About - Ajlan & Bros Holding

Privacy Notice

At Ajlan & Bros Holding, we place significant

importance on the privacy of personal data to

maintain the highest levels of customer service. This Privacy Notice has been created in compliance with the Personal Data Protection Law in the Kingdom of Saudi Arabia and the standards and regulations of the Saudi Data and Artificial Intelligence Authority (SDAIA). This Privacy Notice explains the data we

collect, the purpose for which it is collected, and how it is managed throughout its duration with the group.

First: Introduction

Group Name: Ajlan & Bros Holding

Commercial Registration Number: 1010433031

Registered Address: 12211 Olaya Road, Riyadh,

Kingdom of Saudi Arabia

Additional contact details are provided in the “How to Contact Us” section of this Privacy Notice.

For this Privacy Notice, Ajlan & Bros Holding and its subsidiaries are collectively referred to as the “Group” or “Company.” This includes any entity that the Group or any member of the Group considers a key contributor to that entity in the Kingdom of Saudi Arabia. In this notice, we are also referred to as “we” concerning the use of your personal data.

Ajlan & Bros Holding is an established group in the Kingdom of Saudi Arabia, referred to here as “Ajlan & Bros Holding,” “we,” or “us.”

This policy outlines how Ajlan & Bros Holding collects, processes, uses, and discloses your personal information as a data controller when you contact us, use our services, visit us, or interact with our platforms, including websites and mobile applications.

Second: What does this policy cover?

We are committed to adopting the highest standards when it comes to how we collect, use, and protect your personal information, and accordingly, we have developed our Privacy Policy (the “Policy”), which:

• Determines the types of personal information we collect.

• Explain how and why we collect and use your personal information.

• Explain when and why we may share personal information within Ajlan & Bros Holding and with other organizations.

• Describes how we protect the personal information we collect.

• Explain the rights you have with your personal information.

This Policy applies if you use our Services (referred to in this Policy as “Our Services”), and use of our Services means:

• Use any of our Platforms, including websites (“Our Websites”) and mobile applications (“Our Mobile Apps”).

• Be a member of any of our loyalty programs.

• When you are the recipient of a shipment delivered by the group or its agents.

• When you apply for a position with the group; and/or

• When you enter the group’s premises - CCTV footage.

• To comply with customer identification procedures including verifying your identity and assessing the potential risk of any illegal intent.

• Participate in our promotions and register to receive our newsletters and offers.

• Being our business partner or employee.

Third: Consent to the Privacy Notice

Your agreement to the Privacy Notice means your agreement to the privacy terms and conditions related to all services, programs, and initiatives offered by Ajlan & Bros Holding on its official website and the continuous amendments made to them according to the need and nature of the business.

Fourth: Changes to the Privacy Notice

Ajlan & Bros Holding reserves the right to make any changes to this notice at any time. We therefore recommend that you read and review the notice posted on the Ajlan & Bros Holding website periodically to stay informed of changes. Any changes or modifications will be effective immediately upon posting of the updated notice.

*By reading this notice, you acknowledge that you accept all changes contained in any notice.

Fifth: Why We Collect and Use Your Personal Data

1. Information Provided by Users:

Ajlan & Bros Holding collects the following data from users directly as part of providing services, programs, or initiatives offered by Ajlan & Bros Holding on its official website:

• Cooperative Training Program: Name, mobile number, email address, date of birth, country of residence, city, nationality, ID type*, ID/residence/passport number*, gender, educational qualifications (degree, university name, expected graduation year, major, GPA), CV*.

• Job Application (Recent Graduates): Name, mobile number, email address, date of birth, country of residence, city, nationality, ID type*, ID/residence/passport number*, gender, educational qualifications (degree, university name, graduation year, major, GPA), CV*.

• Job Application (Experienced Professionals): Name, mobile number, email address, date of birth, country of residence, city, nationality, ID type*, ID/residence/passport number*, gender, educational qualifications (degree, university name, graduation year, major, GPA), CV*, professional experience (field of expertise, job title, employer).

• Open Data Service (Request for More Data): Applicant’s name, mobile number, and email address.

• Contact Us Service: Name, mobile number, email address, region.

• Impact Assessment Survey for Electronic Gaming Program – Beginner and Advanced: Guardian’s name, email address, participant’s name*.

• Account Creation: Name, email address, mobile number, gender, nationality, date of birth, region.

• Request for Mentorship and Guidance Tasks: Brief introduction, job title, company name, areas of expertise, LinkedIn account, CV attachment.

• Communication and Support Requests: Email address.

• Children’s Information: One of our priorities is to add protection for children using the internet. We advise parents to be involved in and supervise their children’s online activities. The group does not intentionally collect any personal information from children under 15 years old. If you believe that your child has provided such information on our site, please contact us immediately, and we will make every effort to promptly delete this data from our records.

