Category and Details of Collected Personal Data.
Collection and Processing of Personal Data.
End-User Rights against Collected Personal Data.
Identity Details – Full name and identification numbers.
Contact Information – Email address, Mobile number and company name.
Usage and Interaction Data – Visited pages, session duration, transaction history, preferences, and engagement with website features.
Cookies Data - Data collected by website logs, cookies or similar technologies.
SAMI affirms that all personal data is collected through legal, transparent, and secure means, and without any form of deception, misrepresentation, or coercion. Personal data is obtained solely through the channels outlined below, and no information is collected from unauthorized third parties or unverified external sources.
Contact and Inquiry Forms – Information voluntarily provided when submitting messages or service requests through SAMI website.
Job Applications – Data submitted through SAMI recruitment platform, including personal, professional, education, visual information and contact details from uploaded resume or CVs.
Cookies and Automated Tools – Technical data (e.g., IP address, device type, browser).
Communication with End-Users.
Registration of Suppliers
Recruitment and Human Resources
Website Performance and User Experience
Regulatory and Legal Compliance
SAMI is committed to protect End-user data, through a strict compliance to the Data Privacy policy which includes the following:
Category and Details of Collected Personal Data.
Collection and Processing of Personal Data.
End-User Rights against Collected Personal Data.
Right to Be Informed: End-User have the right to request information about personal data SAMI holds if it is technically feasible.
Right to Access: End-User have the right to request information about personal data SAMI holds if it is technically feasible.
Right to Obtain a Copy: End-User have the right to request a copy of personal data SAMI holds in a readable and common format if it is technically feasible.
Right to Correct Your Data: End-User have the right to request a modification If personal data is incorrect or incomplete.
Right to Erasure: End-User have the right to request a deletion of personal data when it is no longer needed.
Right to Withdraw Consent: End-User have the right to request to withdraw the consent for SAMI to use personal data (unless required by law).
Right to File a Complaint: End-User have the right to fill a compliant with related authorities in any suspicion of personal data misuse.
Right to Compensation: in certain cases, End-User may be eligible to claim a compensation if their personal data is used illegally and causes harm.
The data subject has the right to exercise their statutory rights according to applicable laws and regulations by communicating through the complaints and inquiries email.
All personal data collected by SAMI is stored securely using protected internal systems and infrastructure.Personal data is retained only for the necessary duration to fulfil its intended purpose or to comply with applicable legal and regulatory requirements. The specific retention period is depending on the data classification.
At the end of each retention period, personal data is securely and permanently deleted using approved data disposal methods such as digital wiping or physical destruction, to prevent any unauthorized access, recovery, or misuse.
Encryption: Data is encrypted during storage and transfer.
Access Control – Only authorized staff can access personal data using secure methods.
Data Masking – When needed, personal data is anonymized or masked to ensure privacy.
Secure Storage – Data is stored securely with defined retention period.
Cybersecurity Assessments and audits – Conduct regular assessments and testing to identify and fix any weakness.
you have any inquiries or complaints regarding the Privacy Policy or the process of handling personal data, please contact at: DMO@sami.com.sa
All such requests will be reviewed and responded to within thirty (30) working days from the date of receipt.If a request cannot be fully addressed within this timeframe due to complexity or other legitimate reasons, the requester will be notified of the delay and provided with an updated timeline.