Privacy Policy
Effective Date: March 20, 2025
Last Updated: March 20, 2025
This Privacy Policy has been updated to comply with the Saudi Personal Data Protection Law (PDPL) and other local regulations applicable in Saudi Arabia, including cultural considerations and local data handling practices.
Contents
PERSONAL INFORMATION WE COLLECT & WHY WE COLLECT IT
INFORMATION COLLECTED AUTOMATICALLY
HOW LONG WE KEEP YOUR PERSONAL INFORMATION
HOW WE DISCLOSE PERSONAL INFORMATION
RIGHTS OF DATA SUBJECTS UNDER SAUDI LAW
INFORMATION RELATING TO CHILDREN
INFORMATION ABOUT ONLINE CHATS
PERSONAL INFORMATION WE COLLECT & WHY WE COLLECT IT
In this Policy, “personal information” means any information that identifies, relates to, describes, or is reasonably capable of being associated with an individual, as defined under the Saudi Personal Data Protection Law (PDPL). Personal information does not include anonymized or aggregated data that cannot be used to identify an individual.
We collect the following categories of personal information to provide our Services and for the purposes described below:
Category of Personal Information
Identifiers and Personal Records
- Includes name, address, phone number, email address, IP address, and account details.
- Sources: Directly from you, your use of our Services, or vendors assisting us in providing Services.
- Purpose:
- To provide requested Services.
- Communication and customer support.
- Marketing and promotions (with explicit consent as per PDPL).
- Ensuring the safety, security, and integrity of our Services.
- Detecting and preventing fraudulent or illegal activities.
Note: Sensitive identifiers such as national ID numbers, passport numbers, or health information will only be collected with explicit consent and processed in compliance with Saudi PDPL requirements.
Characteristics of Protected Classifications
- Includes gender, age, marital status, and citizenship.
- Sources: Directly from you or vendors assisting us in providing Services.
- Purpose:
- To provide requested Services.
- Personalizing content and improving user experience.
- Marketing and promotions (with explicit consent).
Commercial Information
- Includes records of products or services purchased, registration details, and student progress reports.
- Sources: Directly from you or your use of our Services.
- Purpose:
- To provide requested Services.
- Improving our Services and tailoring content.
- Ensuring the integrity and security of our Services.
Internet or Other Electronic Network Activity Information
- Includes browsing history, device information, and interaction data with our website and applications.
- Sources: Automatically collected when you use our Services.
- Purpose:
- To improve our Services and user experience.
- Detecting and preventing fraudulent or unauthorized access.
Audio, Visual, or Similar Information
- Includes recordings or visuals during Mathnasium sessions (if applicable).
- Sources: Directly from you during sessions.
- Purpose:
- To ensure the quality and safety of sessions.
- Internal training and education purposes.
Professional or Employment-Related Information
- Includes employment history or professional details (for franchise applicants).
- Sources: Directly from you.
- Purpose:
- To process franchise applications.
- Detecting and preventing fraudulent activity.
Inferences
- Includes profiles or preferences inferred from other personal information.
- Sources: Derived from other data we collect.
- Purpose:
- To personalize our Services and improve user experience.
- Marketing and promotions (with explicit consent).
We may also collect, use, and disclose personal information as follows:
We may collect, use, and disclose personal information as required by Saudi law, regulation, or court order; to respond to governmental and/or law enforcement requests in accordance with Saudi Personal Data Protection Law (PDPL); to identify, contact, or take legal action against someone who may be causing harm or interfering with our (or others’) rights or property; to support any actual or threatened claim, defense, or declaration in a case or before any jurisdictional and/or administrative authority, arbitration, or mediation panel; or for other purposes described in any other privacy notice or with your explicit consent.
Additionally, we may use and disclose personal information to third parties in connection with a sale, assignment, merger, reorganization, or other corporate transaction relating to all or part of our business, provided that such transfer complies with the PDPL and other applicable regulations in Saudi Arabia.
INFORMATION COLLECTED AUTOMATICALLY
As indicated in the chart above, we collect certain types of personal information automatically when you use our Services. For example, we use cookies and other tracking technologies (such as web beacons) to collect and store information about your interactions with our website, including information about your browsing behavior. Our website may also support third-party cookies placed by our service providers and third parties, such as advertising partners, provided such usage complies with Saudi PDPL requirements for consent and transparency.
Cookies and Other Tracking Technologies
Cookies are small files that a website transfers to your device through a web browser that enable the site’s or a third party’s systems to recognize your device and capture and remember certain information. Web beacons (also known as tracking pixels) are tiny graphics embedded invisibly on a webpage or in an email that may be used to deliver or communicate with cookies, to count users who have visited certain pages, and to understand usage patterns.
In general, our website uses cookies and other tracking technologies for the following purposes:
- Where necessary to run our website.
- To optimize the functionality of our website.
