Red Sea Global (“RSG”), by providing its services, is committed to maintaining the accuracy, confidentiality, and security of its customers’ information, in which RSG defines a customer as any individual or entity that has an established business-related relationship with RSG, its subsidiaries or its contracted third parties (providing services to RSG customers as part of a business relationship between the customer and RSG).

This policy describes the information processed to support products and services offered by RSG and inform RSG customers of the purpose for collecting their personal information and how it will be stored, processed, used, shared, archived, destroyed, or re-used / re-purposed as well as their rights as being the owner of their collected personal information.

RSG defines Personally Identifiable Information as any data, regardless of its source or form, that may lead to identifying an individual specifically, or that may directly or indirectly make it possible to identify an individual, including name, personal identification number, date of birth, addresses, contact numbers, license numbers, records, personal assets, bank and credit card numbers, photos and videos of an individual, IP addresses, social media accounts information (LinkedIn, X, IG), surveillance footage and any other data of personal nature.

RSG also defines Sensitive Personal Identifiable Information as information that includes a reference to an individual's racial or ethnic origin, or religious, intellectual, or political belief, as well as criminal and security data, biometrics, Genetic Data, Credit Data, Health Data, and data that indicates that one or both individual’s parents are unknown.

RSG’s data privacy policy is based upon the rules set by the Kingdom of Saudi Arabia, the Saudi Personal Data Protection Law (“PDPL”) for the Protection of Personal Information and data protection rights that are aligned with the EU General Data Protection Regulation (“GDPR”).

1. How RSG Collects Customer Information in Jewar

To provide this service, RSG collects information that is necessary for assessing user eligibility in the context of RSG programs, including Volunteering, Educational, and General opportunities. Work experience is a crucial factor in determining user eligibility for available job positions. Additionally, geolocation data is essential for accurately recording a user's location when they submit observations.

1.1 Personal Information

• First Name
• Last Name
• Date of Birth
• Country Code
• Phone number
• Email
• Nationality
• Place of Birth
• Country of Birth
• Country of Residency
• City of Residence
• Gender
• Marital Status
• Physical Condition
• ID Number

1.2 Address Details

• Home Address
• City
• Postal Code
• Geolocation (location coordinates from mobile devices)

1.3 Work Experience

• Years of Experience
• Salary
• Notice Period
• Personal Job Profile
• Occupation
• Reason for Joining

1.4 Academic Details

• Academic Major
• Academic Certificate

2. How RSG Shares Customer Information

RSG does not use or share its customers information with others unless as described in this Privacy Policy. In certain circumstances, RSG will share your information with third parties with your consent, as necessary, or as otherwise required or permitted by PDPL. Specifically, RSG may share your information:

• With service providers and vendors for business purposes in its legitimate interests, or to perform a contract with you. Such third parties include: (i) data analytics vendors; (ii) security vendors; and (iii) website hosting vendors. These service providers assist RSG with many different functions and tasks, such as providing data storage and disaster recovery services and communicating with you.
• When a RSG’s customer request to share certain information with third parties, with consent or to perform a contract with the customer. With the customer’s permission or upon the customer’s discretion, RSG will disclose the customer’s information to relevant third parties.
• With professional advisors, in RSG’s legitimate interests or as required by law. As necessary, RSG will share its customers’ information with professional advisors functioning as service providers such as auditors, law firms, or accounting firms.
• For legal and security reasons and to protect RSG’s services and business, in RSG’s legitimate interests or as required by law. RSG will share its customers’ information with regulators, law enforcement agencies, public authorities, or any other relevant organizations: (i) in response to a legal obligation; (ii) if RSG has determined that it is necessary to share customers information to comply with applicable law or any obligations thereunder, including cooperation with law enforcement, judicial orders, and regulatory inquiries; (iii) to protect the interests of, and ensure the safety and security, of RSG, its stakeholders, a third party or the public; (iv) to exercise or defend legal claims; and (v) to enforce RSG’s terms and conditions
• With RSG affiliates, in its legitimate interests. RSG may share its customers’ information with companies within its corporate group.
• In connection with an asset sale or purchase, a share sale, purchase or merger, bankruptcy, or other business transaction or re-organization, in RSG’s legitimate interests. RSG will share customers’ information with a prospective buyer, seller, new owner, or other relevant third party as necessary while negotiating or in relation to a change of corporate control such as a restructuring, merger, or sale of RSG assets.

3. Where RSG Stores Customer Information

As RSG is based in the Kingdom of Saudi Arabia, the information that it collects from its customers will be transferred to, stored, and processed within the Kingdom of Saudi Arabia. Where permitted by the PDPL, RSG may also transfer its customers’ information internationally as necessary for it to provide the services to its customers, including to RSG’s service providers. RSG will take all reasonable steps necessary to ensure that its customers’ information is treated securely and in accordance with this Privacy Policy and applicable privacy laws.

4. How Long RSG Retains Customer Information

RSG will retain your information as follows:

• Customers information will be retained for as long as needed to provide RSG Services to the customer.
• If a customer contact RSG requesting permeant disposition of their information, RSG will keep the information for 5 years after the customer contacts RSG or RSG will also retain and use its customers information to the extent necessary to comply with RSG’s legal obligations, resolve disputes and enforce RSG’s terms and conditions, other applicable terms of service, and RSG policies. After these periods, RSG may store its customers information in an aggregated and anonymized format, and it may use this information indefinitely without further notice to its customers.

