Privacy Policy

1. Purpose

Marcom is committed to the protection of personal data. This policy governs the handling of personal data collected through our website, ensuring compliance with the Personal Data Protection Law of Saudi Arabia and the UAE's Federal Decree-Law No. 45 of 2021 on Personal Data Protection.

2. Scope

This policy applies to all personal data processed by Marcom, collected through the website from users residing in or outside Saudi Arabia and the UAE.

3. Policy Statement

This policy describes the roles of using data in terms of:

• Data Collection
• Data Usage
• Data Security
• Data Access and Correction
• Contact MARCOM

4. Data Collection

Types of Data Collected

We collect personal data including, but not limited to, names, addresses, email addresses, payment information, and geographical locations.

Method of Collection

Data is collected through online forms, cookies, and during user interactions such as event registrations and blog posts.

Transparency and Notification

Before Collecting Personal Data

Consent Requirements

Saudi Law: As dictated by Article 5 of the PDPL, explicit consent must be obtained for any processing activities that are not exempted by law.

UAE Law: According to Article 6 of the Federal Decree-Law, consent must be specific, informed, and an unequivocal affirmative action that indicates agreement to the processing of personal data.

Notification of Data Subject Rights

Saudi Law: In accordance with Article 4 of the PDPL, data subjects are informed of their rights to access, correct, and request the deletion of their data.

UAE Law: Under Articles 13 to 18 of the Federal Decree-Law, data subjects are informed about their comprehensive rights including access, rectification, erasure, and the right to object to data processing.

Disclosure of Data Transfers

Saudi Law: Conditions under which personal data may be transferred outside the kingdom are outlined in Article 15 of the PDPL, requiring adequate protection measures.

UAE Law: Article 22 of the Federal Decree-Law details the conditions for cross-border processing and sharing of personal data, ensuring adequate protection measures are in place.

5. Data Usage

Purposes for Data Collection

We collect personal data for several specific purposes, including facilitating online registrations, improving website content, managing customer interactions, and communicating with subscribers regarding our services and events.

Direct Marketing

Saudi Law: According to Article 10 of the PDPL, personal data may be used for direct marketing purposes only with the explicit consent of the data subject. We ensure that all marketing activities are conducted in compliance with this requirement.

UAE Law: In line with Article 21 of the Federal Decree-Law, personal data will be used for marketing only after obtaining clear and explicit consent from the data subjects. This includes providing detailed information about the nature of marketing and the frequency of communications.

Analytical Use

Personal data may also be used to analyze website usage patterns and user preferences to enhance the usability and effectiveness of our website. This analysis is conducted in a way that ensures the anonymity and privacy of our users.

Legal Compliance and Law Enforcement

Saudi Law: Under Article 5 of the PDPL, we may process personal data without prior consent if it is necessary for compliance with a legal obligation to which we are subject.

UAE Law: As stipulated in Article 4 of the Federal Decree-Law, personal data may be processed if it is necessary for compliance with a legal obligation or for the performance of a task carried out in the public interest.

Data Minimization and Limitation

We adhere to the principles of data minimization and limitation, ensuring that only the data necessary for the specified purposes are collected and processed, as required by Article 4 of the PDPL and Article 5 of the Federal Decree-Law.

6. Data Security

Security Measures

Implementing robust measures including 256-bit encryption to protect personal data from unauthorized access, alteration, and destruction.

Data Integrity

Ensuring data accuracy, completeness, and timeliness as required by Article 14 of the PDPL and Article 5 of the Federal Decree-Law.

7. Data Access and Correction

Updating Information

Individuals have the right to access, correct, or update their personal data at any time without charge.

Modification and Deletion

Data subjects may request modifications or deletion of their personal data in compliance with Article 5 of the PDPL and Articles 15 and 17 of the Federal Decree-Law.

8. Rights of Data Subjects

Comprehensive Rights

Data subjects have rights to access, correction, deletion, and restriction of processing as detailed in Articles 4 and 5 of the PDPL and Articles 13 to 18 of the Federal Decree-Law.

Consent Withdrawal

Data subjects have the right to withdraw consent at any time, as stipulated in Article 5 of the PDPL and Article 6 of the Federal Decree-Law, affecting the processing of their personal data.

9. Data Sharing

Sharing Practices

Personal data may be shared with third-party service providers under strict confidentiality agreements to assist with our business operations.

Legal Compliance

We may also disclose personal data to comply with legal obligations or in response to lawful requests by public authorities.

Transfers

Any transfer of personal data outside of Saudi Arabia and UAE will comply with PDPL and Federal Decree-Law requirements, ensuring an adequate level of data protection.

10. Contact Information

For inquiries, exercising data subject rights, or concerns regarding our privacy practices, please contact:

11. Changes to the Policy

This policy is reviewed periodically and may be updated to reflect changes in our practices or in response to legislative changes. Users will be notified of significant changes.

12. Effective Date

This policy is effective as of June 1, 2024.