Privacy Policy page

1. Introduction

This Privacy Policy outlines how AMS2 ("we," "us," or "our") collects, uses, protects, and shares the personal information of users ("you" or "your") who visit and use the AMS2 website (the "Website"). This policy is designed to comply with the relevant privacy laws and regulations of the Kingdom of Saudi Arabia, including, but not limited to, the Personal Data Protection Law (PDPL) and any related implementing regulations. We are committed to protecting your privacy and ensuring the security of your personal data. This policy applies to all users of the Website, regardless of their location.

2. Definitions

·         Personal Data: Any data relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

·         Processing: Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

·         Controller: The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. AMS2 is the controller of your personal data.

·         Processor: A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

·         PDPL: The Personal Data Protection Law of Saudi Arabia.

·         Website: The AMS2 website.

3. Data Collection

We collect personal data in several ways:

3.1. Information You Provide Directly

We collect information you provide directly to us through the Website. This may include:

·         Contact Information: Name, email address, phone number, physical address.

·         Account Information: Username, password (encrypted), profile information (if applicable).

·         Communication Data: Information you provide when you contact us, such as through contact forms, email, or chat.

·         Transaction Data: Information related to purchases or services you request, including payment information.

·         Content: Any content you submit to the Website, such as comments, reviews, or forum posts.

3.2. Information Collected Automatically

We automatically collect certain information when you visit the Website:

·         Log Data: IP address, browser type, operating system, referring URLs, pages viewed, and access times.

·         Cookies and Similar Technologies: We use cookies, web beacons, and other tracking technologies to collect information about your browsing behavior. This includes information about the pages you visit, the links you click, and other actions you take on the Website.

·         Device Information: Device type, operating system, and unique device identifiers.

3.3. Information from Third Parties

We may receive information about you from third parties, such as:

·         Social Media Platforms: If you interact with us through social media platforms, we may collect information from your social media profile.

·         Business Partners: We may receive information from our business partners, such as payment processors.

4. Purposes of Data Processing

We process your personal data for the following purposes:

·         Providing and Improving the Website: To operate and maintain the Website, provide its features, personalize your experience, and improve our services.

·         Communication: To communicate with you, respond to your inquiries, provide customer support, and send you updates, newsletters, and promotional materials (with your consent, where required).

·         Transactions: To process your orders, provide services, and manage your account.

·         Security: To protect the security and integrity of the Website, prevent fraud, and comply with legal obligations.

·         Analytics: To analyze Website usage, track trends, and gather demographic information to improve our services and understand our users.

·         Compliance: To comply with legal and regulatory requirements, including the PDPL.

·         Marketing: With your consent, to send you marketing communications about our products and services.

5. Legal Basis for Processing

We process your personal data based on the following legal bases:

·         Consent: When you provide your consent to the processing of your personal data for specific purposes, such as receiving marketing communications. You have the right to withdraw your consent at any time.

·         Contract: When processing is necessary for the performance of a contract with you, such as providing services or processing orders.

·         Legitimate Interests: When processing is necessary for our legitimate interests, such as improving the Website, preventing fraud, and ensuring the security of our systems, provided that these interests are not overridden by your rights and freedoms.

·         Legal Obligation: When processing is necessary to comply with our legal obligations, such as complying with the PDPL and other applicable laws.

6. Data Sharing and Disclosure

We may share your personal data with the following categories of recipients:

·         Service Providers: We may share your personal data with third-party service providers who assist us in providing services, such as hosting, payment processing, analytics, and marketing. These service providers are contractually obligated to protect your personal data and use it only for the purposes we specify.

·         Business Partners: We may share your personal data with our business partners to provide you with products, services, or promotions, if you have consented to such sharing.

·         Legal Authorities: We may disclose your personal data if required by law, court order, or governmental regulation, or if we believe it is necessary to protect our rights, property, or safety, or the rights, property, or safety of others.

·         Affiliates: We may share your personal data with our affiliates for business and operational purposes.

·         Merger or Acquisition: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity. We will notify you of any such change in ownership or control of your personal data.

We will not sell your personal data to third parties.

