Jazalla Privacy Policy

INTRODUCTION  

Jazalla ("we", "our", or "us") is committed to protecting your privacy and the confidentiality of your personal data in accordance with the Saudi Personal Data Protection Law (PDPL) and applicable regulations. This Privacy Policy outlines how we collect, use, share, store, and protect your personal data when you visit or register on our platform.

PERSONAL DATA WE COLLECT  

We collect and process the following categories of personal data:

1. Name
2. Email
3. Telephone number (optional)
4. Profile photograph (optional)
5. IP address, browser type, and operating system
6. Organization or company affiliation
7. Any other data you voluntarily provide during use of the platform

PURPOSE AND LEGAL BASIS FOR PROCESSING

We process your personal data only when there is a legal basis under PDPL, including:

1. Your Consent obtained when you register an account or are invited by an organization administrator.
2. Performance of a Contract, enabling access to Jazalla’s platform and related services.
3. Legitimate Interest, facilitating communication and transactions between platform users (e.g., buyers, suppliers, and service providers), where it does not override your rights.

USE OF PERSONAL DATA

We use your data for the following lawful purposes:

1. Creating and managing user accounts
2. Providing access to our procurement and ERP services
3. Facilitating business communication between users
4. Generating procurement-related documents (e.g., purchase orders)
5. Ensuring platform functionality and security
6. Improving platform performance and user experience
7. Complying with legal obligations

DATA SHARING AND DISCLOSURE

We may share your personal data with:

1. Our employees, officers, and technical support teams
2. Authorized subcontractors and service providers under data protection agreements
3. Other registered users (e.g., suppliers or buyers you interact with)
4. Regulatory bodies if required by law or under judicial authority

We do not sell your personal data under any circumstances.

CROSS-BORDER DATA TRANSFERS

Your data may be transferred outside Saudi Arabia only when:

1. It is necessary for performing a contractual obligation or providing the platform’s services
2. The destination country ensures adequate data protection or has contractual safeguards
3. You have provided explicit consent, as required under PDPL Article 29

YOUR RIGHTS UNDER PDPL

You have the following rights under PDPL:

1. The right to be informed of how your data is collected and used
2. The right to access your personal data
3. The right to correct, update, or delete inaccurate or outdated data
4. The right to withdraw your consent at any time (where applicable)
5. The right to lodge a complaint with the competent authority (SDAIA)

To exercise these rights, contact us at: support@Jazalla.com

COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tools (e.g., web beacons) to:

1. Authenticate users
2. Track site performance and analytics
3. Improve service and advertising relevance

You can manage your cookie settings through your browser. For more details, refer to our Cookie Policy (available on our website).

DATA SECURITY

We implement appropriate technical and organizational measures to protect your data, including:

1. AES-256 encryption for stored data
2. Encrypted data transmission (TLS/SSL)
3. Daily backups
4. Intrusion detection and firewall systems
5. Regular vulnerability scans and penetration testing
6. Access controls and staff training on data protection

DATA RETENTION

We retain your personal data only as long as necessary for:

1. The purpose for which it was collected
2. Compliance with legal and contractual obligations
3. Resolution of disputes and enforcement of agreements

Upon account deletion, we remove or anonymize your personal data unless retention is legally required. However, transactional data related to business activities may be retained to preserve the rights of other parties.

CLIENT BUSINESS DATA & OWNERSHIP

Jazalla does not access, claim ownership of, or use your organization’s business data for any purpose other than to operate and support the platform in accordance with your instructions.

You retain full ownership and control over all business, transactional, and operational data entered or processed through your account. This includes procurement documents, financial records, inventory, customer/supplier lists, or any other internal records uploaded to Jazalla.

Unless required by law or judicial order, Jazalla shall not access, use, modify, disclose, or contact your clients, vendors, or employees without your express written consent.

Jazalla acts as a data processor under the PDPL, processing your business data solely on your behalf and for your benefit. You, as the organization, remain the data controller and are responsible for determining the purposes and means of such data processing.

We maintain strict access controls, encryption, and logging to prevent unauthorized access to your business data, and we continuously audit and monitor for compliance.

CHANGES TO THIS PRIVACY POLICY:

We reserve the right to update this Privacy Policy to comply with legal requirements or service improvements. Users will be notified of significant changes via email or in-app notices. Please review it regularly.

CONTACT US:

If you have any questions or concerns about this policy or how your personal data is handled, contact:

Jazalla
AlKhobar, Saudi Arabia
Email: support@Jazalla.com