Privacy policy for Mrsool application
This Privacy Policy (the "Policy") constitutes the legally binding agreement between you ("User" or "you") and Mrsool App Company ("Mrsool,", "we", "us", or "our"). We are committed to protecting your privacy through our compliance with the provisions of the Personal Data Protection Law and its Implementing Regulations, as well as our adherence to this Privacy Policy, which describes the types of personal data we may collect from you or that you may provide through the application, and the methods of collecting, using, processing, storing, protecting, disclosing, and disposing of such data, and outlines the choices available to you regarding the use of your personal data, including your ability to access and update it.
Company Information and Contact Details:
- Company Name: Mrsool (7007295574)
- Official Address: Street Abi Bakr As Siddiq (RANB6767) - 2765 District Al Narjis – Riyadh
- Email for Personal Data Inquiries: ([email protected])
1. Definitions:
For the purposes of this Privacy Policy, the following definitions are used
- 1.1. Personal Data: Any data - regardless of its source or form - that may lead to identifying an individual specifically, or make it possible to identify him or her directly or indirectly, including, without limitation: name, personal identification number, addresses, contact numbers, license and record numbers, personal property details, bank account and credit card numbers, still or moving images of the individual, and any other data of a personal nature.
- 1.2. Personal Data Subject: The individual to whom the Personal Data relates.
- 1.3. User: Any individual who interacts with our services and agrees to this Policy.
- 1.4. Sensitive Data: Data revealing racial or ethnic origin, political opinions, religious beliefs, biometric data, health data, or any other data deemed sensitive under the laws of the Kingdom.
- 1.5. Cookies: Small files stored on the User's device to improve the user experience.
- 1.6. Controller: Mrsool.
- 1.7. Processor: Any public entity, or any private natural or juristic person, that processes Personal Data for the benefit of and on behalf of the Controller.
- 1.8. Processing: Any operation performed on Personal Data, including collecting, storing, and destroying it.
- 1.9. Consent: The User's explicit and clear consent to the processing of his or her Personal Data.
- 1.10. Retention Period: The period during which Personal Data is retained by the Controller.
- 1.11. Disclosure: Enabling any person-other than the Controller or the Processor, as the case may be to obtain, use, or access Personal Data by any means and for any purpose.
2. Personal Data We Collect:
We collect your Personal Data directly from you through the application, as follows:
- 2.1. National Identity and National Address Data: full name, national ID/Iqama number, date of birth, nationality, national address, postal code, preferences, and interests.
- 2.2. Contact Data: phone number, email address, and login credentials (such as username and password).
- 2.3. Financial Data: bank account information and payment method details.
- 2.4. Verification Data: ID number, proof of address, and any means required for verification.
- 2.5. Cookie-Related Data as described in Clause (6) of this Policy, and any other information you provide to us in connection with customer surveys or offers.
3. Purposes of Collecting Personal Data:
We use your Personal Data for the following purposes:
- 3.1. Creating and managing the account.
- 3.2. Performing orders and services, and improving the application and user experience.
- 3.3. Improving the App: We continually strives to improve the offerings provided through the App or our website based on the information and feedback we receive from you.
- 3.4. Processing payments.
- 3.5. Improving customer service: Your information helps us respond to your customer service requests and support needs more efficiently.
- 3.6. Sending operational notifications and where there is an appropriate legal basis.
- 3.7. Marketing and direct marketing: We may provide you with information, by phone, SMS, and email, about our products or services that you have requested from us or that we believe may be of interest to you, where you have consented to being contacted for such purposes. If you have chosen at the device level to start or continue receiving push notifications from us, we may send you notifications relating to the services you have requested from us, as well as information about our services and offers. We may also use your Personal Data to send you direct marketing communications relating to our relevant offers, experiences, or services, whether by email or targeted online advertising, where you have consented to such purposes.
- 3.8. We may use the email address Users register to process their request and send them information and updates related to their request.
4. Legal Basis for Processing Personal Data:
We process your Personal Data in accordance with the legal bases applicable to each purpose, including the following:
- 4.1. Your explicit consent, and you may withdraw such consent at any time by contacting the relevant department.
