Terms and Conditions for use of this site
All users of the (“Dirayaah”) website are advised of the following terms and conditions of use.
The content and design of the website pages are subject to copyright owned by Dirayaah or used under license from third party copyright owners. You are welcome to print pages for your personal use, but no part of this website may be reproduced or transmitted for any other purpose.
From time to time this Website may also include links to other websites. These links are provided to enhance the interest of other featured content and are not intended to signify that Dirayaah endorses or otherwise has any responsibility for the content of the linked website. Your use of this website and any dispute arising out of its use is subject to the laws of Kingdom of Saudi Arabia.
This website is made available for public viewing on the basis that Dirayaah excludes to the maximum extent permitted by law all liability whatsoever for any loss or damage howsoever arising out of the use of this website or reliance upon the content of this website.
Privacy Statement
Your Right to Privacy
Date: 1st September 2022
At Dirayaah, we recognize the importance of protecting your personal information and we are committed to safeguarding your privacy.
Our privacy statement (“Statement”) ensures we protect the trust you place in us when you provide us with your personal information, and we have instituted technical and organizational measures intended to ensure that personal information is handled in a safe and responsible manner.
As we continue to develop our processes and take advantage of technologies to improve the services we provide, it may be necessary to modify this Statement. We therefore encourage you to refer to this Statement on a regular basis.
Scope and Definitions
This Statement applies to Customer Information only. In this Statement, we explain how we collect, store, use, maintain and retain Customer Information.
Any references to ‘we’, ‘us’ or ‘our’ in this Statement refer to Dirayaah and its subsidiaries.
Any references to ‘you’ or ‘your’ refer to Dirayaah customers, prospective customers, marketing leads or visitors to our websites.
Client
Client means an existing customer of Dirayaah who has purchased our products and services.
Client Data
Client Data means Personal Data which our Clients and/or their end-users input or upload into the Client portals or via the services provided to them by Dirayaah. This does not include Customer Information collected directly by Dirayaah for business activities such as sales and marketing.
Dirayaah is the Data Processor in relation to Client Data. All Client Data is processed in accordance with our terms and conditions of sale and/or our Client Data Privacy Statement (as relevant).
Customer Information
Customer Information means Personal Data we collect from visitors to our websites and/or data we collect about our existing Clients, Marketing Leads and Prospective Clients during our sales and marketing activities.
Dirayaah is the Data Controller in relation to Customer Information.
Data Controller
Data Controller means a person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be processed.
Data Processor
Data Processor means any person (other than an employee of the data controller) who processes personal data on behalf of a data controller.
Marketing Leads and Prospective Clients
Marketing Leads and Prospective Clients means individuals who are not our existing customers but receive marketing communications from us, based on our legitimate interest or their consent via opt-in (and who may subsequently receive marketing communications from us or our selected partners, again based on our legitimate interest or where it has been expressly consented to). The Personal Data of these individuals is collected through lead generation by our marketing team or via third party data providers.
Personal Data
Personal Data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Services Data
Services Data means the data that resides on Dirayaah, customer or third party systems to which Dirayaah is provided access to perform services, including cloud environments, test environments, development and production environments, in order to perform any of the services, including but not limited to:
- Consultancy & Training
- Professional Services
- Support Services
- Hosting
- IT and Administrative operations
- Technical Services
- Managed Services
Dirayaah is the Data Processor in relation to Services Data and treats Services Data in accordance with the terms of our contractual agreement with you.
Data Processing Activities
- Mobile App Users
- Clients, Marketing Leads and Prospective Clients
- Visitors to our Website/Live Chat
- Visitors to our Offices
- Call Recordings
- Other individuals who contact Dirayaah
- Suppliers and Sub-contractors
- Partners and Resellers
- Job Applicants
Mobile App Users
Mobile apps have their own privacy statements explaining why and how personal data is collected and processed by those apps. Please refer to the privacy statement provided within those applications.
Clients, Marketing Leads and Prospective Clients
How we use Client Data and Services Data?
If you are an existing customer and want to know how we process personal information in relation to our products and services, please see our Privacy Statement.
How we use Customer Information?
Clients: We use Customer Information for marketing purposes to make our Clients aware of new products, offers, events and product upgrades that they might find useful. We also send relevant business communications and support related information to keep you informed about our services and business updates and certain products and services provided by our selected partners.
Marketing Leads and Prospective Clients: We use your Personal Data for marketing purposes to make our prospects aware of products, offers, events that they might find useful. We also send relevant business communications to keep you informed about our services and business updates and certain products and services provided by our selected partners.
The Personal Data we collect from Clients, Marketing Leads and Prospective Clients will be used for the following purposes:
- Direct Marketing
- Updates regarding products and services
- Providing our products and services via our selected sales and delivery partners
- Event Invites
- Surveys
Any legitimate interests pursued by us, or third parties we use or selected partners that we work with, are as follows:
- Promoting our products
- Product upgrades and updates to existing customers
The legitimate interests specified above are related to the products and services you currently use from Dirayaah (if you are an existing customer), products and services provided by Dirayaah that you don’t currently use or products and services that would be of interest to your company, the sector you operate in or the job role you hold.
