Sipchem (hereafter referred to as 'we,' or 'our' or 'us' or 'Sipchem') is committed to ensuring the privacy of your personal data whilst also providing a personalized and valuable service. This Privacy Policy provides you with information on why and how we process your personal data in the course of our business operations. This Policy is aligned with the Personal Data Protection Law ('Law') issued by the Royal Decree no. M/19 and dated 09/02/1443H corresponding to 16/09/2021G. This Policy considered to be legally binding document between us and you (hereafter referred to as 'user', 'you' or 'your')
نطاق هذه السياسة
Please read this privacy policy ('Policy') carefully to understand our policies and practices regarding your Personal Data and how we will treat it. This Policy applies to individuals who interact with Sipchem as set out below ('you'). This Policy explains how your Personal Data are collected, used, and disclosed by Sipchem and its affiliates ('Sipchem', 'We', 'Us'). It also tells you how you can access and update your Personal Data and make certain choices about how your Personal Data is used.
Where affiliates may have their own privacy policies, this Privacy Policy does not apply to those affiliates. Sipchem encourages you to review the privacy policies of those affiliates so that you can understand how those affiliates collect, use, and share your information.
What Personal Data Means: ‘Personal Data’ means any data, irrespective of the source of form, leading to the identification of an individual directly or indirectly, including name, personal identification number, addresses, contact numbers, license numbers, records, personal property, bank account and credit card numbers, fixed or moving pictures of the individual etc. This Policy provides important information in the following areas:
-
Sources of Personal Data
We collect any information you provide to us when you complete a form on our website or provide us with your details over the phone, by email or fax. This information might include your name, job title, company address, email address, phone numbers, fax number etc.
Directly from you: We collect information directly from you, such as when you apply or register for our products and services, use our portal, communicate with us (via phone calls, emails, text and other electronic messages), respond to surveys, provide feedback, or enter contests or promotions.
Automatically when you use our Online Services: We and others on our behalf may collect Device Data, Online Activity Data, and other information automatically when you interact with us online.
We may combine information we collect when you use our online services with information, we collect from other sources such as,
-
Market research (if feedback not provided on an anonymous basis)
-
From our co-branded product or business partners, and from publicly available data sources including social media, to the extent that you manifestly choose to make your profile publicly visible, and data received when we acquire other companies.
We will treat such combined information in accordance with this Privacy Notice.
-
-
Personal Data that we collect about you and how we collect it
Depending on how you interact online or offline with us, we may collect various types of information. For example,
-
When you sign up for or use a petroleum product or service, we may collect:
Information Type Information Included Contact or identity data such as your name, mailing address, email address, phone number, date of birth, government-issued identifier (e.g., iqama number, driver’s license, or other government ID), citizenship, username and password, profile picture, and other information that directly identifies you. Account-related data such as account number, account history, account balances, loan details, information about beneficiaries and joint account holders, business-related information (e.g., business name, address, revenue, and industry type), and other information related to your accounts, applications, or prequalification inquiries. Transaction data such as account, payment or transaction history, transaction details when you transfer money to or from your Sipchem accounts, and third-party billing information or statements. Demographic data such as gender, marital status, age, household size/composition, education level, income, occupation, and employment status. -
When you browse our website or use our mobile apps, we may also collect:
Information Type Information Included Device data such as your device type, internet protocol address, general location (e.g., city, state, or country), precise location. Marketing data such as your marketing preferences, information about products or services we think you might like, and inferences based on your interactions with us or our partners (e.g., Online Activity Data used for targeted advertising). Communications data such as your communication preferences and details or the content of your communications with us (e.g., chat messages). Survey and research data such as your responses to questionnaires, surveys, requests for feedback, and research activities. -
If you inquire about or apply for a job at Sipchem, we may also collect:
Information Type Information Included Employment application data such as professional, employment-related, and education history collected through the Online Services about job applicants, employees, associates, contractors, or other members of the Sipchem workforce.
If you disclose any information relating to other people to us or to our service providers when you visit or use the Services, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Policy.
