Personal Data Protection & Privacy Policy

---

1. Landmark Arabia Co. – Statement of Privacy

Landmark Arabia Co. hereinafter referred to as (‘LMA’) is committed to protecting the privacy and security of your personal data, in accordance with the Personal Data Protection Law hereinafter referred to as (‘PDPL’)  that has come into effect from September 14, 2023 in Saudi Arabia, read with the Implementing Regulations  Published by the Saudi Data & Artificial Intelligence Authority (SDAIA).

Our Personal Data Protection & Privacy Policy specifies the purpose of collection, nature of personal data collected, the means used for collection of your personal data, processing, storage and destruction of your personal data and information on your rights as Personal Data Owner / Data Subject and how you can exercise your rights.

LMA is committed to processing your personal data in a manner that upholds your right to privacy and confidentiality of the highest degree, in accordance with the provisions of the applicable laws in the Kingdom of Saudi Arabia.

1. Personal Data Protection Law issued pursuant to Royal Decree No. (M/19) dated 09/02/1443 AH corresponding to 16/09/2021 G. Amended pursuant to Royal Decree No. (M/148) dated 05 /09/1444 AH corresponding to 27/03/2023 G.
2. The Implementing Regulations of the Personal Data Protection Law and Regulations on Personal Data transfer outside the Kingdom published by SDAIA on 07/09/2023 G.

2. Interpretations and Definition

1. Actual Interest refers to any moral or material interest of yours (Data Subject’s) that is directly linked to the purpose of the Processing of the Personal Data, and the Processing is necessary to achieve that purpose.
2. Controller means LMA and its holding companies, subsidiaries and affiliates and any natural persons associated with the Group that specifies the purpose and manner of collection and processing the Personal Data.
3. Collection means the collection of Personal Data by the Controller in accordance with the provisions of the law either from you (Data Subject) directly, or from your (Data Subject’s) representative any legal guardian over the Data Subject or any other party.
4. Disclosure means enabling any person other than the Controller and Processor, as the case may be to access collect or use personal data by any means and for any purpose.   
5. Destruction means any action taken on Personal Data that makes it unreadable and irretrievable, or impossible to identify your or the Data Subject / Personal Data Owner to whom it relates. 
6. Explicit Consent means direct and explicit consent given by the Personal Data Owner / Data Subject in any form that clearly indicates your (the Data Subject’s) acceptance of the Processing of your (Data Subject’s) Personal Data in a manner that cannot be interpreted otherwise and whose obtention, can be proven.
7. Health Data means Any Personal Data related to an individual's health condition, whether their physical, mental or psychological conditions, or related to Health Services received by that individual.
8. Legitimate Interest refers to any necessary interest of the Controller that requires the Processing of the Personal Data, for a specific purpose, provided that it does not adversely affect your (Personal Data Owner’s / Data Subject’s) rights and interests.
9. Personal Data means any data regardless of its source or form, that may lead to identifying you (an individual) specifically, or that may directly or indirectly make it possible to identify you (an individual) including, name, personal identification number, records, personal assets, bank and credit card numbers, photos and videos of you (an individual) and any other data of personal nature.
10. Processor means any Public Entity, natural person or private legal person (including holding, subsidiaries or affiliates of LMA) that processes the Personal Data for the benefit and on behalf of the LMA (Controller).
11. Processing means any operation carried out on Personal Data by any means, whether manual or automated including collecting, recording, saving, indexing, organizing, formatting, storing, modifying, updating, consolidating, retrieving, using, disclosing, transmitting, publishing, sharing, linking, blocking, erasing and destroying Personal Data.
12. Sensitive Data means Personal Data revealing racial or ethnic origin, or religious, intellectual, or political belief, data relating to security criminal convictions and offenses, biometric or Genetic Data for the purpose of identifying the person, Health Data, and data that indicates that one or both of the individual’s parents are unknown.
13. Transfer means the Transfer of Personal Data from one place to another for Processing.
14. Vital Interest means any interest necessary to preserve your life.
15. You / Your means an individual who is Personal Data Owner / Data Subject to whom the personal data relates.

The terms used in this Personal Data Protection & Privacy Policy shall have the same meaning as used in common parlance as specified in the PDPL and its Implementation Regulations, unless specifically specified as otherwise.

3. Purpose of Collection of Personal Data

Personal data refers to data that lets LMA know the specifics of who you are and which may be used to identify, contact or locate you (e.g., name, age, gender, mailing address, telephone number and e-mail address).

LMA may ask you to provide your personal data relevant for being able to serve you in a manner that enables us to enhance your experience by creation of awareness of opportunities with us, and / or update you on new arrivals, sales promotions, discount campaigns on products and services that may interest you based on your previous interaction with us.

We may use a third-party service provider to assist us with some features of our service. Our service provider will receive your information on our behalf and will not be permitted to use it for any other purpose.

4. Nature of Personal Data Collected

Your Personal Data collected may be in physical and / or electronic form and may include name, address, contact information (telephone / mobile number), e-mail address, National ID, Passport, Bank Account / Credit card / Debit card details, age, gender, health data, etc. which is most relevant to the scenario. For instance, an applicant to a job opening with us may share his / her resume with us, and post selection other necessary personal data for processing his / her application for employment visa, employee insurance etc., Similarly our potential customers / repeat customers may share their personal data as described hereinabove during / after the purchase or while considering availing our product(s) / service(s) in future.

5. Means Used for Collection of Personal Data

LMA collects your personal data when you provide us in scenarios such as a job seeker applying directly through our website, or other social media channels / indirectly through a third-party recruiting agency engaged by us to help us identify suitable candidates for a job opening with us. Similarly, as an employee of LMA, your personal data may be shared / acquired within the Company / intra-group or from / with an external firm in connection with your employment. In capacity of a potential or repeat customer subscribing to our Shukran Loyalty Program, respond to a survey, register for events or campaigns, and / or register for personalised services, and / or visit our websites, stores, and / or contact our customer support.

