Introduction

ESNAD is committed to respecting your privacy and protecting your personal data.

• We will be transparent about the information we are collecting about you and what we will do with it.
• We will use your personal data for the purposes described below. Your personal data will not be processed in a manner inconsistent with the purpose of its collection or in cases other than those stipulated by applicable privacy laws.
• We will only process your personal data where we have a legal basis to do so. The legal basis will depend on the reason or reasons we collected and need to process your personal data.
• We have measures to protect your personal data and keep it secure.
• We will respect your data protection rights and aim to give you control over your own personal data.

Controller Of Personal Data

Any personal data processed in connection with this Privacy Policy is controlled by ESNAD, having its registered office at IT Belt Company-Head Office, Al-Wurud District, Riyadh, Zip Code 12253, Kingdom of Saudi Arabia, which is considered the "data controller" of your personal data under the Kingdom of Saudi Arabia's Personal Data Protection Law and its Implementing Regulations.

What Do We Mean by Personal Data?

Personal data means any data, regardless of its source or form, that may lead to identifying you specifically, or that may directly or indirectly make it possible to identify you, including your name, personal identification number, addresses, contact numbers, records, personal assets, bank account numbers and any other data of a personal nature.

When Does This Policy Apply?

This Privacy Policy applies to personal data about you that we collect, use, or otherwise process in connection with your relationship with us as a customer.

How We Collect Your Personal Data

Direct Collection: When you visit the Office or contact us via Email

Types collected:

Indirect Collection: Through wholesalers or events: Name, Email Address, Contact Number, Address

Legal Basis for Processing

Performance Of A Contract:

• Provide agreed-upon services
• Billing and payment processing
• Quality assurance
• Facilitate secure transactions

Legitimate Interests:

• Engage with you and provide assistance
• Maintain communication regarding orders and requests
• Process and verify official documents
• Courier official documents
• Register customers in ESNAD systems
• Verify representative information
• Understand customer needs
• Provide follow-up support
• Handle complaints
• Facilitate secure payments

Consent:

• Use feedback to improve services
• Analyze data for personalized suggestions
• Understand purchasing patterns
• Conduct surveys

Legal Obligations:

• Report complaints data to Ministry of Commerce
• Comply with ZATCA requirements

How Long We Keep Your Data

• Electronic format: 10 years
• Hard copy format: 5 years, then archived
• Extended period for complaints, queries, or statutory requirements
• When you stop interacting with us, we remove or anonymize after statutory requirements

Who We Share Your Data With

• Third-party providers for delivery services
• Shipping and courier services for documents
• Invoicing service providers
• Sister entity for service appointments
• Group company for financing (if availed)

These third parties are only permitted to use your personal data to the extent necessary and must follow our instructions and security measures. We do not sell personal data.

Transfer Outside KSA

We ensure such transfers satisfy conditions under applicable privacy laws. We limit transfer to minimum personal data needed and implement sufficient guarantees to preserve confidentiality.

Your Legal Rights

• Right to be informed about processing
• Right to obtain personal data in readable format
• Right to request correction, completion or updating
• Right to request destruction/erasure
• Right to lodge a complaint with competent authority

Responses provided within 30 days (may extend 30 days for complicated requests).

How to Exercise Your Rights

Send a request using contact details below. We may ask for additional information to confirm your identity. If you lack legal capacity, your legal guardian may exercise rights on your behalf.

Security of Your Personal Data

We have appropriate physical, electronic, and managerial procedures. Servers accessible only by authorized personnel on need-to-know basis. However, internet transmissions cannot be made absolutely secure.

Beware of phishing: illegal gathering of personal data by deception. Never enter bank details into unsolicited links.

Changes to This Policy

If we change this Privacy Policy, we will publish the updated version on the ESNAD website.