-
-
Use of Cookies
The Sipchem website uses 'cookies' which are downloaded to your device when you visit a website to provide a personalized browsing experience. Cookies are used for lots of tasks like remembering your preferences & settings, providing personalized browsing experience, and analyzing site operations. These cookies collect information about how users use a website, for instance, how often they visited pages, counting visitors and their behavior, targeted advertising, recording user preferences or collecting information for authentication.
You have the ability to accept or decline cookies, you can:
-
Change your browser settings to notify you when you receive a cookie, which lets you choose whether to accept it.
-
Change your browser settings to notify you when you receive a cookie, which lets you choose whether to accept it.
If you choose to decline cookies, you may not be able to fully experience the interactive features of the Sipchem services or Web sites you visit.
-
-
How We Use Your Personal Data
We use information for various purposes depending on how you interact with us. This section describes the various purposes for which We use your Personal Data and the lawful purposes that we use them for. Please note that not all the uses below will be relevant to every individual.
In case we want to use your Personal Data for purposes unrelated to those described in this Policy, we will first notify you and, where required, offer you a choice as to whether we may use your Personal Data in this manner.
If you do not provide the necessary Personal Data to Us, we may not be able to provide you with our products and/or services. We will communicate with you when such is the case.
Under the Personal Data Protection Law (PDPL), we are permitted the following reasons to process your data:
-
Explicit Consent: Where your explicit consent is taken for processing your data. For example, for direct marketing purposes.
-
Contractual Obligation: Where the processing of personal data is needed to enter or fulfill contractual obligation.
-
Legal Obligation: Where the Sipchem must fulfill its legal obligations like mandatory information sharing as requested by the KSA.
-
Legitimate Interest: It is a legitimate interest of the Sipchem. That is, the Sipchem has business or commercial reasons of its own to use your information.
The different ways We use your personal data and our lawful reasons for the same are listed below.
How we use your information الغرض المشروع To provide our Products and Services - To manage your registration and our relationship with you or your business
- To communicate with you about our products and services, inform you about important information regarding them, our online services, changes to terms, conditions, and policies and/or other administrative information
- Verify your identity, authenticate you to use our Services and verify your location
- Confirming the accuracy of the data you have given us
- Personalize your Online Services experience
- To study how our customers use products and services from us
- To develop and manage our brands, products and services
- To develop and carry out marketing activities
- Allow you to participate in surveys and other forms of market research, contests and similar promotional campaigns and to administer these activities. For example, promotional campaigns, where we publish the names, photos of the winners of the campaigns on our website.
- To respond to your inquires and complaints.
-
موافقة صريحة
- On your consent for marketing activities
- Contractual Obligation
- Where we have a contract with you that requires us to process your data
- Legal Obligation
- Where there is reporting to Regulatory Authority and to law enforcement agencies
- Legitimate Interest
- Keeping our records up to date, working out which of our products and services may interest you and telling you about them
- Developing products and services, and what we charge for them
- Defining types of customers for new products or services
- Seeking your consent when we need it to contact you
- Being efficient about how we fulfil our legal and contractual duties
- Managing competitions and promotions
To Manage Our Operations - To deliver our products and services
- To make and manage deliverables
- To manage and provide treasury and investment products and services
- To manage risk for us and our customers
- To obey laws and regulations that apply to us To respond to complaints and seek to resolve them
- To run our business in an efficient and proper way. This includes managing our financial position, business capability, planning, adding and testing systems and processes, managing communications, corporate governance, and audit
- To exercise our rights set out in agreements or contracts
- Contractual Obligation
- Where we have a contract with you that requires us to process your data
- Legal Obligation
- Where there is reporting to regulatory authorities and to law enforcement agencies
- Legitimate Interest
- Refining our operational controls to ensure efficient performance of processing activities to achieve the business objectives.
- Being efficient in how we fulfill our legal and contractual obligation
- Comply with rules and guidance from regulators
- Keeping our records up to date.
For Business Improvement - To test new products
- To test new technologies, upgrades and enhancements to the existing technologies (applications and systems).
