First: Policy Statement
This Policy aims to set out the types of personal data processed through the official website of Waqf Sulaiman Bin Abdulaziz Al Rajhi at the domain waqfsr.org.sa, the purposes of processing such data, the controls governing its protection and sharing, and the rights of data subjects, in a manner that ensures compliance with the Personal Data Protection Law, its Implementing Regulations, and other applicable regulations in the Kingdom of Saudi Arabia.
The processing of personal data is based on the data subject’s consent, compliance with legal obligations, and the Waqf’s legitimate interests in operating its website and responding to public correspondence, in accordance with the provisions of the Personal Data Protection Law and its Implementing Regulations.
Second: Policy Scope
This Policy applies to all personal data processed through the Waqf’s official website in both its Arabic and English versions, and to all visitors and users of its services.
This Policy does not apply to the websites of entities affiliated with the Waqf, nor to third-party platforms, which are governed by separate privacy policies.
Third: Terms and Definitions
The following terms shall have the meanings assigned to them wherever they appear in this Policy, unless the context requires otherwise:
The Waqf: Waqf Sulaiman Bin Abdulaziz Al Rajhi, represented by its General Secretariat.
The Website: The Waqf’s official website at the domain waqfsr.org.sa and its subdomains.
The Visitor: Any person who visits the Website or uses any of its electronic services.
Personal Data: Any data — whatever its source or form — that would lead to the identification of an individual specifically, or that makes it possible to identify them directly or indirectly.
Cookies: Small files stored on the visitor’s device while browsing the Website; enabling it to function correctly or to measure its performance.
Personal Data Protection Law: The Personal Data Protection Law issued in the Kingdom of Saudi Arabia and its implementing regulations.
Fourth: Data Processed
- Voluntarily provided data: data entered by the visitor when completing the “Contact Us” form, including name, mobile number, email address, subject and message content.
- Usage data: technical information automatically recorded while browsing, including the IP address, browser type and operating system, date and time of visit, pages visited, and referral source.
- Cookie data: data relating to the visitor’s preferences and consent to cookie categories.
- The Website does not collect sensitive personal data or financial or banking data, and does not process any electronic payments.
Fifth: Purposes of Data Processing
- Responding to visitors’ enquiries and correspondence received through the contact form.
- Measuring website performance and analysing visits in aggregate, in order to improve content and user experience.
- Protecting the Website against intrusion attempts and misuse, and ensuring service stability.
- Complying with the laws and regulations applicable in the Kingdom of Saudi Arabia, including the Personal Data Protection Law.
- Data is not used for any advertising or commercial marketing purposes, and is not subject to any automated decision-making or visitor profiling.
Sixth: Data Sharing and Disclosure
- The Waqf does not sell or trade personal data in any form whatsoever.
- Sharing personal data with any third party is prohibited, except with hosting and technical support providers and data processors acting on behalf of the Waqf under binding contracts or agreements that require confidentiality, compliance with the Personal Data Protection Law, and use of the data solely for the specified purposes.
- Personal data may also be disclosed to governmental or judicial authorities where required by applicable laws or regulations.
Seventh: Data Protection and Retention
- The Waqf applies appropriate technical and organizational measures to protect data from unauthorized access, loss, or alteration; including encryption of connections via HTTPS.
- Access to data is restricted to authorized employees only, and to the extent required by their job duties.
- Website data is hosted within the Kingdom of Saudi Arabia and is not transferred outside the Kingdom except in accordance with the approved regulatory requirements.
- The Waqf shall retain data in accordance with the retention periods specified in the Waqf’s approved Data Retention Policy, or as otherwise required by applicable laws and regulations. Upon expiry of the applicable retention period, the data shall be securely deleted or destroyed.
- In the event of a personal data breach, unauthorized access, disclosure, loss, or alteration of personal data, the Waqf shall promptly implement the necessary technical and organizational measures to contain the incident, assess its impact, take appropriate corrective actions, and notify the competent authority and affected data subjects where required under applicable laws and regulations.
Eighth: Data Subjects’ Rights
Data subjects shall have the right to the following:
- To be informed of the legal basis for collecting their personal data and the purpose of its processing.
- To request access to their personal data held by the Waqf and obtain a copy of it in a clear and readable format.
- To request correction of inaccurate or incomplete data.
- To request destruction of their personal data, unless a statutory requirement mandates its [email protected]
- To withdraw their consent to the processing of their personal data at any time, unless legitimate purposes require otherwise.
- Requests relating to these rights shall be submitted via the official email: [email protected]. The Waqf shall review and respond to such requests within the timeframes prescribed by applicable laws, and may reject or restrict a request where permitted by law, provided that the applicant is informed of the reason where legally permissible.
Ninth: Cookies
- The Website uses necessary cookies required for its operation and for storing language preferences, as well as analytical cookies used to measure the number of visits and browsing behaviour in aggregate.
- On the first visit, a notice is displayed allowing the visitor to accept cookies or manage their categories. Non-essential cookies are not activated without the visitor’s consent.
- Visitors may delete or disable cookies at any time through their browser settings, noting that disabling some of them may affect the performance of certain Website services.
Tenth: Third-Party Services and Links
- The Website includes embedded maps from the Google Maps service, and links to the Waqf’s official social media accounts.
- These services are governed by the privacy policies of their respective operators. The Waqf bears no responsibility for their practices or content, and visitors are advised to review those privacy policies.
Eleventh: Policy Language
- This Policy has been prepared in both Arabic and English, and both texts constitute an integral part of a single document.
- In the event of any conflict or difference in interpretation between the Arabic and English texts, the Arabic text shall prevail and be applied.
Twelfth: Review and Update
- This Policy is reviewed periodically, and upon the issuance of any regulatory update or a material change to the Website’s services.
- Any amendment to this Policy takes effect from the date of its publication on this page, and the visitor’s continued use of the Website thereafter constitutes acceptance of the amended version.
Visitors may contact us regarding any enquiry or comment relating to this Policy via email: [email protected]
