Jahez Group Privacy Policy
This Privacy Policy (“Policy”) outlines how Jahez International Company for Information System Technology and its subsidiaries (“we”, “us” or “our”) collect and use personal data about individuals who visit our websites or receive services through any mobile application apps including but not limited to PIK, BLU, Jahez, (together, “Website”). The protection of your personal data is very important to us, and we understand our responsibilities to handle your personal data with care, to keep it secure and to comply with legal requirements. Please read this Policy carefully. It provides important information about how we use personal data and explains your legal rights.
This Policy applies only to the Website and does not extend to the websites of any other companies or organisations (including restaurants and stores) to which we may link which are managed by third parties (including their use of cookies). If you are a user of these links, it is your responsibility to understand how those third parties will use your data as once you leave our Website, we have no control over information that is submitted to or collected by any third parties links. We are not responsible for these other websites.
By visiting and/or ordering services on the Website, you agree and, where required, you consent to the collection, use and transfer of your information as set out in this Policy.
For the purpose of data protection regulations, Jahez International Company for Information System Technology, a company registered in Riyadh, Kingdom of Saudi Arabia, King Abdullah Road, King Salman District, P.O. Box 2065, 12444 will be the data controller for your personal data when you use the Website.
What information do we collect from you, and how do we collect it?
We will collect and process the following data about you:
· When you visit the Website or make an order through the Website, you may be asked to provide information about yourself to create an account, including your name, contact details, address, date of birth, username and password, gender, country of residence and payment information such as credit or debit card information.
· We may collect information about your usage of the Website and information about you from the messages you post to the Website and the e-mails you send to us.
· Records of any correspondence we have with you including when you contact our riders via call or WhatsApp or if you contact us by phone or we reach out to you by phone. We may also monitor and record any communications we have with you, including phone conversations and e mails when you call customer services, to help us to maintain service levels and meet our regulatory and legal duties.
· We may collect technical information from your mobile device or your use of our services through a mobile device, for example, location data and certain characteristics of, and performance data about your device, carrier/operating system including device and connection type, IP address, unique device identifier, mobile payment methods, where we are permitted to for the purposes of fulfilling orders you have place on our Website or by law. Unless you have elected to remain anonymous through your device and/or platform settings, this information may be collected and used by us automatically if you use any of our services through your mobile device(s) via any of our mobile applications, through your mobile's browser or otherwise.
· Information that you provide by filling in forms on our Website including Jahez Group site such as contact us and newsroom sections. This includes information provided at the time of subscribing to any of our services or mailing lists such as financial calendar, or requesting further services. We may also ask you for contact information when you report a problem with our Website.
· Details of your visits to our Website including, but not limited to, traffic data, location data, weblogs and other communication data, and the resources that you access.
· We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration. This is statistical data about our users' browsing actions and patterns, and does not identify any individual.
· Your responses to any marketing surveys, ratings relating to restaurants, competitions or promotions we may ask you to complete (although you do not have to respond to them).
Minors
We will not knowingly collect any personal data about children or persons under the age of 18 and nor do we intend to collect personal data of visitors of our Website under 18. However, we are unable to verify individual’s age when visiting the Website. We therefore advise parents to monitor their children’s online activities, to prevent their personal data being collected without parental consent. If you feel that we have collected personal data of a minor without valid consent and in accordance with applicable Kingdom of Saudi Arabia (“KSA”) laws, please contact us at [email protected]. We will then proceed to erase such data.
Cookies
Our Website uses cookies to distinguish you from other users of our Website. This helps us to provide you with a good experience when you browse our Website and also allows us to improve our Website.
For detailed information on the cookies we use, the purposes for which we use them and how to remove them see Cookies policy in our website.
How do we use your information?
In this section we set out in more detail:
· The main purposes for which we use your personal information
· The legal bases upon which we are using your personal information
Purposes and Legal bases
To register you as a new customer, process and deliver your order and manage our relationship with you:
· To collect identity and contact information to register you as a new customer on our Website to receive services and orders.
· To provide you with access to the relevant parts of the Website and to supply the services you have requested.
· To carry out our obligations under any contracts entered into between you and us.