Under what circumstances will Dirayaah contact you?
Our aim is not to be intrusive, and we undertake not to ask irrelevant or unnecessary questions. Moreover, the information you provide will be subject to rigorous measures and procedures to minimize the risk of un-authorized access or disclosure.
Retention Period
Clients: Dirayaah will process and store Personal Data for marketing purposes as long as you are a customer of Dirayaah and use our products and services. However, if you choose to opt-out of communications, we will remove your details from our marketing database.
Marketing Leads and Prospective Clients: If Dirayaah received your data from a third party (Third Party Data/Lead Generation Provider), your data will be processed and stored for one year or the length of the contract with the data provider. If Dirayaah collected data directly from you and you opted in to receive marketing communications from us, we will store and process your data as long as you do not opt-out.
Visitors to our Website/Live Chat
How we use your information?
We collect and use your Personal Data to provide you with information and advice about products or services that you may request using the Contact Form on the website. We also use cookies to help us provide you with a personalized service, and to help make our websites, applications and services better for you.
We may also collect non-personally identifying information about your visit to our websites based on your browsing activities. This information may include the pages you browse, and products and services viewed. This helps us to better manage and develop our sites, to provide you with a more enjoyable, customized service and experience in the future, and to help us develop and deliver better products and services tailored to your individual interests and needs.
Retention Period
Dirayaah will process and store Personal Data for marketing purposes, if you opt-in to receive marketing communications from us, until you opt-out. If you do not opt-in, but choose to get in touch with us using the Contact Us form on our website, we will retain your data for 12 months in order to communicate with you.
Live Chat
We collect the contents of your chat session, your phone number, your name and email address to provide you with information in relation to your inquiry via chat. We also use your data to provide further information related to your inquiry or related products and services via email. You may opt out of receiving these further emails by clicking on the Unsubscribe link in the email.
All data related to live chat will be retained for 12 months and deleted thereafter. However, if you subscribe to receive marketing emails, your email address and name will be retained beyond live chat data retention period.
Visitors to our Offices
We endeavor to keep our premises secure by deploying appropriate security measures such as building access control, CCTV and maintaining visitor records.
How we collect and use your data?
CCTV surveillance is in place at certain Dirayaah offices – either managed directly by Dirayaah or building management.
Where directly managed by Dirayaah, the images captured are securely stored and only accessed on a need-to-know basis by authorized personnel.
Where CCTV is installed and maintained by building management Dirayaah is not the owner of the CCTV equipment, or the data collected by it. However, executive members of the Dirayaah staff can request access to the relevant CCTV images for security reasons, if and when required.
We require visitors to our offices to sign in at reception. Our visitor records are securely stored and only accessible on a need-to-know basis.
Retention Period
CCTV recordings and Visitor records are maintained, retained and/or deleted as per the local/national legislative and regulatory requirements where the Dirayaah office is located.
Call Recordings
Marketing Call Recordings: Dirayaah will record marketing calls for quality and training purposes if you consent to the recording. All call recordings will be retained for 12 months and deleted thereafter. If you want a call recording to be deleted, you may contact us at [email protected]
Support Call Recordings: Dirayaah records all support calls for quality, training, transcription and analysis purposes. An audio message is played when you contact the Service Desk or Support Services informing you of this. By continuing the call and connecting, you give your consent for the call to be recorded. All call recordings will be retained for period of 90 days to 12 months and deleted thereafter.
Other individuals who contact Dirayaah
Individuals, who are not our data subjects, may contact us via phone, email or other means for various reasons of their own. In such cases, the individual is in control of the information they provide, and we will only use the data for the purpose of responding to the communication.
Suppliers and Sub-contractors
We process personal data about our suppliers, including sub-contractors and other individuals associated with both, (our ‘Supplier’ or ‘Suppliers’) who are directly or indirectly involved in providing services to Dirayaah.
How we use Supplier personal data?
We use Supplier personal data for the following purposes:
- Receiving Services: We receive and process personal information from our Suppliers about their staff as necessary to receive services from our Suppliers.
- Providing relevant services to our clients: We process Supplier personal data in order to deliver services to our customers, whereby Suppliers are involved in delivering those services.
- Managing business and business services: We process personal data to manage our relationship with our Suppliers and developing business and services. This includes processing personal data for maintaining and using IT systems, website administration, application management and other business activities.
- Information Security, Quality & Risk Management: Personal data may be processed as part of our strategy and schedules to maintain quality, manage risks and deploy security measures. This includes activities such as vulnerability scanning, quality monitoring, auditing, and supplier security assessments. Any data that we process under this provision will be processed in compliance with the contractual agreement(s) with our Suppliers.
- Legal & regulatory compliance: Subject to business-specific legal and regulatory requirements, we are required to process personal data and maintain records containing personal data.
Retention Period
We retain personal data processed by us for as long as necessary for the purpose for which it was collected in line with our contractual agreement with our Suppliers.
