Privacy Policy

1. Introduction

At Allied International Management L.L.D, incorporated in KSA, holding Certificate Registration NO. 4030488160, AIM are committed to protecting your privacy and ensuring that your personal data is handled in accordance with the Kingdom of Saudi Arabia’s Personal Data Protection Law and its Implementing Regulations[cite: 328, 329]. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data[cite: 330]. By interacting with our services, you agree to the practices described in this Policy. We encourage you to read it carefully[cite: 331, 332].

A. Name of the Controlling Entity: Allied International Management “AIM” [cite: 333]

B. Entity Activities: Allied International Management Company operates in the field of specialized administrative and technical services, including in particular the following[cite: 334]:

• Providing executive-level administrative services and consultancy [cite: 335]
• Monitoring and managing telecommunications and information technology networks [cite: 336]
• Providing cybersecurity solutions and services and information protection [cite: 337]

C. Roles and Responsibilities of the Entity: The entity’s roles include the following[cite: 338]:

• Managing, operating, and monitoring telecommunications and information technology networks, and ensuring business continuity and operational efficiency [cite: 339]
• Implementing cybersecurity best practices, including protecting systems and data from risks and breaches [cite: 340]
• Providing executive management consultancy and supporting decision-makers in the areas of governance, risk management, strategic planning, and institutional performance improvement [cite: 341]
• Developing administrative and technical policies and procedures and enhancing compliance with the applicable regulations and laws in the Kingdom of Saudi Arabia [cite: 342]
• Providing customized technical and administrative solutions aligned with clients’ needs and business requirements [cite: 343]

D. Target Groups: The entity targets the following groups[cite: 344]:

• Government and semi-government entities [cite: 345]
• Private sector companies and organizations of all sizes [cite: 346]
• Organizations operating in telecommunications, information technology, and cybersecurity sectors [cite: 347]
• Executive and senior management leaders [cite: 348]
• Entrepreneurs and startups requiring administrative, technical, and consulting support [cite: 349]

2. What is Personal Data?

"Personal data" refers to any information that relates to an identified or identifiable individual[cite: 351]. This includes, but is not limited to[cite: 352]:

• Name [cite: 353]
• Contact details (e.g., phone number, email address) [cite: 354]
• Identification numbers (e.g., National ID, passport number) [cite: 355]
• Financial data (e.g., card or bank details) [cite: 356]
• Health information [cite: 357]
• Technical information and device data (including Internet Protocol (IP) address, unique system identifiers, and information collected through cookies or similar technologies) [cite: 358]
• Any other data that can identify you directly or indirectly [cite: 359]

We may also collect your personal data from publicly available sources or commercially available sources, to the extent permitted by applicable laws and in accordance with the terms of use governing each source[cite: 360]. We may combine such data with other personal data we collect about you, including data collected when you visit and use our website[cite: 361]. This may include information that you publicly disclose through social media platforms, such as platforms operated by Meta, LinkedIn, or X (formerly known as Twitter), as well as information available through recruitment websites or any other third-party sources[cite: 362].

3. How We Collect and Use Personal Data

We collect, use, and process your personal data for purposes related to the use, management, and improvement of the website and for providing services to you, including but not limited to the following[cite: 364]:

• Use our services (online or offline) [cite: 365]
• Register or create an account with us [cite: 366]
• Subscribe to our newsletters or updates [cite: 367]
• Contact us through our website or customer support [cite: 368]
• Participate in surveys or provide feedback [cite: 369]
• Communicating with our clients, investors, and current, former, and prospective employees [cite: 370]
• Conducting business activities, including entering into agreements with clients [cite: 371]

In certain cases, we may collect and use personal data of natural persons who have an existing, previous, or anticipated direct relationship with us, such as current or prospective clients and participants in our events[cite: 372, 373, 374].

B. Indirect Data Collection: When a data subject uses our website or digital channels, we automatically collect technical data relating to the devices used, as well as browsing patterns and activities[cite: 375, 376]. Such data is collected through cookies, server logs, and other similar technologies[cite: 377, 378]. We may also obtain technical data about you when you visit other websites that use our cookies[cite: 379].

