Privacy Policy for the Ektefa Website

1. Introduction

ZADIP GROUP LTD respects the privacy of visitors to the website of its product Ektefa and is committed to protecting personal data collected or processed when visiting or interacting with the Website, in accordance with the applicable laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL) and its Implementing Regulations.

Ektefa is one of the products of ZADIP GROUP LTD and is a registered trademark owned by ZADIP GROUP LTD.

This Privacy Policy explains how ZADIP GROUP LTD collects, uses, processes, stores, and protects personal data relating to visitors of the Ektefa informational website.

For the purposes of this Policy, the term “Website” refers to the public and informational website of Ektefa, including its pages, forms, and publicly available features.

This Policy does not govern the processing of data within the Ektefa platform, applications, or operational products and services, which may be subject to separate policies, terms, agreements, and contractual arrangements.

2. About Us

ZADIP GROUP LTD is the owner of the Ektefa product and trademark and is responsible for operating the Ektefa informational website.

For the purposes of the Saudi Personal Data Protection Law, ZADIP GROUP LTD acts as the Data Controller in relation to personal data collected and processed through this Website, unless otherwise stated in a specific case.

For the purposes of this Policy:

• “Company,” “we,” “us,” or “our” means ZADIP GROUP LTD.
• “Ektefa” means the product and trademark owned by ZADIP GROUP LTD.
• “User” or “Visitor” means any person who visits or uses the Ektefa informational Website.

3. Scope of this Privacy Policy

This Policy applies to personal data processed as a result of visiting or using the Ektefa informational Website, including when you:

• Browse Website pages.
• Complete contact forms.
• Request an Ektefa product demonstration.
• Request contact from our sales team.
• Submit an inquiry or request through the Website.
• Register for an event or activity offered through the Website, if applicable.
• Subscribe to newsletters or marketing communications, if available.
• Interact with cookies and similar technologies.
• Interact with any other public functionality available through the Website.

This Policy Does Not Cover

This Policy does not govern the processing of data arising from the actual use of the Ektefa platform or services, including, for example:

• Data relating to employees of Ektefa customers.
• Human resources data.
• Attendance and departure records.
• Location data associated with attendance or departure registration.
• Employment information.
• Employment contracts and documents.
• Payroll, entitlement, and deduction data.
• Leave requests and other employee requests.
• Employee self-service data.
• Data processed by Ektefa on behalf of its customers in connection with the provision of its services.

Such data is subject to the applicable policies, agreements, and terms governing Ektefa services and the contractual relationship between ZADIP GROUP LTD and the relevant customer, as applicable.

4. Personal Data We Collect

The type of personal data we may collect depends on how you interact with the Website.

4.1 Information You Provide Directly

When you use Website forms or contact us, we may collect information such as:

• Name.
• Company or organization name.
• Job title.
• Email address.
• Phone number.
• City or region.
• Business sector or activity.
• Number of employees.
• Product or service of interest.
• Content of your inquiry or message.
• Preferred time for contact or a product demonstration, if applicable.
• Any other information you voluntarily provide through Website forms.

We recommend that you do not provide personal data or other information that is not necessary for the purpose of contacting us.

We also ask users not to submit sensitive personal data or personal data relating to employees or other third parties through general Website contact forms unless expressly requested for a specific and legitimate purpose.

5. Information Collected Automatically

When you visit the Website, certain technical information may be collected automatically, including:

• Internet Protocol (IP) address.
• Device type.
• Browser type and version.
• Operating system.
• Language settings.
• Pages visited.
• Date and time of visit.
• Duration of browsing.
• Pages navigated from or to.
• Referral source.
• Interaction with Website components.
• Cookie-related information.
• Technical information regarding Website performance or errors.

This information may be collected directly or through third-party technology providers used by ZADIP GROUP LTD to operate, secure, or measure the performance of the Website.