· To enable us to produce accurate bills on checkout.
· To manage payment, fees and charges from you or to you.
· To respond to your requests and queries.
· To notify you about changes to our terms and privacy policy.
· To ask you to leave a review or take part in a survey.
Legal Basis
For all information – legitimate interest: To supply you with the goods and services you request and to fulfil and deliver orders we rely on legitimate interests.
Responding to your enquires and ensuring we can effectively communicate with you to resolve your requests, keep you updated of any changes and to retain such records, we rely on legitimate interests.
Consent: Where we cannot rely on our legitimate interest to process your personal information for any of these purposes, we will do so only with your consent.
Ensuring the quality of our services & effectiveness of our Website:
· Where we record customer service calls, we do so in order to ensure compliance with our service terms and conditions, to maintain customer service standards and for training and service improvement purposes to help train our staff.
· To use data analytics to improve our website, products, services, marketing, customer relationships and experiences.
· To request your participation in surveys, feedback, rating of restaurants or other initiatives which help to gather information used to develop and enhance our products and services.
· To allow you to participate in interactive features of our service, when you choose to do so.
· To ensure that content from our Website is presented in the most effective manner for you and for your computer and applicable mobile devices.
· To notify you about changes to our services.
Legal Basis
Legitimate Interests: We have a legitimate interest in providing to you the facilities on our Website that you have requested in understanding how our Website is used and the popularity of the content on our Website.
It is necessary for our legitimate interests to keep our Website updated and relevant to develop our business.
Consent: Where we cannot rely on legitimate interests to process your personal information for any of these purposes we will do so only with your consent.
Marketing and direct marketing:
· To provide you with information, via telephone, SMS, as well as email regarding our products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.
· Where you have chosen at a device level to begin or continue receiving push notifications from us, we may send you push notifications relating to the services that you have requested from us and information about our services and offers. You can choose to stop receiving push notifications from us at any time by changing your preferences on your mobile device or by contacting us [email protected]
· Please note that if you use our online contact us or newsroom tool on our Website, we may contact you from time to time in relation to your initial enquiry, you can ask us not to contact you at any time by contacting [email protected]
· If you do not want us to use your data or you change your mind about being contacted in the future, please let us know by emailing us on the contact details set out above and/or amending your profile accordingly.
· We may use your personal data to send you direct marketing communications about our offers, promotions, experiences or our related services. This will be in the form of email, social media, SMS or targeted online advertisements, where you have consented for such purposes.
Legal Basis
Legitimate Interest: We have a legitimate interest in understanding our relationship with you and potential customers. We rely on legitimate interest to study how you use our products and services to develop them, to understand market and customer buying trends to grow our business and to inform our marketing strategy.
Consent: Where we cannot rely on legitimate interests to process your personal information for any of these purposes we will do so only with your consent.
Internal Business Purposes:
· For internal purposes, such as internal reviews, website and system administration, internal audits.
· To administer and protect our business and Website which includes troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting data.
· For the purposes of carrying out data analytics, to predict future trends in customer buying and trends.
Legal Basis
Legitimate Interest: It is necessary for our legitimate interests to ensure the provision of administration; IT services and network security is secure to prevent fraud or cybercrimes for running our business.
Legal Obligation: Where we do not rely on legitimate interest, we will process to comply with a legal obligation.
To comply with our legal and regulatory obligations
· To help prevent and detect fraud and loss.
· Where necessary to comply with other applicable laws in KSA.
· To administer, support, improve and develop our business, for any other purpose whether statistical or analytical and to help us prevent fraud.
· As required to comply with our legal obligations, to resolve disputes or to comply with Saudi Data Artificial Intelligence Authority (“Competent Authority”) requirements.
Legal Basis: For all information – compliance with a Legal Obligation or Legitimate Interest.
As a business we have a legitimate interest in ensuring that our business conducts appropriate risk management procedures.
We have a legal obligation as a business to report and follow any applicable laws and regulatory obligations.
On what legal basis are we entitled to process your data?
