Privacy Policy

The National Committee for the Care of Prisoners, Released Prisoners, and Their Families is committed to protecting the privacy and confidentiality of the personal data of users of its website, digital platforms, and applications. This is a top priority, in compliance with the provisions of the Personal Data Protection Law issued by Royal Decree No. (M/19) dated 9/2/1443 AH and its implementing regulations. 
This policy aims to clarify the mechanism for collecting and processing personal data, explain the rights of data subjects and how to exercise those rights, the types of data collected, the purposes of its use, and the legal justifications for its processing.

Data Collection and Use

The Committee does not collect any personal data without the knowledge and consent of the data subject. Data is used only to achieve the purposes for which it was collected, such as providing services, communication, or improving performance quality. Your use of the website constitutes your acceptance of this Privacy Policy and any subsequent updates.

Data Protection

The Committee takes the necessary organizational and technical measures to protect personal data from loss, unauthorized access, misuse, or unlawful disclosure, including but not limited to:

  • Applying high standards for information security and technical systems.
  • Continuously updating protection procedures and controls.
  • Training and raising awareness among employees about the importance of data confidentiality.
  • Collecting the minimum data necessary to achieve the intended purpose.
  • Complying with the requirements of the National Cybersecurity Authority, including data encryption and protection.

User Responsibility

Website users are advised to regularly review the Privacy Policy for any updates. The Committee is not obligated to provide prior notification of such updates. 
The Committee is not liable for any direct or indirect damages that may arise from the use of or inability to use the website. This policy is an integral part of the website's Terms and Conditions of Use.

First: Definitions

Data Subject: The person to whom personal data relates.

Legal Justification: The legal basis for collecting and processing data.

Data Processing: Any operation performed on data, such as collection, storage, modification, disclosure, or destruction.

Second: Purpose and Legal Justification

The Committee collects and processes personal data to fulfill its legal duties, provide its services, serve the public interest, and comply with relevant regulations and instructions, without prejudice to the rights of data subjects.

Third: Types of Data Collected

The data that the Committee may collect includes the following:

  • Data voluntarily provided by the user upon registration or use of services, such as name, contact information, and qualifications.
  • Data resulting from communication with the Committee (inquiries, complaints, requests).
  • Data obtained from government agencies or other legal sources when necessary.

Fourth: Data Disclosure

The Committee may disclose personal data to competent government agencies, data processors, or in accordance with legal agreements, provided that this does not conflict with applicable regulations.

Fifth: Data Retention

The Committee retains personal data securely within the Kingdom of Saudi Arabia or through approved technological solutions, in accordance with legally mandated periods or as needed to achieve legitimate purposes.

Sixth: External Links

The website may contain links to external websites. The Committee is not responsible for the privacy policies or content of those websites.

Seventh: Data Subjects' Rights

  • The right to know how their data is collected and for what purposes it is used.
  • The right to access their data and obtain a copy of it.
  • The right to correct or update their data.
  • The right to request the deletion of their data in accordance with applicable regulations.
  • The right to withdraw consent to data processing, unless there is another legal justification.

Requests to exercise these rights will be processed within ten working days of the date the request is completed.

Legal Guardian

If the data subject is a minor or legally incapacitated, their legal guardian will exercise the rights stipulated by law in a manner that serves the best interests of the data subject, in accordance with the approved regulations.