We may retain personal data for longer periods where required by applicable law or regulation, or to establish, exercise or defend our legal rights as provided for in the data protection legislation.
Partners and Resellers
We process personal data about our channel partners, including resellers and other individuals associated with both (our ‘Partner’ or ‘Partners’), who are directly or indirectly involved in purchasing products and services from Dirayaah.
How we use Partner personal data?
We use your Partner personal data for the following purposes:
- Providing Services: We receive and process personal information from Partners about their staff as necessary to provide products/services to our Partners.
- Providing relevant services to Partner clients: We process Partner personal data in order to deliver services to Partner customers, whereby you the Partner is involved in delivering those services.
- Managing business and business services: We process personal data to manage our relationship with our Partners and developing business and services. This includes contacting Partners with updates regarding new products and offers.
- Legal & regulatory compliance: Subject to business-specific legal and regulatory requirements, we are required to process personal data and maintain records containing personal data.
Retention Period
We retain personal data processed by us for as long as necessary for the purpose for which it was collected, in line with our contractual agreement with the Partners.
We may retain personal data for longer periods where required by applicable law or regulation, or to establish, exercise or defend our legal rights as provided for in the data protection legislation.
Job Applicants
Our privacy policy is applied on job applicants. Additional information is also provided during relevant stages of the recruitment process.
Data Sharing
Will Dirayaah share your personal information with anyone else?
We may pass your Personal Data on to:
- Other member firms of the Dirayaah group for the relevant purpose(s). All the member firms have a consistent data protection framework and comply with the data protection legislation.
- Third-party service providers and/or selected sales and/or delivery partners contracted to Dirayaah in the course of dealing with you. Any third parties that we may share your data with are obliged to keep your details securely, and to use them only to contact you for marketing purposes that you have either consented to or that we or they have a legitimate interest in or requirement to fulfil the service they provide to you on our behalf, such as cloud storage, event check-in and monitoring. When you opt out or they no longer need your Personal Data to fulfil any relevant service, they will dispose of the Personal Data in line with Dirayaah’s procedures. Where legally required, we will obtain your consent, prior to transferring certain categories of data to a third party.
These 3rd parties include;
- Hosting providers of our service desk, sales, marketing and other support applications
- Providers of data analytics services
- Transcription service providers
- Auditors and other professional advisers.
- Law enforcement or other government and regulatory agencies or to other third parties as required by, or in accordance with, the applicable law or regulation.
Security
Information security is an integral part of our business. We adopt industry standards and have implemented an Information Security Management System to ensure we have the relevant controls to keep our data secure. We have robust policies and processes endorsed by our senior management and are embedded into our working culture.
Data Subject Rights
You have certain rights under the applicable data protection legislation under the jurisdiction of your geographical location, as described below.
Right to Access
Dirayaah, at your request, can confirm what information we hold about you and how it is processed. This right can be exercised by:
- Existing customers: Call the Support Desk.
- Job applicants
- Others: Send an email to [email protected]
We will aim to respond to any requests for information promptly and within the time limits required by the data protection legislation and other applicable law. Please note that you will be required to verify your identity in order to receive the information.
Right to Rectification
Existing customers: You may update your data by amending your personal details held within the relevant application or via any suitable customer support portal that you may have access to as a Dirayaah customer. Alternatively, you can contact the Support Desk to get your details rectified.
Visitors to our website, Marketing Leads and Prospective Clients: You may update your personal information submitted via our corporate website by contacting us via the Contact Form on our website.
Others: Please email us at [email protected]
Subject to applicable law and regulations and applicable checks, we endeavor to update our records based on the accurate information provided by you.
Right to object
You have the right to object to direct marketing based on legitimate interest. We use legitimate interest as the lawful basis for direct marketing. You can opt-out of this anytime.
Withdrawal of consent
We do not rely on consent for our processing activities except for certain email marketing activities. In such an instance, you have the right to withdraw consent at any time. You can do this by clicking on unsubscribe link in the relevant email that you received from Dirayaah.
Right to be informed
This Privacy Statement is intended to provide you with information about the personal data we collect about you, and how it is used. We intend to keep this Privacy Statement updated to reflect any change(s) in our processing activities.
Other Rights
In addition to the rights specified above, you also have other rights such as a right to erasure, right to restrict processing, and right to data portability.
If you wish to exercise any of these rights, please contact:
- Existing Customers: Call the Support Desk.
- taff: Refer to the guidelines in Privacy Notice for staff available on Dirayaah Hub;
- Job applicants
- Others: Send an email to [email protected]
Disclaimer
We reserve the right to change, modify, add, or remove parts of this Privacy Statement in line with any update in our processes or in compliance with any new applicable regulation. However, we would notify you of these changes by indicating the date on which the Statement was posted. We recommend that you visit this Statement occasionally to see the latest version.
Contact Details
If you have any questions or concerns regarding this Privacy Statement or if you need to access, update, change or remove Personal Data (Customer Information) that we control, please contact us on this email [email protected]