As outlined above, we will process your information in accordance with KSA Personal Data Protection Law (“PDPL”) and its Implementing Regulations (the “Regulations”) on one of the following legal bases:-
· Article 5 of PDPL and Article 11 of Regulations- You have given clear consent for us to process your personal data.
· Article 6 (2) of PDPL - To comply with a legal obligation.
· Article 6 (4) -Our legitimate interests that we have as a business, which include but is not limited to providing you with a service, fulfilling and delivering orders, marketing our products and services and carrying out data analytics to help us predict future market trends and behaviour.
How long we will keep your data for?
Unless a longer retention period is required by applicable laws in KSA, we will retain your information for as long as your account is active as well as for an additional period afterwards to cover any outstanding issues or queries that may arise in relation to your account. We will periodically review retention periods to check they are appropriate. We will not keep your data for any longer than is necessary.
If you are not an active customer, and you do not wish to hear from us, you can contact us at [email protected] and we will delete your information immediately.
Who do we disclose your information to?
Our Service Providers
We disclose information to service providers who provide services on our behalf. During the life of your account, it is likely that the identity and categories of third parties will change. Your data will only be used by our third-party providers to provide the requested services to us and each service provider is subject to a set of terms consistent with this Policy. We have a legitimate interest in contacting and dealing with service providers in providing services to us.
We use the following types of third-party providers to provide us with services:
· Providers of website management and hosting services
· Providers of database, sales administration and market interaction software
· Payment solution providers
· Fraud prevention agencies to help us make decisions about your ability to make payments, identity checks, prevention of fraud and money laundering and management of the account
· Survey and market research providers
· Providers of email communication tools and webinar platforms
· Partner restaurants or stores that you have placed your order with or logistic companies to deliver your purchased goods
· Providers of outsourced printing services
· Third party auditors, where necessary to meet our legal and regulatory obligations.
Other third parties
We may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries.
We may also disclose your personal information to third parties:
· In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets
· You request or authorise the disclosure of information to a third-party
· If Jahez International Company for Information Systems Technology or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
· If we are under a duty to disclose or share your personal data in order to comply with any legal or regulatory obligation.
Where we store you information and transfers of your data outside KSA
As we are located in KSA, the information that we collect from you will be transferred to and stored/processed within KSA. A minority of our service providers are based outside KSA. At the date of this Policy, one of our service provider’s is based in Germany. This may change if we decide to start using different service providers.
As such the data that we collect from you may be transferred to, stored at, and processed in a destination outside KSA.
We will always take steps to ensure that any international transfer of personal data is carefully managed to protect your rights and interest, in particular we will either:
· Only transfer your personal data to countries which are recognized as providing an adequate level of legal protection and approved by the Competent Authority; and
· Ensure that transfers outside KSA are subject to appropriate legal safeguards such as standard contractual clauses and binding common rules.
Your rights
You have the right to ask us not to process your personal data for marketing purposes.
You can exercise your right at any time to prevent such processing by contacting us at [email protected]
You have the right to ask us for more information about the safeguards we have put in place regarding data transfers.
We will not process any sensitive personal data without obtaining your explicit consent in accordance with the PDPL and Regulations in KSA.
As a data subject, you have the following rights:
· The right to be informed of the use of your personal data
· The right to access your personal data
· The right to request correction of your personal data including any data that is required updating
· The right to request destruction or deletion of your personal data
· Right to request provision on your personal data in a clear format and readable
· Right to withdraw consent at any time
· If you have a complaint in relation to the processing of your data carried out under this Policy, you have the right to lodge a complaint with the Competent Authority.
You may seek to exercise any of these rights by updating your information online (where possible) or by sending a written request to [email protected]
Changes to our privacy policy
We will make changes to this Policy from time to time for example, to keep it up to date or to comply with legal requirements or changes in the way we operate our business. We will make sure that you are aware of any significant changes by sending an email message to the email address you most recently provided to us or by posting a notice on the Website so that you are aware of the impact to the data processing activities before you continue to engage. We encourage you to regularly check back and review this Policy so that you will always know what information we collect, how we use it, and who we share it with.
Contact
If you have any complaints or issues regarding this Policy, including rights to exercise a data subject request, please contact us at [email protected]