1. Personal Data security is our top priority. We will always endeavor to safeguard your Personal Data against unauthorized or accidental Access, Processing, or damage. We maintain this commitment to Personal Data security by implementing appropriate physical, electronic, and managerial measures to secure your Personal Data. We will take responsibility by law if your Personal Data suffers from Unauthorized Access, Public Disclosure, Deletion, or Damage for a reason attributable to us and so impairs your lawful rights and interests.
2.We maintain a strict security system to prevent Unauthorized Access to your Personal Data. We exercise strict management over our staff members who may have Access to your Personal Data, including but not limited to Access Control applied to distinct positions, a Contractual Obligation of confidentiality agreed with relevant staff members, formulation and implementation of Personal Data security-related policies and procedures, and Personal Data security related training offered to staff.
3. We will not Disclose your Personal Data to any Third-Party unless the Disclosure is made to comply with laws, regulations, and regulatory requirements or according to this Notice or other agreement (if any) or based on your or your Related Parties’ Consent or authorization. When we Use services provided by external service providers (Entities or Individuals), we also impose strict confidentiality obligations on them and request them to abide by the security standards of KSA PDPL when Processing Personal Data.
4.For the security of your Personal Data, you shall also be responsible to take care of your Personal Data, such as your account Information, Identity Verification Information (e.g., username, password, dynamic password, Verification code, etc.), and all the documents, devices, or other media that may record or otherwise relate to such Data, and shall ensure your Personal Data and relevant documents, devices or other media are used only in a secured environment. You shall not, at any time, disclose to any other person or allow any other person to Use such Data and relevant documents, devices, or other media. Once you think your Personal Data and/or relevant documents, devices, or other media have been Disclosed, lost, or stolen, or may otherwise affect the security of your Use of our products, devices, or services, you shall notify us immediately so that we may act appropriately to prevent further Loss from occurring.
5.We will organize regular staff training and drills on emergency response. If unfortunately, a Personal Data security incident occurs, we will adopt the emergency plan and take relevant actions and remediation measures to mitigate the severity and Losses in connection therewith. Meanwhile, we will, following the applicable requirements set out in law and regulation, inform regulatory authorities about the Data of the security incident and its possible impact, the actions and measures we have taken or will take, suggestions to prevent and mitigate the risk, and applicable remediation measures.