- To manage how we work with other companies that provide services to us and our customers
- To develop new ways to meet our customers needs and to grow our business
- To perform activities such as data analysis, audits, usage trends to determine the effectiveness of our campaigns and as input into improving products and services
- Contractual Obligation
- Where we have a contract with you that requires us to process your data
- Legal Obligation
- Where there is reporting to regulatory authorities and to law enforcement agencies
- Legitimate Interest
- Developing products and services, and what we charge for them
- Defining types of customers for new products or services
- Being efficient about how we fulfil our legal and contractual duties
- To improve customer experience and business operations.
-
-
Processing Sensitive personal information
Personal data of a Sensitive personal information includes the types of personal data that by its very nature, if misused, are more likely to result in serious damage to the privacy and / or personal data of Individuals.
-
Sensitive Personal data includes data on Ethnic or tribal origin, religious, intellectual or political belief, membership in nongovernmental associations or institutions, criminal and security data, biometric data, genetic data, credit data, health data, location data, and data that indicates that both parents of an individual or one of them is unknown.
Please note, we will process your data of sensitive personal information for the identified purpose only after obtaining, Your explicit consent
-
-
Information Disclosure
Sipchem may disclose your personal data in the following circumstances in alignment with Article 15 of the Personal Data Protection Law of KSA.
-
You consent to the Disclosure in accordance with the provisions of the Law.
-
Personal Data has been collected from a publicly available source.
-
The entity requesting Disclosure is a Public Entity, and the Collection or Processing of the Personal Data is required for public interest or security purposes, or to implement another law, to fulfill judicial requirements.
-
The Disclosure is necessary to protect public health, public safety, or to protect the lives or health of specific individuals.
-
The Disclosure will only involve subsequent Processing in a form that makes it impossible to identify you directly or indirectly.
-
The Disclosure is necessary to achieve legitimate interests of the Controller, without prejudice to your rights and interests, and provided that no Sensitive Data is to be processed.
Sipchem shall not disclose your Personal Data in the situations stated in the points 1, 2, 5 and 6 as stated above if the Disclosure:
-
Represents a threat to security, harms the reputation of the Kingdom, or conflicts with the interests of the Kingdom.
-
Affects the Kingdom’s relations with any other state.
-
Prevents the detection of a crime, affects the rights of an accused to a fair trial, or affects the integrity of existing criminal procedures.
-
Compromises your safety.
-
Results in violating someone else’s privacy as set out in the PDPL Regulations.
-
Conflicts with the interests of a person that fully or partially lacks legal capacity.
-
Violates legally established professional obligations.
-
Involves a violation of an obligation, procedure, or judicial decision.
-
Exposes the identity of a confidential source of information in a manner detrimental to the public interest.
Please Note, We will not sell, share or provide your Personal Data other than as set forth in this Privacy Notice.
-
-
Retention of Your Personal Data
We will retain your personal data in line with our legal and regulatory obligations and for as long as the information is needed for the business and operational purposes set forth in section 5 above and for any additional period that may be required or permitted by law.
-
Storage and/or Transfer of Your Personal Data
We use appropriate measures (described below) to keep your Personal Data confidential and secure. Please note, however, that these protections do not apply to information you choose to share in public areas such as third-party social networks.
-
People who can access your Personal Data. Your Personal Data will be processed by our authorized staff or agents, on a need-to-know basis, depending on the specific purposes for which your Personal Data has been collected.
-
Measures taken in operating environments. We store your Personal Data in operating environments that use reasonable security measures to prevent unauthorized access. We follow reasonable standards to protect Personal Data.
-
Transfer of your Personal Data. Your personal information may be transferred to, stored, and processed in a country that is not regarded as ensuring an adequate level of protection for personal information. We have put in place appropriate safeguards (such as contractual commitments) in accordance with applicable legal requirements to ensure that your data is adequately protected.
-
-
ملفات تعريف الارتباط المُوجَهة
We may use your Personal Data for marketing purposes, including (but not limited to):
-
To conduct market research and surveys with the aim of improving our products and services.
-
For marketing purposes, promotional events and lucky draws.