- For analytics purposes.
- For purposes of ad targeting and marketing (with your explicit consent).
- To determine if our email messages have been opened and acted upon.
Cookies vary in how long they last. “Session cookies” terminate shortly after you end your internet session. “Persistent cookies” are stored on your device until a set expiration date. We use both session cookies and persistent cookies on our website.
If you do not want to have cookies placed on your device, you can adjust your settings within our cookie preference center (Cookies Settings) or set your browser to refuse cookies before accessing our website. Please review your browser’s Help menu for instructions, or visit https://allaboutcookies.org/ for more information about cookies.
Analytics
We use analytics tools, including but not limited to Google Analytics, to analyze how you interact with our website. These tools may collect information such as your IP address, location, operating system, access time, duration of visit, and actions you take on our website.
Google Analytics is owned and controlled by Google LLC. Data collected by Google is subject to its privacy policy. You may opt out of having your website activity made available to Google Analytics by installing the Google Analytics browser add-on, available here.
When using analytics tools, we ensure compliance with Saudi PDPL by anonymizing personal data where feasible and ensuring that international data transfers (if any) meet legal requirements under Saudi law.
Session Monitoring
We may also use third-party analytics tools to track visitor click/touch, movement, scroll, and keystroke activity on our website. When you interact with us online, information related to your browsing behavior may be collected by us and our service providers for the purpose of improving our Services and user experience.
Online Advertising
We collect some information about you to target advertisements to you when you browse the internet or use social media. We only use advertising cookies or similar technologies with your explicit consent, as required under Saudi PDPL.
To set your preferences with respect to the use of advertising cookies on our website, please visit our cookie preference center (Cookies Settings).
You can personalize the ads you receive or opt out of ads from Google by visiting the Google Ads Settings page. For more information about the use of Bing Ads or Microsoft Advertising on our website, please review the Microsoft Privacy Statement.
Additional options for opting out of interest-based advertising can be found at:
Do Not Track Signals
Your web browser may have settings that allow you to transmit a “Do Not Track” signal when you visit various websites or use online services. In compliance with Saudi PDPL, we respect your choices regarding tracking technologies. If you enable “Do Not Track” signals in your browser, we will ensure that tracking technologies are disabled where feasible.
To learn more about “Do Not Track” signals, visit allaboutdnt.com.
How We Use Personal Information
We collect and process personal information in accordance with the Saudi Personal Data Protection Law (PDPL) and other applicable regulations in Saudi Arabia. We will only use your personal information for purposes that are lawful, transparent, and necessary. These purposes include:
- Managing our operations, maintaining your relationship with us, or fulfilling the purpose for which the information was collected.
- Carrying out a disclosed purpose that is compatible with the context in which the personal information was collected.
- Protecting or defending our rights, property, or interests, in compliance with applicable laws and regulations.
- Retaining personal information as required or permitted by Saudi laws or regulations.
HOW WE DISCLOSE PERSONAL INFORMATION
We may disclose personal information to affiliates, service providers, and contractors for business or operational purposes, in accordance with the Saudi Personal Data Protection Law (PDPL). The following table summarizes the categories of personal information we may disclose and the purposes for disclosure:
| Category of Personal Information | Purposes for Disclosure |
| Identifiers (e.g., name, ID number, contact details) | – Performing services on our behalf (e.g., delivering content, processing payments, supporting promotions, and providing technical, analytical, web hosting, and cloud hosting services). – Ensuring security and integrity of personal information. – Detecting, investigating, or protecting against malicious, deceptive, fraudulent, or illegal activity. |
| Personal Records (e.g., employment or financial info) | – Performing services on our behalf. – Ensuring compliance with applicable laws and regulations. |
| Commercial Information (e.g., transaction history) | – Performing services on our behalf. – Auditing and ensuring compliance with applicable laws. – Detecting and preventing fraudulent or illegal activity. |
| Internet or Network Activity (e.g., browsing history, device information) | – Debugging to identify and repair errors. – Ensuring security and integrity of personal information. – Detecting and preventing fraudulent or illegal activity. |
| Geolocation Data | – Performing services on our behalf. – Ensuring security and integrity of personal information. – Detecting and preventing fraudulent or illegal activity. |
| Inferences (e.g., preferences, characteristics) | – Providing personalized services and improving user experience. – Detecting and preventing fraudulent or illegal activity. |
| Protected Class Characteristics (e.g., gender, nationality) | – Performing services on our behalf. – Ensuring compliance with Saudi labor and anti-discrimination laws. |
| Audio, Electronic, or Visual Information | – Performing services on our behalf. – Ensuring security and integrity of personal information. – Detecting and preventing fraudulent or illegal activity. |
| Professional or Employment-Related Information | – Performing services on our behalf. – Ensuring compliance with Saudi labor laws and regulations. |
COMPLIANCE WITH SAUDI REGULATIONS
We are committed to complying with the Saudi Personal Data Protection Law (PDPL) and other applicable regulations in Saudi Arabia. This includes:
- Obtaining Consent: We will obtain your explicit consent before collecting, processing, or disclosing your personal information, except where consent is not required under Saudi law (e.g., for legal or contractual obligations).
