform, you express your agreement to the terms and provisions outlined in this policy and any future updates. If you do not agree to the terms of this policy, please refrain from using the Platform or the services provided through it.

This policy forms an integral part of our Terms of Service and any other applicable reference documents.

Capitalized terms used in this Privacy Policy shall have the meanings ascribed to them in the Terms of Service, unless otherwise defined herein.

Data Collection

We collect your personal data through the following means:

• Directly, when you provide data via the Platform or through communication with our representatives via WhatsApp or SMS.
• Indirectly, through the use of cookies and other tracking technologies when you visit the Platform, in accordance with our Cookies Policy.
• Rwaj may process and retain transaction data for VAT and e-invoicing compliance as required under Zakat, Tax and Customs Authority regulations.

The data we may collect includes:

• Identity and contact information such as: full name, phone number, email, national address, gender, age, and payment details.
• Information you share through the Platform, including documents, posts, and any other content you upload or provide.
• Data about your interests, behavior, and activities on the Platform.
• Technical information about your device, such as device model, operating system type and version.
• Information about your usage of the Platform, such as IP address, browser type, and device characteristics.

Your data is collected and processed based on one of the following legal grounds:

• Your explicit consent to collect and process your data.
• A legal obligation imposed by the applicable regulations in the Kingdom of Saudi Arabia.

Sensitive Data

• The Company commits to handling sensitive personal data in accordance with the Personal Data Protection Law and its implementing regulations.
• Sensitive data may include (but is not limited to) health information, racial or ethnic origin, political opinions, religious beliefs, biometric data, security-related data, or criminal records.
• Such data will only be processed after obtaining prior explicit consent from the data subject, along with the implementation of appropriate technical and organizational measures to ensure its protection, including data encryption, strict access controls, and periodic security audits.

Use and Purpose of Information

We collect and use personal information for the following purposes:

• To provide the services you request via any of our digital interfaces.
• To maintain internal records for service provision and improvement.
• To contact you for marketing, advertisements, promotional messages, and inform you of new offers.
• To verify your identity and establish contact with you.
• To analyze your use of the Platform to enhance user experience.
• To disclose information after obtaining your consent or as required by applicable laws.
• We may share your personal data with third parties under specific circumstances, as outlined in this policy and the Terms of Service, and in accordance with relevant laws.
• The user explicitly agrees to the sharing of Personal Data with partner platforms for specific informational or financial purposes, limited to the extent necessary, and in accordance with this Privacy Policy, ensuring privacy and confidentiality, and preventing usage for any other purpose without prior consent.
• You may opt out of receiving marketing messages by clicking the "unsubscribe" link in all our marketing communications or by contacting us directly.

Data Storage

• The Company makes reasonable efforts to maintain and protect your Personal Data from misuse or loss and takes care to prevent its disclosure. Any Personal Data no longer needed will be destroyed in accordance with our data retention practices.
• To provide you with proper service, we reserve the right to store data both inside and outside the Kingdom of Saudi Arabia, within legal limits.
• The Company retains your personal data for as long as necessary to fulfill the purposes for which it was collected or as required by law or legitimate interest, not exceeding the necessary period.
• Some Personal Data may be stored using cloud computing services provider, underwent agreements ensuring the highest standards of protection, including encryption, confidentiality, access controls, and compliance with local regulations. These agreements are reviewed periodically to ensure ongoing compliance.

Data Subject Rights

As a data subject, you have the right to:

• Request access to your Personal Data held by us.
• Request corrections or amendments of your personal data.
• Request deletion of your personal data, as per applicable regulations.
• Understand how we collect, process, retain, and delete your personal data, and to whom it may be disclosed. Full details are available in this Privacy Policy, or you may contact us using the information below.
• Object to data processing at any time, if the processing is based on a legitimate interest or for marketing purposes.

Requests will be reviewed within 30 days. The requester must provide proof of identity and may be required to cover any associated data collection costs, if applicable. Objections will be reviewed within 30 days. If accepted, data processing will be stopped or limited accordingly.

Data Transfer Outside the Kingdom of Saudi Arabia

Personal Data will not be transferred outside the Kingdom of Saudi Arabia except in accordance with applicable laws and regulations, and after confirming one or more of the following:

• The recipient country or entity offers a level of data protection not less than that required in the Kingdom of Saudi Arabia.
• Explicit approval from the relevant authority has been obtained, if required.
• The transfer is necessary to fulfill contractual obligations or for vital interests of the data subject, such as legal enforcement. All necessary safeguards will be taken to ensure data protection during transfer, including contractual obligations to ensure security, confidentiality, and compliance.

Security

• The Company takes all reasonable measures to protect your personal information from unauthorized access. However, absolute security cannot be guaranteed.
• In the event of a Personal Data breach, the relevant authority will be notified within 72 hours of discovering the incident. The data subject will also be notified if the breach significantly affects them.
• The Privacy Policy and our data handling mechanisms are subject to internal oversight within an effective governance framework, including:
  • Periodic compliance reviews.
  • Ongoing privacy risk assessments.
  • Operational controls to monitor data protection and prevent unauthorized access.

Responsibility

• You are responsible for maintaining the confidentiality of your account information. You accept sole responsibility for all activities conducted under your account, whether by you or by others using your account credentials or access authorizations.
• You acknowledge your responsibility in safeguarding your data and not disclosing it to third parties. You also understand the consequences of sharing personal data voluntarily.
• You are required to notify the Company in the event of any loss, theft, or unauthorized use of any password, username, IP address, or other access methods to our services.
• The Company does not guarantee the accuracy, content, or timeliness of services or outcomes the data subject may or may not receive. The Company or its affiliates shall not, under any circumstances, be liable for any direct, indirect, punitive, special, incidental, or consequential damage to the maximum extent permitted by law.
• The Platform may contain links to other websites or apps (e.g., WhatsApp) or advertisements from third-party sites. We are not responsible for the data collection practices on those websites. Please review their privacy policies and content before engaging with them.

Amendment of the Privacy Policy

• The Company reserves the right to update or amend all or part of this Privacy Policy at any time, with a clear notice to be posted on the website regarding any changes.
• Changes take effect immediately upon publication. Continued use of the website following the posting of changes constitutes acceptance of the revised policy.
• We recommend regularly reviewing this page for updates.

Contact Us

• To contact our Data Protection Officer, please email: support@rwaj.co
• For complaints or inquiries related to this Privacy Policy or how we handle personal data, please contact: support@rwaj.co
• If you are not satisfied with our response to your complaint, you may submit a complaint to the competent authority (Saudi Data and Artificial Intelligence Authority - SDAIA).