PM 5:46:14
Log in العربية
Purple Saturday
VISION 2030
Home Workshops Awards Moments Register your interest
Log in العربية

Privacy Policy

Privacy Policy

Introduction

The Authority of Persons with Disabilities (the “Authority”) is committed to the privacy and confidentiality of personal information and personal data of users of its website (the “Website”), digital platforms, and mobile applications, and places such privacy among its highest priorities.

This Privacy Notice helps users understand the types of information collected by the Authority, why it is collected, how it is processed, and how the Authority handles it. This Privacy Notice forms an integral part of the Authority website terms and conditions.

By using the Authority services, website, or related mobile applications, the user confirms acceptance of this Privacy Policy.

Information Collected by the Authority

The Authority collects different types of information and personal data from visitors and users of its services, platforms, and applications. This mainly includes:

  1. Information provided by the user and required to benefit from services or register on Authority platforms and applications, or provided when creating a user profile, including personal data related to the user or a family member, such as name, national ID number, email address, and contact numbers.
  2. Information exchanged through communications with the Authority, such as inquiries, comments, and suggestions received from visitors.
  3. Cookie data, including data collected through web logs, technologies, cookies, or similar technologies.
  4. Information received by the Authority from other sources, including information received when visitors use other websites operated by the Authority or other services provided by it. The Authority also works closely with other entities, including government entities and any other entities that may provide information related to the visitor.

Methods of Collecting Information

  1. Information and personal data are collected directly from information and data provided by the user to the Authority.
  2. The Authority may receive data from other sources when visitors use websites or services operated by the Authority, or through entities with which the Authority works closely, including government entities and other entities that may provide information related to visitors.
  3. The Authority collects information about website users through multiple methods. When the user visits the Authority website, the Authority server records the user’s internet protocol address (IP), visit date and time, and the URL of any website that referred the user to the Authority website. Personal data is also collected directly through information provided by the website user to the Authority.

Cookies

The Authority website and some or all related platforms use cookies to distinguish users. This helps provide a better experience when visiting the website and supports continuous improvement. By continuing to browse the website, the visitor agrees to the Authority’s use of cookies. The visitor can block cookies through browser settings that refuse all or some cookies. If all cookies are blocked, including essential cookies, access to all or part of the website may be unavailable.

Purpose of Collecting and Using Information

Personal data is collected and processed based on the data subject’s consent. The data subject may withdraw consent to collecting and processing personal data at any time unless another lawful basis applies. To do so, the user may contact the Data Management Office at the Authority of Persons with Disabilities.

Purpose of Using Personal Data

The Authority uses personal data in accordance with applicable laws, regulations, and instructions, including but not limited to:

  1. Improving management of available services.
  2. Fulfilling the main purpose for which the user provided information and data, such as responding to requests, inquiries, or suggestions.
  3. Monitoring and detecting violations of the terms of use and other actual or potential misuse when using the website.
  4. Maintaining and improving website performance and the security of its software, systems, and network.

Sharing and Disclosing Information

The Authority may share or disclose information and personal data provided by visitors or collected about them in the following cases:

  1. When disclosure or sharing is required to comply with a legal obligation, enforce or apply the Authority terms of use or other agreements, or protect the rights, property, or safety of the Authority, its employees, or others.
  2. When disclosure is required in response to subpoenas, court orders, or other legal process, or to investigate, prevent, or take action regarding illegal practices, suspected fraud, or technical or security issues.
  3. When the data has been collected from a publicly available source, with the data subject’s consent in accordance with applicable provisions, for an overriding public interest or the interest of the data subject, or after removing all personal data that can identify the data subject.

Retention and Destruction of Information

Personal data is stored inside the Kingdom of Saudi Arabia on National Information Center servers. These servers are protected by advanced technologies in line with the policies and controls of the National Cybersecurity Authority and international standards to prevent unauthorized access and reduce cyber risks. The data will then be destroyed within three years from the date of storage in a secure manner that prevents access to or recovery of the data, in accordance with National Information Center policies.

Rights of the Personal Data Subject

Rights granted to the data subject under applicable laws, regulations, and policies include:

  • Right to know: The data subject has the right to know how data is collected, the lawful basis for collection and processing, how it is processed, stored, and destroyed, and with whom it will be shared. Details are available in this Privacy Policy or through the contact details in the “Contact Us” section.
  • Right to access personal data: The data subject may request a copy of their personal data through the email shown in the “Contact Us” section. It will be provided free of charge within seven business days by email.
  • Right to correct personal data: The data subject may request correction of personal data that they believe is inaccurate, incorrect, or incomplete through the email shown in the “Contact Us” section. The data will be reviewed and updated within seven business days, and the data subject will be notified by email.
  • Right to destroy personal data: The data subject may request destruction of personal data in certain circumstances unless a legal provision, retention period, or contractual requirement applies.
  • Right to withdraw consent: The data subject may withdraw consent to processing personal data at any time unless legitimate purposes require otherwise.

Disclaimer

This platform by the Saudi Authority of Persons with Disabilities is available for visitors’ personal use. Access to and use of this service are subject to this Privacy Notice and the laws of the Kingdom of Saudi Arabia. Accessing and benefiting from this service and platform constitutes unconditional acceptance of this notice, effective from the first date of use.

Changes to the Privacy Notice

The Authority may amend and update this notice. Visitors should periodically check and review updates.

Links to Other Websites

The Authority website, platforms, and applications may contain links to and from other websites that may not be affiliated with the Authority. If a visitor follows any such links, the visitor should review the privacy notices of those websites. The Authority is not responsible for the data collection or protection practices of those websites.

Related Legislation

For more information about the policies and laws referred to in this policy, visitors may review the following links:

Contact Us

Questions, inquiries, and complaints regarding this Privacy Policy are welcomed through the contact option available on the Authority website. Please contact us as follows:

  • For complaints or inquiries related to this Privacy Policy or personal data handling, contact the website administration at Info@apd.gov.sa.
  • If no response is received within seven business days, the complaint or inquiry may be submitted to the Authority Data Management Office at Dmo@apd.gov.sa, and the team will respond and contact you.

Policy Update Date

This policy was updated on 22/01/2025.