Privacy Notice

Privacy Notice
We take your privacy very seriously. Please read this privacy policy carefully as it contains important information on who we are and how and why we collect, store, use and share your Personal Information. We collect, use and are responsible for certain Personal Information about you. When we do so we are subject to the relevant applicable laws including Personal Data Protection Laws ("PDPL") of the Kingdom of Saudi Arabia ("KSA") and we are responsible as 'controller' of that Personal Information for the purposes of those laws. Some of the key terms used in this policy are as below:
We, us, our - Zain Industries 
Company Personal Information - Any information relating to an identified or identifiable individual. 
Special Category Personal Information - Personal Information revealing racial or ethnic origin, political opinions, religious beliefs, philosophical beliefs, or trade union membership; genetic and biometric data; data concerning health, sex life or sexual orientation.
Personal Information we collect about you We may collect and use the following Personal Information about you:
Contact Information
That allows us to communicate with you. For example, your name, address, postal code, telephone number, email address, username and social media account details.
Transactional Information
Which allows us to do business with you or to provide our services to you. For example, your enquiries and correspondence history.
Relationship Information
That allows us to tailor our service to you or to provide you with a personalized experience. For example, your product and service preferences, preferred language, geographical location and other preferences.
Vendor Registration Information
Which allows us to provide a safe and secure service. For example, business license details, company profile, contact details.
This Personal Information is required to provide products and/or services to you. If you do not provide the Personal Information we ask for, it may delay or prevent us from providing products and/or services to you. ## How your Personal Information is collected We collect most of this Personal Information directly from you - in person, by telephone, text or email and/or via our website [and apps]. However, we may also collect information:
From publicly accessible sources, e.g., Companies Registry;
Directly from a third party, e.g., sanctions screening providers; credit reference agencies; customer due diligence providers.
From a third party with your consent, e.g., your bank
From cookies on our website—for more information on our use of cookies, please see our cookie policy
Via our IT systems, e.g. door entry systems and reception logs; automated monitoring of our websites and other technical systems, such as our computer networks and connections, CCTV and access control systems, communications systems, email and instant messaging systems
## How and why we use your Personal Information We collect and process your Personal Information (including, where legally permissible, Special Category Personal Information) for the purposes listed below. Where we are required by law, we will obtain your prior consent to use and process your Personal Information for the following purposes. Otherwise, we will rely on another permitted legal basis (including, but not limited to, our performance of a contract, our legitimate business interests or such other legal basis which is applicable to the processing).
Providing our services to you and managing our contractual obligations and your ongoing relationship with us: We may require your Personal Information to deliver our service or product to you or to provide you with customer support (such as managing your access, helpdesk support, further correspondence is required in relation to our products or services).
Customizing our services to your preferences: We may use your Personal Information to provide you with a personalized service or content, which may be of particular interest or to provide you with special offers and promotions.
Improvement of our services: We may need to improve and develop our services. From time to time, we may need to process your Personal Information to carry out product innovation and testing, analytics, market research and development.
Maintaining secure and safe services and products: We may need to process your Personal Information to preserve and maintain the security of our websites, networks, systems and premises including protection against fraud and malicious security threats.
Financial screening: We may need to process your financial information for security verification purposes such as screening for anti-money laundering, screening sanctions lists or other similar verification lists.
Fulfilling our business obligations: We may need to process your Personal Information to allow us to carry out order management, payment processing, contract management, financial management and website and service administration.
Managing our supply chain and business network: In order to provide our services to you, we may need to process your Personal Information in connection with the utilization of our third-party partner business network.
Corporate activity, including mergers, acquisitions and joint ventures: We may need to process your Personal Information in connection with certain corporate activity, such as a party acquiring all or part of the equity or assets of Albatha or its business operations in the event of a sale, merger, liquidation, dissolution, or other.
To comply with our legal obligations: We may need to process your Personal Information for purposes which are required by applicable law or for providing information required by or relating to audits, enquiries or investigations by regulatory bodies.
If we process your personal information for the purpose of sending you marketing communications and you no longer wish to receive these communications, you may opt out at any time by clicking on the "opt out" links contained in the received email. ## Who we share your Personal Information with We routinely share Personal Information with:
1
Third Parties
We may use third parties to provide or perform services and functions on our behalf. We may make Personal Information available to these third parties, to perform these services and functions. Any processing of that Personal Information will be on our instructions and compatible with the original purposes.
2
As Required by Law
We may also make Personal Information concerning individuals available to public or judicial authorities, law enforcement personnel and agencies as required by law, including to meet national security or law enforcement requirements. Where permitted by law, we may also disclose such information to third parties (including legal counsel) when necessary for the establishment, exercise or defense of legal claims or to otherwise enforce our rights, protect our property or the rights, property or safety of others, or as needed to support external audit, compliance and corporate governance functions.
3
Corporate activity, including mergers, acquisitions and joint ventures
Personal Information may be transferred to a party (and its professional advisers) acquiring all or part of the equity or assets of Albatha Group or its business operations in the event of a sale, merger, liquidation, dissolution, or other.
4
Affiliates
We may also transfer and share such information to Albatha affiliates in compliance with applicable law.