- Data Minimization: We will only collect personal information that is necessary for the purposes disclosed.
- Data Security: We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, or misuse.
- Data Retention: We will retain your personal information only for as long as necessary to fulfill the purposes for which it was collected or as required by Saudi law.
- Cross-Border Data Transfers: If we transfer your personal information outside Saudi Arabia, we will ensure that the transfer complies with the requirements of the Saudi PDPL, including obtaining necessary approvals from the relevant authorities.
YOUR RIGHTS UNDER SAUDI LAW
Under the Saudi Personal Data Protection Law (PDPL), you have the following rights:
- Access: You have the right to request access to your personal information that we hold.
- Correction: You have the right to request correction of inaccurate or incomplete personal information.
- Deletion: You have the right to request deletion of your personal information, subject to legal or regulatory requirements.
- Objection: You have the right to object to the processing of your personal information for specific purposes, such as direct marketing.
- Withdrawal of Consent: Where consent is required, you have the right to withdraw your consent at any time.
SALES AND SHARING OF PERSONAL INFORMATION
We do not sell personal information in exchange for money. However, in certain cases, the ways in which we share personal information for advertising, analytics, or with our affiliates may involve the transfer of personal information to third parties. In compliance with the Saudi Personal Data Protection Law (PDPL), we ensure that such transfers are lawful, transparent, and limited to the purposes disclosed below.
The categories of personal information we may share include:
- Identifiers
- Personal Records
- Commercial Information
- Internet or Other Electronic Network Activity Information
- Geolocation Data
- Inferences
The types of third parties to which personal information may be shared include third-party advertisers, analytics vendors, and our affiliates. The purposes for sharing this information include:
- Showing you relevant advertisements while you browse the internet or use social media.
- Marketing, advertising, analytics, or similar purposes.
- Providing operational, analytical, and other support for our affiliates.
We do not knowingly share the personal information of individuals under the age of 18 without the consent of their legal guardian, in compliance with Saudi regulations. Additionally, we do not share personal information obtained for text messaging purposes (including opt-in consent data) with any third parties for their own marketing purposes.
YOUR RIGHTS UNDER SAUDI LAW
Under the Saudi Personal Data Protection Law (PDPL), you have the following rights regarding your personal information:
Right to Access
You have the right to request access to the personal information we have collected about you, including:
- The categories of personal information we have collected.
- The purposes for which we process your personal information.
- The categories of recipients to whom we disclose personal information.
- The specific pieces of personal information we have collected about you.
Right to Delete
You have the right to request the deletion of personal information we have collected about you, subject to certain exceptions as permitted by Saudi law. If we use deidentification to satisfy a deletion request, we commit to maintaining and using the information in deidentified form and will not attempt to reidentify the information.
Right to Correct
If you believe that personal information we maintain about you is inaccurate, you may submit a request for us to correct that information. Upon receipt of a verifiable request, we will use commercially reasonable efforts to correct the information as directed.
Right to Object to Processing
You have the right to object to the processing of your personal information for specific purposes, such as direct marketing or automated decision-making, unless the processing is required by law or necessary for the performance of a contract.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal information in certain circumstances, such as when you contest the accuracy of the information or object to its processing.
Right to Withdraw Consent
Where we rely on your consent to process your personal information, you have the right to withdraw your consent at any time. However, this will not affect the lawfulness of any processing carried out before your withdrawal.
SUBMITTING REQUESTS RELATING TO YOUR PERSONAL INFORMATION
To exercise any of the rights described above, please contact us at [+966 55 310 6030 ]. You may be required to verify your identity by providing certain information that matches our records. If you designate an authorized representative to make a request on your behalf, we may require additional verification to ensure the request is legitimate.
RIGHT TO NON-DISCRIMINATION
We will not discriminate against you for exercising any of your rights under the Saudi Personal Data Protection Law (PDPL). This means that we will not deny you services, charge you different prices, or provide a different level or quality of services based on your decision to exercise your privacy rights.
DATA TRANSFERS OUTSIDE SAUDI ARABIA
If we transfer your personal information outside Saudi Arabia, we will ensure that the transfer complies with the requirements of the Saudi Personal Data Protection Law (PDPL). This includes obtaining necessary approvals from the relevant authorities and ensuring that the recipient country provides an adequate level of protection for personal data.
SAUDI ARABIA PRIVACY RIGHTS
This section provides additional disclosures for residents of Saudi Arabia under the Saudi Personal Data Protection Law (PDPL). We are committed to protecting your personal information and ensuring your rights are respected in accordance with applicable Saudi regulations.