6. Purposes of Collecting and Processing Personal Data

ZADIP GROUP LTD may process personal data collected through the Ektefa Website for the following purposes:

6.1 Communicating with Visitors

To respond to inquiries, requests, or messages submitted through the Website.

6.2 Product Demonstration Requests

To process requests for an Ektefa demonstration and communicate with the person or organization submitting the request.

6.3 Sales and Prospective Customers

To communicate with organizations interested in Ektefa, understand their needs, and identify products or services that may be suitable for them.

6.4 Managing Prospective Customer Relationships

To record and follow up on contact requests, inquiries, and business opportunities through customer relationship management systems.

6.5 Improving the Website

To understand how the Website is used and improve:

• User experience.
• Page design.
• Content.
• Website performance.
• User journey.
• Quality of digital services.

6.6 Performance Measurement

To measure visits, interactions, campaign performance, page performance, and content performance, in accordance with applicable requirements relating to cookies and tracking technologies.

6.7 Website Security

To protect the Website and related technical infrastructure and to prevent or detect:

• Misuse.
• Unauthorized access attempts.
• Fraudulent activity.
• Cyberattacks.
• Abnormal technical activity.

6.8 Legal and Regulatory Compliance

To comply with legal and regulatory obligations applicable to the Company or to respond to lawful requests from competent authorities.

6.9 Marketing

We may use contact information to send information relating to products or services of ZADIP GROUP LTD, including Ektefa, where permitted by applicable law.

Recipients may unsubscribe from marketing communications through the methods provided in such communications or by contacting us.

7. Legal Basis for Processing

ZADIP GROUP LTD processes personal data based on the appropriate legal basis for each processing activity in accordance with the Personal Data Protection Law and other applicable laws.

Such legal bases may include:

• The consent of the Data Subject.
• Taking steps at the request of the Data Subject prior to entering into a contractual relationship.
• Compliance with a legal obligation applicable to the Company.
• Pursuing a legitimate interest of the Company, where permitted by law and provided that such interest does not prejudice the rights and interests of the Data Subject.
• Any other legal basis permitted under the Personal Data Protection Law and its Implementing Regulations.

Where processing is based on your consent, you may withdraw that consent in accordance with applicable laws and regulations.

Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.

8. Cookies and Similar Technologies

The Ektefa Website may use cookies and similar technologies to operate the Website, improve the visitor experience, and measure performance.

These may include:

Necessary Cookies

These cookies are required for basic Website functionality, security, and stability.

Preference Cookies

These cookies help remember certain choices or preferences selected by the user.

Analytics and Performance Cookies

These cookies help us understand how visitors interact with Website pages and enable us to analyze and improve Website performance.

Marketing and Advertising Cookies

These cookies may be used to measure the effectiveness of marketing or advertising campaigns and to provide content that is more relevant to users, where such technologies are used and after obtaining any consent required by applicable law.

Visitors may manage cookie preferences through the consent management tool available on the Website, if any, or through browser settings.

Disabling certain cookies may affect the availability or proper functioning of some Website features.

9. Sharing and Disclosure of Personal Data

ZADIP GROUP LTD does not sell the personal data of visitors to the Ektefa Website.

Personal data may be disclosed or shared, to the extent necessary for the purposes described in this Policy, with categories of parties such as:

• Website hosting providers.
• Cloud infrastructure providers.
• Email and communication service providers.
• Customer relationship management systems.
• Analytics and performance measurement providers.
• Marketing service providers, where applicable.
• Cybersecurity service providers.
• Technical support providers.
• Legal advisers, accountants, and auditors where necessary.
• Companies or service providers contracted by ZADIP GROUP LTD to provide supporting services.
• Governmental, regulatory, security, or judicial authorities where disclosure is required or permitted by law.

The Company seeks to limit disclosure to the minimum amount of data necessary for the relevant purpose and in accordance with applicable legal requirements.

10. Transfer of Personal Data Outside the Kingdom

The Ektefa Website or ZADIP GROUP LTD may use certain technology services that may involve hosting or processing personal data outside the Kingdom of Saudi Arabia.