Not all the personal data LMA holds about you, may always come directly from you. It may, for example, come from your employer or other organizations to which you belong or have interacted with.

We collect your personal data if you wish to do business with us in the form of dealership / distributorship (through dealer / distributor / vendor on boarding applications).

We also collect personal data from our group companies (holding, subsidiaries and affiliates), partners, third parties such as service providers, and publicly available websites, to offer opportunities to work with us, products and services we think may be of interest and provide and enhance your experience of dealing with us.

LMA websites may collect your personal data including your location data, IP Address, Device ID etc., in addition to any other information that you share with us while interacting with us.

6. Processing of Personal Data

The meaning of Processing Data is specified in clause 2 (k) of this Personal Data Protection & Privacy Policy, LMA may process / use your Personal Data for the following purposes:

1. To provide our products and maintain our service including to monitor your buying preferences and choice of services to enable us offer you an update on better deals emerging from our campaigns and promotions.
2. To manage your account – to manage your registration as a beneficiary of the Shukran Loyaly Programme.
3. For performance of contract the development, compliance and undertaking of the purchase contract for the products, items or services you have purchased or of any other contract with us through our previous interaction in any form.
4. To contact you by email, telephone calls, SMS, or other equivalent forms of electronic communication, such as a mobile application's push notifications regarding updates or informative communications related to the functionalities, products or contracted services, including the security updates, when necessary or reasonable for their implementation.
5. To provide You with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information.
6. To manage your request to attend and manage any requests you’ve communicated to us.
7. For other purposes we may use your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our products, services, marketing and your experience.

7. We may share Your personal data / information in the following situations:

1. With Service Providers:
   We may share your Personal Data / Personal Information with Service Providers to monitor and analyze the use of our products, service, and / or to contact you.
2. For business transfers:
   We may share or transfer your Personal Data / Personal Information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of our business to another company.
3. With business partners and group companies:
   We may share your Personal Data / Information with our business partners and group companies (holding, subsidiaries and affiliates) to offer you certain products, services or promotions.
4. With companies within Landmark Group:
   We may share your Personal Data / Information within Landmark Group companies (holding, subsidiaries and affiliates) to offer you certain products, services, or promotions.
5. With other users:
   When you share Personal Data / Personal Information or otherwise interact in the public areas with others, such information may be viewed by all and may be publicly distributed outside.
6. With Your consent:
   We may disclose your Personal Data / Personal Information for any other purpose with your consent.

8. Retention of your Personal Data

LMA will retain your personal data only for as long as necessary for the purposes set out in this Personal Data Protection & Privacy Policy. We will retain and use it to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies which is subject to instruction from regulators, such as SDAIA and any other Government Authority and other applicable Rules & Regulations applicable within the Kingdom of Saudi Arabia.

9. Transfer of your Personal Data

Your information, including Personal Data, is processed at Dubai, United Arab Emirates (‘UAE’) offices and in any other places where the parties involved in the processing are located. It means that your Personal Data may be transferred and maintained outside the Kingdom of Saudi Arabia.

Your consent to this Personal Data Protection & Privacy Policy followed by submission of requested Personal Data / Personal Information indicates assent for such data transfer.

LMA will take all steps reasonably necessary to ensure that personal data provided to us is treated securely and in accordance with this Personal Data Protection & Privacy Policy and that such Personal Data shall not be transferred or shared to an organization or a country unless there are adequate controls in place to ensure security of your personal data and information.

10. Right to update, amend or request deletion of your Personal Data

As a Data Subject / Personal Data Owner you have the right to delete or request that LMA assist in deleting the Personal Data collected by us about You.

You may update, amend, or delete your information at any time by e-mailing us and requesting for the same. 

Please note, however, that we may need to retain certain information when we have a legal obligation or lawful basis to do so.

11. Disclosure of your Personal Data

Under certain circumstances, LMA may be required to disclose your Personal Data if required to do so by law or in response to valid requests from public entities (e.g. a court or a government agency).

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

• In interest of protecting the sovereignty of Saudi Arabia.
• Comply with a legal obligation.
• Protect and defend the rights or property of the LMA.
• Prevent or investigate possible wrongdoing in connection with the products / services.
• Protect the personal safety of customers of LMA or the public at large.
• Protect against legal liability.

12. Security of your Personal Data

Personal data security is a top priority for LMA, and it is safeguarded by physical, technical, and administrative protections that comply with existing Regulations. LMA will take reasonable efforts and procedures to secure the personal data of our customers against misuse and loss, as well as unauthorized access, modification, or disclosure. LMA maintains security measures to ensure that your Personal Data is safeguarded and that standard encryption norms for data transmission are adhered to. At LMA, we ensure that our employees and affiliates are made aware of the significance of protection of Personal Data and maintaining its confidentiality.

13. Right of Legal Guardians

LMA does not collect Personal Data from anyone under the age of 18 years, without the consent of the parent / legal guardian. If you are a parent / legal guardian and you are aware that your child has provided us with Personal Data, please contact us.

If LMA become aware that it has collected Personal Data from anyone under the age of 18 years without verification of parental consent, LMA shall take the necessary steps to remove that information from our data base.

14. Amendments to this Policy

Any amendments (addition / deletion / modification) to this Policy shall be updated and published on our website at www.landmarkgroup.com

15. Contact Us

If you have any concerns or comments about the processing of your Personal Data or this Policy, or if you want us to change information or preferences you provided to us, please contact us by e-mail at: privacy@landmarkgroup.com