- 4.2. For the performance of a contractual obligation to which you are a party.
- 4.3. For compliance with a legal obligation requiring such processing in accordance with the laws and regulations of the Kingdom of Saudi Arabia.
- 4.4. For the purposes of legitimate interests that do not prejudice your rights and lawful interests, in accordance with the nature of the relevant processing purpose.
5. Disclosure of Personal Data:
Your Personal Data may, in exceptional circumstances and where necessary, be made available to authorized government officials. Nevertheless, we will not make it available to the public or to any third party without your prior consent. Accordingly, your Personal Data will only be disclosed in the following cases:
- 5.1. If you consent to such disclosure in accordance with the provisions of the Personal Data Protection Law and its implementing regulations in force.
- 5.2. If your Personal Data was collected from a publicly available source.
- 5.3. If the entity requesting the disclosure is a public entity, for security purposes, for the implementation of another law, or to satisfy judicial requirements in accordance with the provisions set out in the relevant laws and regulations.
- 5.4. If the disclosure is necessary to protect public health or safety, or the life or health of specific individual(s).
- 5.5. If the disclosure is limited to processing in a manner that does not lead to the specific identification of the owner of the Personal Data or any other individual.
6. Cookies:
We collect certain data when you interact with the App, such as the type of smartphone used and technical information relating to the manner in which you connect to the App, such as your internet service provider. We also use cookies to identify the pages you visit, which helps us monitor traffic on our website pages and improve their functionality to better meet our customers' needs. We further use information generated by cookies for statistical analysis purposes, without leading to your direct identification. Data generated through cookies is retained in accordance with the retention period specified in this Policy, after which it is securely deleted, destroyed, or anonymized. You may choose to accept or reject cookies when visiting the website by adjusting your browser settings to refuse all cookies or to alert you when any cookies are being sent. Please note, however, that disabling certain cookies may affect the functionality of the App.
7. Retention and Transfer of Personal Data:
- 7.1. Personal Data is stored securely, whether at the Company's premises or in hosting environments located within the geographical boundaries of the Kingdom of Saudi Arabia, in order to preserve national data sovereignty and uphold the national principles for the protection of Personal Data.
- 7.2. We will retain Personal Data for as long as necessary in accordance with this Policy and any other laws or regulations requiring such retention.
- 7.3. Your Personal Data may be processed, transferred, or stored by our affiliates or by third-party service providers in one or more countries outside your home jurisdiction. We will take all necessary steps and safeguards to ensure the security of your Personal Data at all times in accordance with this Privacy Policy and the applicable laws, regulations, and instructions issued by the Saudi Data and Artificial Intelligence Authority ("SDAIA").
- 7.4. Where Personal Data is transferred or processed outside the geographical boundaries of the Kingdom of Saudi Arabia, this shall only take place in cases where such transfer is permitted under the Personal Data Protection Law and its Implementing Regulations, with all appropriate safeguards being put in place to protect the Personal Data. In cases where the law requires approval from the competent authorities, we undertake to obtain the necessary approvals before completing the transfer of Personal Data.
8. Retention and Disposal of Your Personal Data:
We retain Personal Data for each category for the period necessary to fulfill the purpose for which it was collected and processed, or for the period required under applicable laws and regulations, whichever is longer. Upon expiry of the purpose or the statutory retention period, the data will be securely destroyed, deleted, or anonymized in a manner that prevents access to or recovery of it, while maintaining a record of disposal activities where required, as follows:
| Data Category |
Retention Period |
| General Data |
We retain general Personal Data for the duration of providing the service to you, and thereafter for the period necessary to close the account, process requests, objections, or claims, and comply with relevant legal and regulatory obligations, after which it will be securely destroyed or anonymized. |
| Financial Data |
10 years. |
| Employment Records |
2 years after termination of the relationship. |
| Browsing Data and Technical Data |
6 months. |
| Communication and Inquiry Data |
1 year from the date of the last communication. |
| E-Commerce Data |
3 years from the date of concluding the contract, to the extent required under applicable e-commerce laws and regulations. Any other consumer Personal Data shall be retained only for the period required by the nature of the transaction and the provision of the service. |
| Cybersecurity Data |
5 years, in accordance with the requirements of the competent authority requirements of the National Cybersecurity Authority. |
9. Retention of Personal Data After the Purpose of Collection Has Ended:
We retain your Personal Data after the purpose of its collection has ended only in the following cases:
- 9.1. If there is a legal justification requiring the retention of the Personal Data for a specified period, in which case it will be destroyed after the expiry of such period or the end of the purpose for which it was collected, whichever is longer.
