Privacy Policy
1. Introduction
Mahd Sports Academy (“the Academy”) is committed to protecting the privacy, confidentiality, and security of personal data collected through its digital platforms and applications (“the Platforms”).
This Privacy Policy explains what personal data we collect, how we use it, how we protect it, and the rights of users (“Data Subjects”) in relation to their data. By accessing or using the Academy’s Platforms, users acknowledge and understand the practices described in this Policy.
This Policy is designed to comply with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia and other applicable laws.
2. Definitions
For clarity, the following terms are used throughout this Policy:
- Personal Data: Any information that identifies or may identify an individual directly or indirectly.
- Data Subject: The individual whose personal data is collected or processed.
- Processing: Any operation performed on personal data, including collection, storage, use, sharing, or destruction.
- Cookies: Small text files stored on a user’s device to improve website functionality or analyze usage.
- Third Party: Any entity other than the Academy or the Data Subject.
- Sensitive Personal Data: Data that includes health, biometrics, genetic information, or other categories defined as sensitive under the law.
3. Personal Data We Collect
We collect personal data directly from users when they voluntarily provide it, such as:
- Full name
- Email address
- Mobile number
Additional data may be requested in specific cases for identity verification, eligibility assessment, or compliance purposes.
4. Purpose of Collecting Personal Data
The Academy collects personal data for the following purposes:
- Responding to inquiries, suggestions, or complaints submitted by users.
- Completing registration and authentication processes.
- Enhancing user experience on the Platforms.
- Complying with legal, regulatory, or contractual obligations.
5. Methods of Collecting Personal Data
Personal data is collected in two ways:
- Direct Collection: When users voluntarily provide their information on the Platforms.
- Indirect Collection: Through Cookies, which help improve functionality, analyze usage, and personalize the user experience. Users may disable Cookies through browser settings, although some features may not function fully.
6. Use of Personal Data
We use personal data to provide and improve our services, verify identities, communicate essential updates, and ensure Platform security. Data may also be used for internal analytics to enhance the quality of services offered.
7. Storage and Retention
Personal data is stored securely on servers located within the Kingdom of Saudi Arabia. These servers comply with the National Cybersecurity Authority standards and internationally recognized security frameworks.
Retention periods vary depending on legal, contractual, or service-related requirements. Data that is no longer necessary is securely destroyed in a way that ensures it cannot be recovered or misused.
8. Legal Basis for Processing
Personal data is processed based on the consent of the Data Subject or when required by law, regulation, or contractual obligations. Users may withdraw consent at any time unless continued processing is required under another lawful basis.
9. Rights of Data Subjects
Data Subjects have the following rights under PDPL:
- Right to Access: Request a copy of their personal data.
- Right to Rectify: Correct inaccurate or incomplete data.
- Right to Delete: Request deletion of personal data when applicable.
- Right to Restrict Processing: Request limitations on processing under certain conditions.
- Right to Data Portability: Receive personal data in a structured, machine-readable format.
- Right to Withdraw Consent: Revoke consent for processing personal data at any time.
- Right to Be Informed: Be notified in case of a personal data breach.
Requests can be submitted via email to DMO@mahd.gov.sa.
Responses will be provided within seven business days.
10. Automated Decision-Making
If any automated systems are used for eligibility checks or other decisions, users will be informed. Users have the right to request human review if they believe automated processing has adversely affected them.
11. Children’s Data
The Academy may provide services to minors. In such cases, parental or guardian consent is required. Children’s data is handled with enhanced protection in compliance with PDPL and international best practices.
12. Sharing Personal Data
Personal data is not shared with external parties except when legally required by Saudi authorities. Any such sharing is limited to what is strictly necessary.
13. International Data Transfers
Personal data is not transferred outside Saudi Arabia. If future transfers are necessary, they will comply with PDPL requirements and obtain all necessary approvals.
14. External Links
The Platforms may contain links to third-party websites. The Academy is not responsible for their content, operation, or security. Users are responsible for actions taken on these external sites.
15. Security Measures
The Academy applies robust security measures including encryption, access controls, and regular security audits to protect personal data. While we take all reasonable steps, no online system is entirely immune to cyber risks.
16. Data Breach Notification
In case of a personal data breach, the Academy will promptly assess the situation, mitigate risks, and notify affected users and authorities as required by law.
17. Updates to this Policy
The Academy may update this Policy periodically. Users are encouraged to review it regularly. Continued use of the Platforms after updates indicates acknowledgment of the revised Policy.
18. Administration of Platforms and Systems
The Academy is responsible for all Platforms, applications, and related systems.
19. Governing Language
In case of any discrepancy between the Arabic and English versions of this Policy, the Arabic version shall prevail and be considered the official text.