Right to Opt Out of Certain Processing Activities
You have the right to object to certain uses of your personal information, including:
- Targeted Advertising: You may object to the processing of your personal information for purposes of direct marketing or targeted advertising.
- Automated Decision-Making: You may object to profiling or automated decision-making that produces significant effects concerning your economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
To exercise your right to opt out of targeted advertising or automated decision-making, please contact us at [+966 55 310 6030 ]. We will process your request in accordance with Saudi regulations and ensure that your personal information is no longer used for such purposes.
Right to Access and Data Portability
You have the right to:
- Confirm whether we are processing your personal information.
- Access your personal information and obtain a copy of the personal information we hold about you.
- Request that your personal information be provided to you in a portable format, where technically feasible.
Right to Delete
You have the right to request the deletion of your personal information, subject to certain exceptions permitted under Saudi law. For example, we may retain personal information if it is required to comply with legal obligations or to establish, exercise, or defend legal claims.
If we use deidentification to satisfy a deletion request, we commit to maintaining and using the information in deidentified form and will not attempt to reidentify the information.
Right to Correct
If you believe that personal information we maintain about you is inaccurate or incomplete, you have the right to request that we correct or update the information. Upon receipt of a verifiable request, we will use commercially reasonable efforts to correct the information as directed.
Right to Object to Processing
You may object to the processing of your personal information in certain circumstances, such as when the processing is not necessary for compliance with legal obligations or the performance of a contract.
Right to Appeal
If we are unable to process your request relating to your personal information, we will provide you with an explanation for the denial. If you believe your request was denied in error, you have the right to appeal the decision. To submit an appeal, please contact us at [+966 55 310 6030 ].
SUBMITTING REQUESTS RELATING TO YOUR PERSONAL INFORMATION
If you are a resident of Saudi Arabia, you have the right to submit certain requests relating to your personal information as described above. To exercise these rights, please contact us
[+966 55 310 6030]
Please note that we may need to authenticate your identity before processing your request. For authentication, you may be asked to provide 2-3 pieces of personal information that we will match against our records to verify your identity. If you designate an authorized representative to make a request on your behalf, we may require additional verification to ensure the request is legitimate.
INTERNATIONAL VISITORS
If you are accessing our services from outside Saudi Arabia, please be aware that your personal information may be transferred to and stored on servers located outside of Saudi Arabia. We ensure that any such transfers comply with the requirements of the Saudi Personal Data Protection Law (PDPL), including obtaining necessary approvals from the relevant authorities and ensuring that the recipient country provides an adequate level of protection for personal data. By using our services, you acknowledge that your personal information may be processed in jurisdictions with data protection laws that differ from those in Saudi Arabia.
INFORMATION RELATING TO CHILDREN
We do not knowingly collect personal information from individuals under the age of 18 without first obtaining parental or guardian consent, in compliance with the Saudi Personal Data Protection Law (PDPL). If we become aware that an individual under the age of 18 has provided us with personal information without parental consent, we will use commercially reasonable efforts to delete that information from our records.
Our services may allow you to interact with other websites or online platforms, such as enabling you to “like” or “share” content from our services on social media platforms (“Social Features”). If you choose to use Social Features, the information you share may be publicly displayed, and others may have access to certain information about you and your use of our services. Similarly, if you interact with us through Social Features (e.g., by “liking” or “following” our page on a social media platform), we may have access to information about you, such as your profile name or public posts. Please note that if you mention or comment about us or our services on a social media platform, that platform may allow us to publish your post on our services.
If you no longer wish to receive promotional email communications from us, you can unsubscribe by clicking on the “unsubscribe” link found in our promotional email messages. If you opt out of promotional emails, we may still send you email messages related to your account or services you have requested from us. Opting out of promotional emails will not affect the level or quality of service we provide to you.
Information About Online Chats
Our services may include online chat features to assist with answering your questions and providing relevant information. When you participate in an interactive chat, either with a virtual or live agent, the contents of the chat may be captured and stored as a transcript. By using an online chat feature, you acknowledge that the information obtained through the chat may be processed by our vendors to provide services on our behalf, in compliance with the Saudi Personal Data Protection Law (PDPL).
We have implemented reasonable technical and organizational measures to protect your personal information from accidental loss, unauthorized access, use, alteration, or disclosure, in compliance with the Saudi Personal Data Protection Law (PDPL). While we strive to safeguard your information, please note that transmission of data over the internet is not completely secure, and we cannot guarantee the absolute security of your information.
If you have any questions or concerns regarding this Privacy Policy or the treatment of your personal information, please contact us using the following details:
- Email: [email protected]
- Phone: [+966 55 310 6030]
- Mailing Address: [ALOLAYA,URUBAHROAD • RIYADH,SAUDIARABIA]