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. The retention period will vary depending on the type of data and the purpose of processing.

·         Account Data: Retained for as long as your account is active or as needed to provide you services. We may retain some data after account closure if necessary to comply with legal obligations, resolve disputes, or enforce our agreements.

·         Contact Information: Retained for as long as necessary to communicate with you and provide customer support.

·         Transaction Data: Retained for the duration necessary for processing the transaction and as required by tax and accounting regulations.

·         Log Data: Retained for a limited period, typically for security and troubleshooting purposes.

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction. These measures include:

·         Access Controls: We restrict access to your personal data to authorized personnel

·         Data Backup and Recovery: We implement data backup and recovery procedures to ensure the availability of your data.

·         Employee Training: We provide regular training to our employees on data privacy and security best practices.

·         Physical Security: We maintain physical security measures to protect our data centers and other facilities.

Despite these measures, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee the absolute security of your personal data.

9. Your Rights

Under the PDPL, you have the following rights regarding your personal data:

·         Right to Access: You have the right to request access to your personal data that we hold.

·         Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.

·         Right to Erasure (Right to be Forgotten): You have the right to request that we erase your personal data under certain circumstances.

·         Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data under certain circumstances.

·         Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

·         Right to Object: You have the right to object to the processing of your personal data under certain circumstances, including for direct marketing purposes.

·         Right to Withdraw Consent: If we are processing your personal data based on your consent, you have the right to withdraw your consent at any time.

·         Right to Lodge a Complaint: You have the right to lodge a complaint with the relevant data protection authority in Saudi Arabia, if you believe that we have violated your rights under the PDPL.

To exercise any of these rights, please contact us using the contact information provided in Section 13. We will respond to your request within a reasonable timeframe, as required by the PDPL.

10. Cookies and Similar Technologies

We use cookies and similar technologies to collect information about your browsing behavior on the Website.

·         What are cookies? Cookies are small text files that are stored on your device when you visit a website. They are used to remember your preferences, track your activity, and provide personalized content.

·         Types of cookies we use:

o   Essential Cookies: These cookies are necessary for the operation of the Website and enable you to use its features.

o   Performance Cookies: These cookies collect information about how you use the Website, such as the pages you visit and the links you click. This information is used to improve the performance of the Website.

o   Functionality Cookies: These cookies remember your preferences, such as your language or region, to provide a more personalized experience.

o   Advertising Cookies: These cookies are used to deliver targeted advertising to you.

·         How to manage cookies: You can control cookies through your browser settings. You can block or delete cookies, but this may affect your ability to use certain features of the Website.

11. International Data Transfers

Your personal data may be transferred to and processed in countries outside of Saudi Arabia. We will ensure that any such transfers comply with the requirements of the PDPL and other applicable laws. We will take appropriate measures to ensure the security of your personal data during international transfers, such as using standard contractual clauses approved by the relevant authorities.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post any changes on the Website and update the "Last Updated" date at the top of this policy. We encourage you to review this Privacy Policy periodically to stay informed about our data privacy practices. Your continued use of the Website after any changes to this Privacy Policy constitutes your acceptance of the revised policy.

13. Contact Information

If you have any questions or concerns about this Privacy Policy or our data privacy practices, please contact us at:

·         Email: info@ams2.com.sa

·         Address: RAYA4544 , Riyadh, Saudi Arabia

14. Compliance with Saudi Arabian Laws

This Privacy Policy is designed to comply with the laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL). We are committed to protecting your personal data and ensuring that our data privacy practices are in accordance with the law. We regularly review and update our policies and procedures to ensure compliance with the PDPL and other applicable laws.

15. Children's Privacy

The Website is not intended for use by children under the age of 12. We do not knowingly collect personal data from children. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us immediately using the contact information provided in Section 13. We will take steps to delete such information from our systems.

16. Data Breach Notification

In the event of a data breach that compromises your personal data, we will notify the relevant authorities and, if required by law, you, within the timeframe specified by the PDPL. We will take appropriate steps to mitigate the impact of the data breach and prevent future incidents.

17. Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of the Kingdom of Saudi Arabia. Any disputes arising out of or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of Saudi Arabia.