1. Introduction
NUBL is committed to protecting users’ privacy and the confidentiality of their personal information, and processes data in accordance with applicable laws and regulations in the Kingdom of Saudi Arabia, and in a manner consistent with the nature of the services the platform provides to beneficiaries, providers, donors, and administration.
By using the platform, you acknowledge that you have read this policy and agree to its contents.
2. Data we may collect
The platform may collect the following data depending on the user type and service used:
A. Data you provide directly
- Full name
- National ID number or related verification data
- Mobile number
- Email address
- City or general location information
- Account data and usage preferences
- Request, donation, or service-related data
- Documents, attachments, or proofs you submit
- Messages, notes, or requests sent through the platform
B. Data generated by platform use
- IP address
- Browser type, operating system, and device
- Login date and time
- Pages or screens accessed
- Service interaction logs
- Technical identifiers and cookies, where used
C. Operational service-related data
- Request status and lifecycle within the platform
- Verification, receipt, or completion logs
- Payment or donation records, where applicable
- Audit, security, and system activity logs
3. Purposes of collection
Data is collected and used for the following purposes:
- Creating accounts and managing access and permissions
- Providing digital services and operating the platform
- Receiving, reviewing, approving, and tracking requests
- Managing donations, contributions, or related transactions
- Verifying identity, eligibility, and correctness of procedures
- Enabling verification of receipt, execution, or completion
- Communicating with users and notifying them of request or process status
- Improving performance, user experience, and service development
- Protecting the platform from fraud, misuse, or unauthorized access
- Complying with legal and regulatory requirements
- Preparing operational or statistical reports in a manner that does not undermine personal data confidentiality
4. Legal basis for processing
Processing may rely on one or more of the following bases:
- Data subject consent, where required
- Performance of a contract or provision of a requested service
- Compliance with a legal or regulatory obligation
- Legitimate interests of the platform that do not override data subject rights
- Protecting the platform or users from fraud, misuse, or security risks
5. Sharing and disclosure
Personal data is not sold. However, data may be disclosed or shared to the extent necessary with:
- Legally authorized entities
- Technical or operational partners involved in delivering the service
- Payment, verification, hosting, notification, or technical support providers
- Entities relevant to executing a request, donation, or in-platform procedure
- Entities that applicable law or competent decisions require to receive data
This is done on a need-to-know basis aligned with legitimate purposes, with appropriate measures to protect confidentiality.
6. Storage and retention
The platform retains personal data and operational logs for as long as necessary to achieve the purposes described in this policy, or for periods required by laws, regulatory procedures, protection and audit requirements, or dispute resolution, after which data is destroyed or anonymized in accordance with applicable laws and approved procedures.
7. Data protection and information security
The platform implements appropriate technical and organizational measures to protect data against loss, unauthorized access, alteration, disclosure, or destruction, including:
- Access and permission controls
- Encryption or other appropriate technical safeguards where needed
- Activity and log monitoring
- Backups and business continuity measures
- Security controls for systems and servers
However, 100% protection cannot be guaranteed in any electronic environment, and you acknowledge this while the platform commits to reasonable care.
8. Cookies and similar technologies
The platform may use cookies or similar technologies to improve performance, personalize experience, understand usage patterns, and facilitate login or preference storage. You may adjust browser settings to control these files; some platform features may be affected as a result.
9. Transfer and processing
Data may be processed, hosted, or backed up through providers or technical infrastructure inside or outside the Kingdom, depending on operational needs and in accordance with applicable laws and controls, with measures taken to maintain an appropriate level of protection.
10. Data subject rights
Under applicable laws, a data subject may have rights including:
- The right to be informed about how data is collected, the basis, and the purpose
- The right to access personal data
- The right to request correction of inaccurate or incomplete data
- The right to request destruction when retention is no longer legally or legitimately required
- The right to withdraw consent where processing is consent-based, without affecting the lawfulness of prior processing
- Any other rights provided by applicable laws and regulations
Requests related to these rights are handled through the platform’s approved procedures and channels, subject to legal, security, or third-party legitimate requirements.
11. Operational logs and confidentiality
The platform may retain operational, security, and audit logs related to service use, including logs associated with requests, donations, verification, execution, login, modification, or completion, for protection, compliance, documentation, improvement, and preventing misuse.
These logs are treated as confidential information and are accessed or disclosed only to the extent required for operational, legal, or security needs.
12. Policy changes
The platform may amend or update this policy at any time. The updated version becomes effective from the date it is published on the platform unless stated otherwise. Continued use after publication constitutes acceptance of the updated policy.
13. Contact
For any inquiry or request related to privacy, personal data, or information confidentiality, please contact us through the official channels approved on the platform.