• Customer Interaction with the Company’s Advertisements and Applications on Third-Party Sites and Services: If these applications or advertisements include links to this privacy policy.

*Note: All fields marked with an asterisk “*” are not mandatory (optional).

2. Why We Collect and Use Personal Data (Purposes)

1. Contractual Basis – Processing necessary to fulfill and provide any contracted services between Ajlan & Brothers Holding Group and its clients.

2. Legal Basis – To comply with the rules and regulations in the Kingdom of Saudi Arabia issued by the Saudi Data and Artificial Intelligence Authority and any legal obligations imposed by regulatory authorities governing the group’s operations within the Kingdom. The group is subject to its regulations in all respects.

3. Legitimate Interests – When processing is necessary to achieve the group’s legitimate interests, without infringing on the rights and interests of the data subject, provided that no sensitive data is processed. Examples include:

• Allowing the use of analytics to improve customer experience and predict trends and patterns, which in turn enables new and innovative ways to enhance our services and provide you with a unique range of products and services.

• Ensuring the highest level of service and accuracy of information for our clients.

• Better understanding customer perspectives and responding appropriately to any feedback provided.

• Protection against fraud using dedicated tools or systems.

4. Consent-Based Use – When a customer provides explicit consent to allow the processing of their personal data, for example, when a customer

consents to receiving marketing communications

related to offers and services available to them.

5. Resolving and Addressing Inquiries or

Complaints – To address and resolve any inquiries or complaints you may have.

6. Automated Processing – We may make decisions based on automated processing of your personal data to improve the marketing communications you receive.

7. Public Interests – Processing based on requests from public authorities for purposes of achieving public interests, public health, or public safety.

Sixth: Exchange of Personal Information

We may share your personal information with third parties under the following circumstances:

• Subsidiaries of Ajlan & Bros Holding

Personal information collected by any of our affiliates may be shared with other affiliates for the above purposes.

• Retail Partners

Your personal information may be shared with other companies that sell products through our

Services (“Retail Partners”). We only share personal information that enables our retail partners to provide their services. For example, when you shop online or in-store, we will give the respective retail partner your name, contact details, and address so that they can deliver your goods and materials.

• Service Providers

We work with carefully selected service providers who perform certain functions on our behalf. These include, for example, companies that help us with technology services, data storage and integration, payment processing, and order delivery. We only share personal information that enables our service providers to provide their services.

Some of the service providers we work with manage online channels and place online advertisements relevant to our products and services, as well as those of our suppliers and retail partners.

• Sharing personal information with other organizations

We may share personal information with other organizations in the following circumstances:

• If there is any applicable law or public authority that requires us to share personal information.

• If we need to share personal information to exercise or defend our legal rights (this includes providing personal information to others to prevent fraud and reduce the risk of information leakage).

• To an organization to which we sell or transfer (or enter negotiations to sell or transfer) any of our business or any of our rights or obligations under any agreement we may have with you. If the transfer or sale continues, the organization receiving your personal information may use your personal information in the same way that we do.

• To any person to whom we transfer or may transfer our rights and obligations under our agreement with you.

Seventh: Transfer of Your Personal Information

Your personal information may be transferred, stored, and processed in a country different from your country of residence or our country of incorporation. In any case, we have put in place appropriate safeguards with applicable legal requirements to ensure that your data is adequately protected.

Eighth: How we protect personal information

We maintain physical, technical, and organizational safeguards to secure your personal information from unauthorized access, use, modification, and destruction. However, no website on the Internet can be 100% secure, and we cannot be held responsible for unauthorized or unintentional access beyond our control.

1. Protection from data breaches and hacking.

2. Implement the relevant controls, standards, and rules issued by the National Cybersecurity Authority that include best practices and cybersecurity standards.

3. It should also be noted that the Internet is not a completely safe space, and the Group cannot be held responsible for external parties or external links.

Ninth: Social Media

We operate channels, pages, and accounts on some social media sites to inform, assist, and interact with customers. We monitor and record comments and posts made through these channels about us so that we can improve our services.

Ajlan & Bros Holding is not responsible for any information posted on those sites other than information we have posted ourselves. We do not endorse the social media sites themselves or any information posted on them by third parties.

1. Conservation

We keep records for as long as required to:

• Comply with applicable legal requirements for record retention. When determining how long we retain your personal information after our relationship with you ends, we consider our legal obligations and the expectations of legislators.

• If you would like to request that we no longer use your information to provide services to you, call us on +966 11 466 5555. You can also email us at privacy_holding@ajlanbros-holding.com.