5. Identifying Purposes

RSG collects, uses, and discloses Personal Information to provide its customers with the product or service they have requested and to offer them additional products or services RSG believes its customers might be interested in. The purpose for which we collect Personal Information will be identified before or at the time RSG collects the information. RSG may collect personal information to provide a service, where an individual’s consent may be implied. Implied consent is consent that is not given explicitly, but which can be inferred based on the individual’s actions and the facts of a particular situation as part of the process of delivering the service.

6. Consent

Knowledge and consent are required for the collection, use or disclosure of Personal Information unless otherwise required or permitted by law. Customers always have the choice to provide their personal information to RSG. However, the customer decision not to provide certain information may limit RSG’s ability to provide them with RSG’s products, service, or may limit functionality. However, there are specific cases in which information will be processed even without the data owner’s consent. These cases are specified by the Saudi Personal Data Protection Law as per the following:

• If the Processing serves actual interests of the Data Subject, but communicating with the Data Subject is impossible or difficult.
• If the Processing is pursuant to another law or in implementation of a previous agreement to which the Data Subject is a party.
• If the Controller is a Public Entity and the Processing is required for security purposes or to satisfy judicial requirements.
• If the Processing is necessary for the purpose of legitimate interest of the Controller (RSG in this case), without prejudice to the rights and interests of the Data Subject and provided that no Sensitive Data is to be processed.

7. Limited Collection

The Personal Information collected will be limited to those details necessary for the purposes identified by RSG. With the customer consent, RSG may collect Personal Information from them in person, over the telephone or by corresponding with to customers via mail, or the Internet. Other possible methods of the collection of personal information (not limited to), direct interactions, using RSG products or services, social media interactions, browsing the website, applying for a job, registering to become a supplier, etc.

8. Limited Use, Disclosure, and Retention

Personal Information may only be used or disclosed for the purpose for which it was collected unless the customer has otherwise consented, or when it is required or permitted by law. Personal Information will only be retained for the period required to fulfill the purpose for which we collected it or as may be required by law and as forementioned in section 6 of this policy.

9. Safeguarding Personal Information

Personal Information will be protected by security safeguards that are appropriate to the sensitivity level of the information. RSG takes all reasonable precautions to protect its customers’ Personal Information from any loss or unauthorized use, access, or disclosure.

10. Openness

RSG will make information available to its customers about its policies and practices with respect to the management of its customers’ Personal Information.

11. Customer Data Rights

RSG would like to make sure its customers are fully aware of all their data privacy rights, in which RSG customers are entitled to the following:

• Right to know / information: A customer has the right to know about RSG (data controller) contact details, the exact reason the data is being collected, the methods being used for data collection, and whether this collected data will be shared.
• Right to request access or copy: A customer has the right to access their personal information from RSG (data controller) and obtain a copy of it in a clear and readable format, in conformity with the content of the records. In most cases this will be at no cost, however a, ’reasonable fee’ for the administrative costs of complying with a request if it is manifestly unfounded or excessive, or if a customer requests further copies of their data may be assessed at the time of the request.
• The right to request correction / rectification: A customer has the right to request that RSG (data controller) correct any information they believe is incomplete, inaccurate, or obsolete. The customer also has the right to request RSG to complete the information they believe is incomplete.
• The right to destruction / erasure: A customer has the right to request that RSG (data controller) erases their personal data. The reasons can range from rescinding the customer’s consent for data collection to the data no longer serving the purpose for which it was collected.
• The right to limit/restrict processing: A customer has the right to limit or object to the processing of their personal information by RSG (data controller) or any of its contracted data processors.
• The right to data portability: A customer has the right to request that RSG (data controller) transfer the data that it has collected to another organization, under certain conditions.
• Automated individual decision: A customer has the right to not be subject to a decision based solely on automated processing, including profiling, which produces legal effects unless it is necessary for entering into, or performance of a contract between the customer and RSG (data controller), or at the customer’s explicit consent.

In certain circumstances permitted by regulation, or law, RSG will not disclose certain information to its owner. For example, RSG may not disclose information relating to a customer if other individuals are referenced or if there are legal, security or commercial proprietary restrictions.

If a customer makes a request related to any of the above rights to which they are entitled, RSG will fulfill these requests within 30 calendar days and record all data subject requests received. RSG will inform its customers of required extensions for fulfillment of raised requests should the resolution of the request require more than 30 calendar days.

12. Cookie Policy

Our Cookie Policy can be accessed via https://www.redseaglobal.com/en/cookie-policy

13. Contact Information

13.1 Contact RSG

If a customer has any questions regarding this policy, please do not hesitate to contact RSG at [email protected]

13.2 Contact Appropriate Authority

Should a customer wish to report a complaint or if the customer feels that RSG has not addressed their concern in a satisfactory manner, they may contact The Saudi Data & Artificial Intelligence Authority (“SDAIA”) at [email protected]

14. Revisions

This policy shall be reviewed annually and upon changes to related laws and regulations to ensure it remains appropriate and current for PDPL and NDMO regulations and requirements.