Effective Date: March 7, 2025
1. Introduction
Welcome to Newline Transport Company ("we," "our," "us"). We are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines how we collect, use, disclose, and protect your information in compliance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia.
Overview of Saudi Arabia's Personal Data Protection Law (PDPL)
The PDPL is the Kingdom's first comprehensive data protection legislation, aiming to regulate the processing of personal data to ensure individuals' privacy rights are protected. It aligns with global data protection standards and imposes obligations on organizations to handle personal data responsibly.
Key Provisions of the PDPL:
- Lawful Basis for Processing: Organizations must have a legitimate purpose for processing personal data, such as obtaining the individual's consent or fulfilling contractual obligations.
- Data Subject Rights: Individuals are granted rights to access, correct, delete, and object to the processing of their personal data.
- Data Transfers: Transferring personal data outside Saudi Arabia is restricted and subject to specific conditions to ensure adequate protection.
- Data Breach Notification: Organizations are required to notify the regulatory authority and affected individuals in the event of a data breach that compromises personal data.
Compliance with the PDPL is mandatory for organizations operating in Saudi Arabia, and violations can result in penalties, including fines and suspension of data processing activities.
Implementing Regulations and Data Transfer Regulations
In addition to the PDPL, the Saudi Data & AI Authority (SDAIA) has issued Implementing Regulations and Data Transfer Regulations.
2. Definitions
- Personal Data: Any information relating to an identified or identifiable natural person.
- Data Controller: An entity that determines the purposes and means of processing personal data.
- Data Processor: An entity that processes personal data on behalf of the data controller.
3. Information We Collect
We may collect the following types:
- Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
- We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
- Identity Data includes first name, last name, username, or similar identifier. When you email, phone, live chat or otherwise, we may collect information such as your first name, last name, email address and phone number.
- Contact Data includes billing address, invoicing address, email address and telephone numbers.
- Financial Data includes bank account and payment card details.
- Transaction Data includes details about payments and other details of our Services you have purchased from us.
- Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location. browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this Website.
4. How We Collect Information
We collect personal data through:
- Direct Interactions: When you book our services, contact us, or provide feedback.
- Automated Technologies: Through cookies and similar tracking technologies on our website.
- Third Parties: From partners or affiliates who have your consent to share your information.
5. Use of Personal Data
We use your personal data for the following purposes:
- Service Provision: To process bookings and provide transportation services.
- Customer Support: To respond to inquiries and provide assistance.
- Billing and Payments: To process payments and manage accounts.
- Marketing: To send promotional materials, with your consent.
- Legal Compliance: To comply with legal obligations under Saudi Arabian law.
6. Sharing of Personal Data
We may share your personal data with:
- Service Providers: Third-party vendors who assist in service delivery.
- Legal Authorities: When required by law or to protect our legal rights.
- Business Partners: With your consent, for marketing or promotional activities.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Once the data is no longer needed, we will securely delete or anonymize it.
9. Your Rights
Under the PDPL, you have the following rights:
- Access: To request a copy of your personal data.
- Correction: To request correction of inaccurate or incomplete data.
- Deletion: To request deletion of your data, subject to legal requirements.
- Objection: To object to the processing of your data for specific purposes.
10. Exercising Your Rights
To exercise your rights, please contact us at:
Newline Transport Company Customer Support:
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our website and indicating the effective date.
12. Governing Law
This Privacy Policy is governed by the laws of the Kingdom of Saudi Arabia, including the Personal Data Protection Law.
13. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us using the information provided above.