The types of data we collect include: Identification and contact data, demographic and location information, payment or financial details, customer preferences and usage behavior, and any other data necessary to deliver our services[cite: 380, 381, 382, 383, 384, 385]. We use this data to deliver and manage our services, improve customer service, process payments, conduct research, and fulfill legal or regulatory obligations[cite: 386, 387, 388, 389, 390, 391].

4. Legal Basis for Processing Personal Data

Under the PDPL, we process your personal data only when we have a lawful basis to do so[cite: 393]:

• Consent – When you explicitly agree (e.g., to receive marketing updates). You may withdraw your consent at any time, without affecting the lawfulness of any processing carried out on the basis of other legal grounds. To do so, you may contact "(DPO@ALLIEDIM.SA)"[cite: 394, 395, 396].
• Contractual necessity – When processing is required to fulfill a contract [cite: 397]
• Legal obligation – When needed to comply with laws or regulations [cite: 398]
• Legitimate interest – When it's necessary for our operations and does not override your rights [cite: 399]
• Public interest – represented in improving the quality of services provided, supporting public safety, and enabling the entity to perform its statutory functions efficiently [cite: 400]

5. Sharing Your Personal Data

We may share your personal data with Allied Group companies, its affiliates, or other third parties in the following cases[cite: 401, 402]:

• Where we need assistance from third parties to grant you access to tools and services on the Site [cite: 403, 404]
• Where we have a public interest or legal duty to do so [cite: 405]
• Where we have a duty to disclose to a competent public authority or regulatory agency [cite: 406]
• To enforce or apply any agreements we have with you [cite: 407]
• To support our business with general processing and IT services [cite: 408]
• Where you have given us permission for a specific purpose [cite: 409]

AIM do not sell or rent your personal data. Any third parties we engage are contractually obligated to protect your data in accordance with the PDPL[cite: 410].

6. Data Retention

AIM stores your personal data securely at its premises and/or with cloud service providers within KSA or in other approved locations[cite: 412, 413]. We retain the personal data only for the period necessary to fulfill the purposes for which it was collected, or as required by applicable laws[cite: 414]. After the retention period, personal data is securely disposed of through destruction or anonymization[cite: 415].

7. Your Rights Under the PDPL

The data subject has the following rights under the PDPL[cite: 416, 417]:

• Access – Request a copy of your personal data [cite: 418]
• Rectification – Request correction of inaccurate data [cite: 419]
• Erasure – Request deletion of your data [cite: 420]
• Object – Object to data processing [cite: 421]
• Restriction – Request temporary suspension of processing [cite: 422]
• Data Portability – Request your data in a portable format [cite: 423]
• Complaint – File a complaint with us or SDAIA [cite: 424]
• Right to Withdraw Consent at any time [cite: 425]

8. Data Security

We implement appropriate technical and organizational measures to safeguard your personal data, including encryption, access controls, and regular audits[cite: 428, 429, 430, 431, 432]. While we apply strong safeguards, no system can guarantee 100% security[cite: 433].

9. Cross-Border Transfers

Your personal data may be shared and processed outside the country in which it was originally collected[cite: 435]. We will take all necessary steps to ensure that your personal data is transferred using appropriate safeguards and afforded an equivalent level of protection[cite: 438].

10. Cookies and Tracking

We use cookies and similar technologies to enhance your user experience and analyze traffic[cite: 440]. For more details, please refer to our full Cookie Policy through the button below[cite: 441].

You may manage your cookie preferences through your browser or our website’s cookie settings panel[cite: 443].

11. Updates to This Privacy Policy

We may revise this Policy from time to time to reflect changes. The updated version will be posted on this page with the revised effective date[cite: 445, 446].

13. Final Statement

Allied International Management is fully committed to protecting your personal data and complying with the PDPL. This Privacy Policy ensures that your data is processed lawfully, fairly, and transparently[cite: 452, 453].