Where personal data is transferred outside the Kingdom, the Company will conduct such transfer in accordance with the Personal Data Protection Law, its Implementing Regulations, and applicable requirements governing cross-border transfers of personal data.

The Company will implement appropriate safeguards and measures to protect personal data as required by applicable law.

11. Location of Data Storage

Personal data collected through the Website may be stored:

• Within systems operated by ZADIP GROUP LTD.
• With contracted hosting or cloud computing service providers.
• Within customer relationship management or communication systems used by the Company.

The location of hosting and processing is determined according to the technology services used, subject to applicable legal requirements governing the storage and transfer of personal data.

12. Data Retention

ZADIP GROUP LTD retains personal data only for as long as necessary to achieve the purposes for which it was collected or for such period as required by applicable laws and regulations.

Retention periods may be determined based on factors including:

• The nature of the data.
• The purpose for which it was collected.
• The existence of a commercial or contractual relationship.
• Applicable legal requirements.
• Record-keeping requirements.
• The need to address potential claims or disputes.
• Security and technical considerations.

Once the purpose for retaining the personal data has ended and there is no legal basis requiring or permitting further retention, the data will be securely destroyed in accordance with applicable legal requirements and in a manner designed to prevent recovery or identification of the Data Subject.

13. Protection and Security of Personal Data

ZADIP GROUP LTD implements appropriate organizational, technical, and administrative measures to protect personal data against risks including:

• Unauthorized access.
• Unlawful disclosure.
• Unauthorized alteration.
• Loss.
• Damage.
• Unlawful use.
• Unlawful destruction.
• Security breaches.

Depending on the nature of the systems and data, security measures may include:

• Access control management.
• Technical security controls.
• Encryption where appropriate.
• Logging and monitoring of technical activities.
• Backups.
• System updates.
• Internal data protection policies and procedures.

However, no electronic method of data transmission or storage can be guaranteed to be completely secure. The Company therefore continuously reviews and improves its security measures in light of the nature of the risks involved.

14. Rights of the Data Subject

Data Subjects have the rights granted to them under the Personal Data Protection Law and its Implementing Regulations, subject to the applicable conditions, restrictions, and exceptions.

These rights include:

14.1 Right to Be Informed

You have the right to know:

• The legal basis for collecting and processing your personal data.
• The purpose of collecting the data.
• The methods used to collect it.
• How it is processed.
• How it is stored.
• The applicable retention period.
• How it is destroyed.
• The parties to whom it may be disclosed.

14.2 Right of Access

You have the right to request access to your personal data held by the Company, subject to applicable legal requirements.

14.3 Right to Obtain Personal Data

You have the right to request a copy of your personal data held by the Company in a clear and readable format, as permitted by law.

14.4 Right to Correction

You have the right to request:

• Correction of inaccurate personal data.
• Completion of incomplete data.
• Updating of outdated data.

14.5 Right to Request Destruction

You have the right to request the destruction of personal data that is no longer required, where permitted by law.

The Company may continue to retain certain data where there is a legal basis requiring or permitting such retention.

14.6 Right to Withdraw Consent

Where the processing of your personal data is based on your consent, you may withdraw that consent at any time in accordance with applicable laws and procedures, unless another legal basis requires continued processing.

14.7 Right to Submit a Complaint

You have the right to submit a complaint regarding the processing of your personal data in accordance with the procedures described in this Policy or to the competent authority as permitted by applicable law.

15. Exercising Your Rights

You may exercise your personal data rights or submit inquiries relating to privacy by contacting ZADIP GROUP LTD at:

Privacy Email:

[email protected]

You may also use the contact details set out at the end of this Policy.

The Company may request appropriate information or documentation to verify the identity of the person submitting the request before acting on it. This is intended to prevent unauthorized disclosure of personal data.

The Company will process requests within the periods and in accordance with the procedures prescribed by applicable laws and regulations.