However, we will retain and use your registration information where necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

2. Marketing Communications

All marketing communications we send you will provide you with a way to withdraw your consent to future marketing. If you no longer wish to receive promotional materials, you can unsubscribe from these communications or change your account settings, which will remove you from marketing lists.

Please note that if you unsubscribe from marketing communications, you will continue to receive operational and service messages from us regarding services or products you have purchased from us and

responses to inquiries sent to us, and we may retain your details in the cancellation list so that we do not send you marketing communications in the future.

3. Cookies and similar technologies

We use cookies and similar technologies, such as tags and pixels (“cookies”), to personalize and improve your customer experience as you use our websites and mobile applications and to provide you with relevant online advertising. Cookies are small data files that allow a website or mobile app to collect and store a range of data on computers or mobile devices. Cookies help us provide key features and functionality on our websites and mobile applications, we use them to improve your customer experience, and we use cookies to: Improve the way our websites and mobile apps work. Cookies allow us to improve the way our websites and mobile apps work so that we can personalize your experience and allow you to use many of their useful features. For example, we use cookies to remember your preferences and private content when you return to our websites and mobile applications.

• Improve the performance of our websites and mobile apps.

Cookies can help us understand how we use our websites and mobile apps, for example, by letting us know if you receive an error message while browsing. These cookies collect data vaguely.

• Submit relevant ads online.

We use cookies to help us deliver online advertising that we believe is most relevant to you on our websites and those of other organizations. Cookies used for this purpose are often placed on our websites by other organizations, always with our permission. These cookies may collect information about your online behavior, such as your IP address. Your website, the website you arrived from, and information about your purchase history or cart content. This means that you may see our ads on our websites and those of other organizations. You may also see advertisements for other organizations on our websites. To help us deliver online advertising relevant to you, we may also combine the data we collect through cookies in your computer’s browser and other devices with other data we have collected (such as a loyalty program).

• Measure the effectiveness of our marketing

communications, including online advertising.

Cookies can tell us whether you have seen a

particular ad, and how long it has been since you saw it. This information allows us to measure the

effectiveness of our online advertising campaign and control how often an ad appears to you.

• Your choices when it comes to cookies.

You can use your browser settings to accept or reject new cookies and to delete existing cookies. You can also set your browser to notify you every time new cookies are placed on your computer.

If you choose to disable some or all cookies, you may not be able to take full advantage of our systems. For example, you may not be able to add items to your cart, proceed to checkout, or use some of our products and services that require you to log in. Once we have given your consent to the use of cookies, we will store cookies on your computer or device. If you wish to withdraw your consent at any time, you will need to delete our cookies using your internet browser settings.

Tenth: Rights

The data subject has the right to request access,correction, or destruction of his/her data by contacting us through the means of communication described in the item “Contact Us.”

1. The right to request access to his/her data in a readable and clear format.

2. Right to destruction of personal data: The data subject has the right to request the destruction of his/her personal data in certain circumstances unless there is a statutory provision specifying a certain retention period or contractual requirements.

3. Right to rectification: The subject of personal data has the right to request the correction of his/her personal data that he considers to be inaccurate, incorrect, or incomplete, using the e-mail indicated in the item “Contact Us”. They will be reviewed and updated within seven working days, and the data subject will be notified by email. For more details on the processing of your personal data and how to exercise your rights, you can see the Personal Data Protection Policy issued by the National Data Management Office.

4. Secure transmission of information: We guarantee that our site has the highest security measures to protect the information you provide to it. The Site encrypts information that is considered sensitive (such as health data) or data that must be kept confidential by legal requirements.

5. Data storage and destruction: Data will be stored within the Kingdom of Saudi Arabia in Holding Bros & Ajlan’s servers and will be destroyed in a secure manner through which it cannot be viewed after the purpose of its collection has ended. We may also retain such data after the purpose of its collection has ended if everything that specifically leads to the knowledge of its owner has been removed.

General Provisions

• Holding Bros & Ajlan adheres to the National Data Governance Policy on Data Sharing and Personal Data Protection issued by the Saudi Data and Artificial Intelligence Authority (SDAIA).

• The laws of the Kingdom of Saudi Arabia alone shall be applicable in all matters relating to disputes that may arise because of the use of this website.

• The courts of the Kingdom of Saudi Arabia shall have exclusive jurisdiction to hear and decide on such disputes.

Contact us

If you have any questions regarding our Privacy Notice, request help, or make a complaint, please contact us via:

966 11 466 5555

privacy_holding@ajlanbros-holding.com

Expected response time:

Social media platforms: 24 hours

Call Center: Saturday to Thursday, 8:00 am to 10:00 pm

Personal Data Protection Legislation

• National Data Governance Policies

• Main principles and general rules for the protection of personal data

• Key principles and general rules for data sharing