We only allow our service providers to handle your Personal Information if we are satisfied, they take appropriate measures to protect your Personal Information. We also impose contractual obligations on service providers relating to ensure they can only use your Personal Information to provide services to us and to you. They will also be bound by confidentiality obligations. ## Where your Personal Information is stored and transferred Personal Information may be held at our offices or servers in the United Arab Emirates and those of our group companies, third party agencies, service providers, representatives and agents as described above (see above: 'Who we share your Personal Information with'). In accordance with the PDPL, Personal Information can be transferred outside the KSA where the transfer is being made to a jurisdiction that has adopted personal data protection legislation, provided the legislation in question reflects the most important provisions, measures, controls, conditions and rules for protecting the privacy and confidentiality of Personal Information, as well as honoring the data subject rights afforded by the laws and provisions relating to the enforcement of the relevant requirements by a regulatory or judicial authority. In addition, transfers may occur to countries with whom the KSA has signed a multi-lateral or bilateral agreement for the protection of personal data. For our legitimate business interests, we may need to transfer your Personal Information to locations outside of the jurisdiction in which you provide it. We will take all steps reasonably necessary to ensure your Personal Information is treated securely, to prevent unauthorized access or disclosure and in accordance with provisions herein. ## How long will your Personal Information be kept We will keep your Personal Information while you have any transactions with us or we are providing products and/or services to you. Thereafter, we will keep your Personal Information for as long as is necessary:
To respond to any questions, complaints or claims made by you or on your behalf;
To show that we treated you fairly;
To keep records required by law.
As the purpose for processing the Personal Information can vary, the retention period for different categories of Personal Information can also vary. We determine our retention periods in accordance with legal and operational requirements. ## Your rights You have the following rights, which you may exercise:
A right for you to access your Personal Information held by us;
A right to request that we rectify, restrict, erase or delete the Personal Information held or processed by us;
You may have a right to ask for further information about how we are using your Personal Information;
A right to transfer your Personal Information to another controller;
You may have a right to object to the processing of your Personal Information, including a right to opt-out or object to direct marketing;
A right to object to decisions based solely on automated processing (such as profiling) which produces legal effects;
A right to receive your Personal Information in a structured, commonly used and machine readable format and/or transmit that data to a third party or another data controller in accordance with the Personal Data Protection Laws.
A right to withdraw your consent from us at any time if we are relying on your consent to process your Personal Information.
The right to be notified of any breach or infringement of your personal data and the actions that have been taken by us in this regard.
For further information on each of those rights, including the circumstances in which they apply, please contact us. 
Keeping your Personal Information secure
We have appropriate security measures to prevent Personal Information from being accidentally lost or used or accessed unlawfully. We limit access to your Personal Information to those who have a genuine business need to access it. Those processing your information will do so only in an authorized manner and are subject to a duty of confidentiality. We continually test our systems and are ISO 27001 certified, which means we follow top industry standards for information security.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
How to complain 
We hope that we or our Data Protection Officer can resolve any query or concern you may raise about our use of your Personal Information. ## Changes to this privacy policy This privacy notice was published on 21 May 2025 and last updated on 20 May 2025. We reserve the right to change, modify, and update this Privacy Notice at any time. If we propose to make any material changes, we will notify you by means of a notice on this page. Please check periodically to ensure that you have reviewed the most current notice. ## How to contact us Please contact us and/or our Data Protection Officer by email if you have any questions about this privacy notice or the Personal Information, we hold about you. Our contact details are shown below:
Cookies Policy 
When you visit our websites, we and our service provider(s) may collect certain information by automated means, using the following technologies: cookies, local storage (HTML5). For ease of reference, we have referred to these technologies as "cookies" throughout. You have a variety of tools to control the use of cookies. Certain sections may offer you detailed options for controlling the use of cookies. You can also use the controls in your internet browser to limit cookies. The summary below includes further detailed information about our use of cookies and explains how you can control the use of these technologies via your browser settings.
What are Cookies?
Cookies are small text files that a website transfers to your computer or another device through your web browser when you visit a website. We may use cookies to make website usage more efficient, and to tailor your browsing preferences and improve the functionality of our websites. Cookies can be used for performance management and to collect analytical information to show how our website is being used. They can also be used for functionality management, enabling us to make the user's visit more efficient by, for example, remembering language preferences and log-in details. There are two types of cookies:
a. Session cookies: deleted from your device after you leave the website; and
b. Persistent cookies: remain on your device longer or until you delete it manually.
Server Logs: Our server logs may also collect information about how users utilize the websites (usage data). We may monitor and utilize usage data to measure the website's performance and activity, improve the website's design and functionality or for security purposes.
How to Modify Cookie Settings: You can change your browser settings to block or notify you when you receive a cookie, delete cookies or browse a website using your browser's anonymous usage setting. Please refer to your browser instructions or help screen to learn more about how to adjust or modify your browser settings. If you do not agree to our use of cookies or similar technologies which store information on your device, you should change your browser settings accordingly. You should understand that some features of our websites may not function properly if you do not accept cookies or these technologies.
Consent to Cookies: Where required by applicable law, you will be asked to consent to certain cookies and similar technologies before we use or install them on your computer or other device.