Privacy Policy

Introduction

RIDC Investment and Development Company (“RIDC,” “we,” “us,” or “our”) is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we use the personal data we may collect from you. By using our applications or websites, you agree to this use.

This Privacy Policy does not apply to the websites of our business partners, affiliates, or any third parties, even if their websites are linked to ours. We encourage you to review the privacy statements of any third parties you interact with.

The purpose of this notice is to inform the user of the following:

• The types of data that RIDC may collect from the customer when using the website, and the purpose of collecting such data.
• How RIDC uses the data collected from the user and the parties with whom such data may be shared.
• The user's rights regarding their personal data.

Collection of Personal Data

Data Provided by the Customer

• Personal information, including your email address, name, and phone number, provided through (the website, the mobile application, or RIDC representatives).
• National ID number and commercial details for billing purposes, which are handled confidentially by the data owner.
• Transaction-related information, such as bidding details through the website.

Data Collected Automatically

RIDC may automatically collect certain personal data that your browser sends whenever you visit the website or mobile application. This may include data collected through cookies or other tracking technologies. Additionally:

• Some personal data may be required to provide essential services. Failure to provide such data may prevent these services from being completed.
• Optional personal data may be collected to enhance service quality and user experience, and the absence of such data will not affect the provision of core services.

RIDC does not knowingly collect, store, or retain personal data of children. Our services are intended only for individuals aged 18 and above who are legally able to enter binding contracts under applicable laws.

Automatically collected data may include:

• Session identifiers, device characteristics (mobile / desktop), metadata, and browser information (collected through cookies).
• Additional details such as your browsing activity on the website or mobile application (through cookies).

Data Retention

RIDC retains your personal data only for the duration necessary to fulfill the purposes outlined in this policy, or as required by applicable laws in the Kingdom of Saudi Arabia.

Retention will not exceed what is necessary for legal, contractual, or operational purposes, unless a longer retention period is required by law or regulation.

Storage and Destruction of Data

Your personal information will be stored securely and in encrypted form.

We do not store your credit/debit card information. All card data and payments are handled according to security and encryption standards by fully certified payment service providers.

If you are booking a vehicle on behalf of another person, you must obtain their consent to use their personal information. We assume that such consent has been obtained.

Data Subject Rights

Data subjects have the following rights:

1. Right to Be Informed

You have the right to know how your data is collected, the legal basis for its collection and processing, how it is handled, stored, destroyed, and with whom it may be shared. Full details are provided in this Privacy Policy. You may also contact us using the information provided.

2. Right of Access

You may request a copy of your personal data using the listed email address. The data will be provided to you via email.

3. Right to Correction

You may request correction of your personal data if you believe it is inaccurate, incorrect, or incomplete. Upon review and update, you will be notified via email.

4. Right to Deletion

You may request the deletion of your personal data under certain circumstances, unless a legal requirement mandates a specific retention period or contractual obligation prevents deletion.

5. Right to Withdraw Consent

You may withdraw your consent to the processing of your personal data at any time, unless legitimate purposes require otherwise.

Disclosure and Processing of Your Information

We may exchange, process, and share the information and data you provide—or that we collect about you—with third-party suppliers and other competent authorities, with your full knowledge and in accordance with applicable regulations.

Cross-Border Data Processing

Your data may be processed outside the Kingdom of Saudi Arabia if necessary to:

• Fulfill obligations under an agreement to which Saudi Arabia is a party;
• Serve the interests of the Kingdom;
• Or for other purposes as defined by the relevant Saudi laws and regulations.

Cookie Policy

We may use a technology called “cookies” to provide you with customized information from RIDC’s website or mobile applications.

A cookie is a data file sent by a website or mobile application to your browser, which may store it on your system.

Cookies allow us to:

• Identify which pages and advertisements were viewed
• Determine page visit frequency
• Identify the most popular sections of our website
• Improve user experience by, for example, redirecting you to the last-used language version of the site

Most web browsers accept cookies automatically. You are not required to accept cookies, and you should refer to your browser’s instructions to learn how to receive notifications before accepting them, allowing you to decide whether to accept or decline.

Governing Law

This Privacy Policy, its subject matter, and its interpretation are governed by the laws and regulations in force in the Kingdom of Saudi Arabia.

Contact, Complaints, and Inquiries

• For complaints or inquiries regarding this Privacy Policy, you may contact the website administration at: info@riyalinvestment.com
• For complaints or inquiries regarding the handling of personal data, you may contact RIDC’s Data Protection Officer (DPO) at: itd@riyalinvestment.com

Updates to the Privacy Policy

• RIDC reserves the right to modify or add to any provisions of this Privacy Policy. Data subjects will be notified of such updates. RIDC reserves the right to terminate a user’s account if they do not accept the updated Privacy Policy.
• Arabic is the official language for interpreting these terms. In case of any discrepancy between translations, the Arabic text shall prevail.