- 9.2. If the Personal Data is closely related to a case before a judicial authority and retention is required for that purpose, in which case it will be destroyed after the conclusion of the judicial proceedings relating to the case.
10. User Rights:
As the owner and data subject of your Personal Data, you have the following rights in accordance with the Personal Data Protection Law and its Implementing Regulations:
- Right to be Informed: This includes informing you of the legal basis for the collection and processing of your Personal Data.
- Right of Access to Personal Data: This includes your right to access your Personal Data and review it in a clear and readable format.
- Right to Correct and Update Personal Data: Your right to correct, complete, or update your available Personal Data.
- Right to Request Destruction: Your right to request the destruction of your Personal Data held by the Company once it is no longer needed.
- Right to Withdraw Consent to the Processing of Personal Data: Your right to withdraw your consent to the processing of your Personal Data by sending an email to ([email protected]).
11. Security Incidents and Response to Personal Data Breaches:
In the event of any incident affecting Personal Data, we undertake to notify SDAIA within seventy-two (72) hours from the time we become aware of the incident. We will also notify you if such breach is likely to result in harm to your Personal Data or your rights.
12. Children's Personal Data and Individuals of Similar Status:
This App is not intended for the collection or processing of minors' data, and we do not directly verify or monitor users' ages. However, if you are a parent or legal guardian of a child and you know or suspect that the child is using the website, and you wish to have any of their Personal Data removed from our systems, please contact us immediately via the email address provided in this Policy. We will take the necessary steps to verify the request and then delete the Personal Data from our systems and records in accordance with the applicable laws and regulations.
13. Third-Party Websites:
While browsing our website, you may find links to other websites that may be of interest to you. Please note that we do not control any external websites. If you click on any such link and leave our website, we shall not be responsible for the protection of the privacy of any information you provide when visiting those websites, as they are not governed by this Policy. You are advised to review the privacy policy of the relevant website and exercise caution when providing any Personal Data.
14. General Provisions:
- 14.1. We will not use your Personal Data for direct marketing purposes or targeted advertising unless we have obtained your explicit consent. You may, at any time, withdraw your consent or request that marketing messages and notifications be discontinued through the email address set out in this Policy.
- 14.2. We implement appropriate security procedures and standards to protect data against unauthorized access, modification, disclosure, or destruction. Sensitive data is transmitted through secure and encrypted channels using approved digital methods.
- 14.3. If you wish to obtain a copy of your Personal Data, or if you believe that the information we have collected from you is inaccurate or incomplete, please send a request to the email address provided in this Policy.
15. Updates to the Privacy Policy:
Click here
- 15.1. We may update this Policy from time to time by amending this page, and we recommend that you review this page periodically.
- 15.2. We reserve the right to amend this Policy, and you will be notified of any material changes. Your continued use of the services shall constitute your acceptance of such updates.
16. Governing Law and Dispute Resolution:
This Policy shall be governed by and construed in accordance with the laws and regulations in force in the Kingdom of Saudi Arabia, in particular the Personal Data Protection Law issued by Royal Decree No. (M/19) dated 09/02/1443H, together with its Implementing Regulations and the instructions and guidelines issued pursuant thereto, as amended from time to time. Any dispute, controversy, or claim arising out of or in connection with this Policy, or the breach, interpretation, or implementation of any of its provisions, shall be subject to the jurisdiction of the competent courts of the Kingdom of Saudi Arabia.
Contact Us
If the user has any questions regarding this Privacy Policy, or the practices of this application, or your dealings with the application, you can contact us through the email address specified at the beginning of this Privacy Policy.