We process your Personal Data for these purposes because it is in the interest of our business to do so with the intention of improving our products and services and generating business. We will not send you marketing material if you have specifically asked us not to do so. You have the right to opt out of receiving marketing material at any time. To do so please contact Sipchem Personal data privacy officer at dataprivacy@sipchem.com.
If you change your mind and ask us not to send you marketing material or other promotional or research material you have subscribed to receive, we may need to retain a record that you have asked us not to do so to ensure that you do not receive marketing material anything further.
-
-
Your Rights and How Can You Exercise Them
Subject to applicable laws and regulations, you may have the ‘Right to withdraw consent’ in relation to your personal data being processed by Sipchem.
The rights that you can invoke as an individual can be:
Individual Rights Explanation Right to be Informed You have the right to be informed about the collection and use of your personal data upon request. Right to Access You may request a copy of the personal data processed in relation to you. We may charge a fee for this as permissible by law. Right to Rectification You can rectify personal data if it is inaccurate or incomplete. Right to Erasure You may request deletion of your personal data, for example if we no longer have a valid reason to process it. Right to Object You have the absolute right to object to the processing of their personal data if it is for direct marketing purposes Right to Restrict Processing You can limit the way that Sipchem uses your data. This is an alternative to requesting the erasure of your data. You have the right to restrict the processing of your personal data where you have a particular reason for wanting the restriction. Right to Data Portability This right allows you to obtain annd reuse your personal data for your own purposes across different services. It allows them to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without affecting its usability. These rights can be exercised by sending Us an e-mail at dataprivacy@sipchem.com or calling us at +966 13 801 9392 or writing to us at Sipchem Building, King Saud Road District, Al-Hada District, Al Khobar attaching a copy of your ID or equivalent details (where requested by us and permitted by law). If the request is submitted by a person other than you, without providing evidence that the request is legitimately made on your behalf, the request will be rejected. We may also reject a request where the request is deemed excessive or malicious, or if an exemption applies.
Please note that any identification information provided to us will only be processed in accordance with, and to the extent permitted by applicable laws.
Sipchem shall provide information on action taken on a request pertaining to the rights above without undue delay and in any event within 30 calendar days of receipt of the request.
Kindly note that, in certain circumstances, we will not be able to delete your Personal Data to satisfy our legal or contractual obligations or to comply with regulatory requirements, we may be required to retain some of your Personal Data even after you have requested it to be deleted. In addition to this we may also be permitted by applicable laws to retain some of your Personal Data to satisfy our business needs. We will communicate what data we will retain and the reason for the same when you raise such a request.
-
Reasonable Security Practices and Procedures
The security of personal data including Sensitive data is a priority for Sipchem. We take reasonable steps to help prevent the loss, misuse, and alteration of the information under our control. For example, we have implemented physical, logical, and administrative safeguards to protect and secure the information we process and maintain.
Sipchem ensures that its employees and agents respect the confidentiality of any personal data held by the Sipchem entities.
-
Contact Information
Please get in touch with us if you have any questions or comments about our privacy practices, or to address any discrepancies or grievances related to the use or processing of your personal data residing with the Sipchem, you can always reach out to our Privacy Team via email at dataprivacy@sipchem.com. You can also reach us via mail at the postal address provided below, Sipchem Building, King Saud Road District, Al-Hada District, Al Khobar.
We will acknowledge and investigate any grievance or complaint about the way We manage your Personal Data as expeditiously as possible.
If you are unhappy about the way in which We handle your personal data, you have a right to raise a concern with the Saudi Data and AI Authority (SDAIA), the KSA supervisory authority for data protection issues via email: info@sdaia.gov.sa.
-
Changes to This Policy
This Policy is subject to change and may be updated periodically by our sole discretion to reflect any amendments in the applicable privacy laws, any change in the way We handle your Personal Data and based on your feedback wherever applicable. Your continued use of our website or services after the effective date of the revised Policy (or such other act specified at that time) will constitute your consent to those changes. We encourage you to periodically review this Policy to be informed of any amendments.
-
Agree to the Privacy Policy
You acknowledge that you have read, understood, and agree to the data collection, use, and disclosure provisions set forth in this Privacy Policy. Your use of our website or services signifies your acceptance of this Policy.
