Privacy Policy

 

introduction

Recognizing the growing importance of protecting personal data, and keen to respect privacy and promote transparency in providing its digital services, the Najran Region Municipality has prepared this policy to inform beneficiaries about the nature of the data that is collected, the reasons for collecting it, and how to deal with and process it in accordance with the provisions of the Personal Data Protection Law and its implementing regulations, and the relevant legislation adopted by the regulatory authorities in the Kingdom of Saudi Arabia, including the policies of the Saudi Data and Artificial Intelligence Authority (SDAIA).

Scope of policy

This policy applies to all personal data collected or processed through the Najran Region Municipality's electronic portal or through any of its digital services, whether this is done directly by the data subject or through supporting  .technological means

Contact information

For any inquiries regarding the privacy policy, you can contact the Najran Region Municipality through the following means:

  • Name of entity: Najran Region Municipality
  • Address: Najran City – Al Fahd District
  • Phone number: 0175222444 
  • Email: DMO@najran.gov.sa 
  • Last updated: March 13, 2025

 

personal data that is collected

The Najran Municipality is committed to collecting only the minimum personal data necessary for providing services, in accordance with the principle of data reduction stipulated by law. The data that may be collected includes the following:

  • Identity data: Name, date of birth, national identity number or residence number.
  • Contact information: Mobile phone number, email address.
  • Account details: Username, password used to access digital platforms.
  • Browsing data: Internet Protocol (IP) address, cookies, usage data.

 

Data collection methods and purposes of use

Personal data is collected through the following methods:

  • Directly: through electronic forms on the official portal or applications affiliated with the Secretariat.
  • Indirectly: by using browsing analytics tools and cookies, or through integration with other government systems.

 

The data is used systematically to achieve the following purposes:

  • Verifying the beneficiary's identity.
  • Providing municipal services efficiently and in compliance.
  • Studying user needs and developing the user experience.
  • Receiving and processing reports and inquiries.
  • Improving the overall performance level of services.

 

Personal data processing

Personal data is processed by authorized specialists within the Najran Region Municipality, in accordance with approved policies and procedures. This processing is subject to strict controls that ensure:

  • Defining the purpose of the treatment accurately and legitimately.
  • Protecting the confidentiality and integrity of data during processing.
  • Adherence to the minimum required data.

 

Sharing personal data

The Secretariat is committed to not sharing personal data with any external party except within the scope permitted by the system and its implementing regulations, and the regulatory cases include the following:

  • Obtaining explicit and informed consent from the data subject.
  • The existence of a binding regulatory or judicial order.
  • The necessity to achieve a public, security or health interest, taking into account legal controls.

 

Storage, retention period, and destruction of personal data

  • The data is stored within the Kingdom of Saudi Arabia in a secure environment, based on approved protection controls and in accordance with national cybersecurity standards.
  • The data is retained for a period not exceeding the systematic purpose for which it was collected.
  • The data is destroyed after its purpose has ended in a secure manner that does not allow for its retrieval, in compliance with Article (18) of the Personal Data Protection Law.

 

Rights of Personal Data Holders

According to the system and its implementing regulations, the data subject has the following rights:

  • The right to know: to be informed of all the details of the collection and processing of personal data.
  • Right of access: To request a copy of his personal data in a clear and legible format.
  • Right to rectification: To amend or update inaccurate or incomplete data.
  • Right to destruction: The right to demand the destruction of data if there is no longer a legitimate need for it.
  • Right to withdraw consent: To withdraw consent to data processing at any time, unless there is a legal impediment.

The Secretariat is committed to processing requests to exercise these rights within (30) working days from the date of receiving the complete request, taking into account the justified extension cases stipulated in the regulations.

 

Receiving requests and complaints

If there is a request or complaint regarding how personal data is processed or the rights of its owners, it can be submitted to the Data Management Office at the Najran Region Municipality through the following channels:

All requests and complaints are processed in accordance with approved procedures and in a manner that guarantees the rights of data owners.

 

Relevant legislation