16. Marketing Communications

Where permitted by law, ZADIP GROUP LTD may send informational or marketing communications relating to Ektefa or other products and services offered by the Company.

Such communications may include:

• Product news.
• New features.
• Educational content.
• Offers.
• Events.
• Webinars.
• Marketing materials.
• Related services.

You may request to stop receiving marketing communications at any time by:

• Using the unsubscribe link provided in the communication, where available.
• Contacting us through the channels provided in this Policy.

A request to stop marketing communications does not necessarily apply to essential communications relating to a request or inquiry that you have submitted to us.

17. Third-Party Websites and Services

The Ektefa Website may contain links to websites, services, or platforms operated by third parties.

When you leave the Ektefa Website and visit an external website, the processing of your personal data will be subject to the privacy policy of the operator of that website.

ZADIP GROUP LTD is not responsible for the privacy practices, content, or data protection measures of external websites that it does not operate.

We recommend reviewing the privacy policy of any external website before providing personal data to it.

18. Access to the Ektefa Platform

The informational Website may contain links or buttons allowing users to access:

• The Ektefa platform.
• The Ektefa application.
• Login portals.
• Other services or products associated with Ektefa.

A distinction must be made between visiting the Ektefa informational Website and using Ektefa’s operational services.

This Privacy Policy applies only to the informational Website.

Personal data processed through the use of the Ektefa platform, applications, or services is subject to the applicable terms, policies, and agreements governing those services.

19. Children’s Data

The Ektefa informational Website is primarily intended for:

• Organizations.
• Business owners.
• Human resources departments.
• Relevant professionals.
• Persons interested in human resources management solutions.

The Website is not directed at children and does not intentionally seek to collect their personal data.

If the Company becomes aware that a child’s personal data has been collected in a manner that does not comply with applicable legal requirements, such data will be handled in accordance with applicable laws and regulations.

20. Changes to this Privacy Policy

ZADIP GROUP LTD may update this Policy from time to time to reflect:

• Changes to the Website.
• Changes to data processing activities.
• The addition or replacement of service providers.
• Technical updates.
• Changes to applicable laws or regulations.
• Regulatory requirements.
• Improvements to data protection practices.

The updated version of this Privacy Policy will be published on the Ektefa Website, and the “Last Updated” date at the top of the Policy will be revised accordingly.

Where a material change requires notice to the Data Subject or renewed consent under applicable law, the Company will take the necessary steps in accordance with applicable legal requirements.

21. Complaints and Objections

If you have an objection or complaint regarding the collection, use, or processing of your personal data through the Ektefa Website, please contact:

ZADIP GROUP LTD

Privacy and Data Protection

Email:

[email protected]

Phone:

920010047

We will review and handle complaints in accordance with the Personal Data Protection Law and its Implementing Regulations.

If your complaint is not resolved or you are not satisfied with the outcome, you may submit a complaint to the competent data protection authority in the Kingdom of Saudi Arabia in accordance with applicable procedures and requirements.

22. Ownership and Trademark

Ektefa is one of the products of ZADIP GROUP LTD, and the Ektefa trademark is a registered trademark owned by ZADIP GROUP LTD.

The independent use of the name “Ektefa” on this Website or in this Policy does not create or imply a separate legal entity from ZADIP GROUP LTD.

ZADIP GROUP LTD remains the legal entity that owns and operates the Website and is responsible for the processing of personal data through it in accordance with applicable laws and regulations.

23. Contact Information

For any inquiry or request relating to this Privacy Policy or the processing of personal data through the Ektefa Website, please contact:

ZADIP GROUP LTD

Product: Ektefa®

Privacy Email:

[email protected]

General Email:

[email protected]

Phone:

920010047

National Address / Business Address:

REMB8647

Kingdom of Saudi Arabia

Ektefa Website:

https://ektefa.net

ZADIP GROUP LTD Website:

https://zadip.sa