Introduction

The National Center for Government Resource Systems (NCGR) places the confidentiality of beneficiary data at the top of priorities. The platform's goal is to provide high quality service to all beneficiaries. This privacy policy was drafted to help you understand the nature of the personal data we collect from you and the purpose of collecting and processing that data. It is important that you are aware of how Etimad Platform uses your personal data and your rights regarding the processing of your personal data, in accordance with relevant laws and regulations in the Kingdom of Saudi Arabia. Users of NCGR's services, and visitors of Etimad Platform and its service channels, must constantly read the privacy policy when there are any updates on it. Your use of Etimad Platform means that you have read and agreed to this policy, and the continuous amendments to it, and that you are solely responsible for the accuracy and validity of the data that you provide through the platform.

 

1-    What personal data is collected?
The following are examples of the main types of personal data collected:
• Data that you provide the platform with (such as names, personal ID numbers, addresses, contact numbers, etc.) which is required when registering with Etimad Platform and its affiliated channels (such as the Comprehensive Service Center "Eitamed") provided by the NCGR.
• Payment data: (such as data collected for the purposes of making payments, bank account numbers and credit cards).
• Data exchanged during our communication with you (such as requests for support services and communications received from you).
• Cookie data: (such as data collected by website logs, technologies, cookies, or similar technologies).
• Data of the beneficiary's location: (such as data that helps Etimad Platform resolve complaints related to services provided by the NCGR).

2-    How is personal data collected?
Some of the personal data we process is obtained directly or indirectly, using various methods which may include:
A. Direct Methods:
• Products or services: When registering with Etimad Platform, and using the platform's products or services, for example (Government Competition and Procurement Services, Contract Services, Payments and Financial Claims Services, and others).
• Communication: When communicating with the NCGR, via the Contact Us page on Etimad Platform, or through Eitamed, or other means of beneficiary service provided by the NCGR.
• Opinion polls: When publishing opinion polls, personal data may be collected as this data is used to conduct analyzes and research, for the purpose of developing services provided by the NCGR and improving the beneficiary's experience. We may require other information to fulfill development requirements.
B. Indirect Methods:
• Data Cookies: Cookies collect data on how you use Etimad Platform, including the date and time of your visit, and the type of Internet browser you use.
• Personal data may be obtained through approved government platforms for electronic connectivity, for example, but not limited to: Ministry of Commerce services, Yaqeen, etc.

3-    Why do we collect and use your personal data (Purposes)?
Your personal data is collected and used for a number of reasons, for example:
• Completing the data required to provide services (such as Government Competition and Procurement Services, Financial Claims Services, and others).
• Allowing beneficiaries to access government services and conduct transactions.
• Understanding beneficiary needs to improve products and services.
• Resolving and addressing inquiries or complaints that you may have and improving the beneficiary's experience through the NCGR's entire communication channels.
• Collecting and processing personal data to meet legal and regulatory requirements.
• Analyzing data and issuing internal reports that serve the necessary business requirements, for example statistical reports.

4-    Use and disclosure
• The user agrees to allow Etimad Platform (including its authorized staff members) to access the user's data.
• The user agrees to allow the use of his non-identifying user data within cumulative statistical data and indicators and to share it with all relevant parties.
• The user agrees to allow the disclosure of user data related to him to non-governmental entities authorized by the competent authorities to perform specific services.
• The user acknowledges that Etimad Platform has the right to disclose any information to the competent authorities, when this is necessary to comply with any law, system, or governmental or judicial request.

5-    How does the NCGR share your personal data?
The NCGR shares data for legitimate purposes based on a legal basis or a justified practical need geared towards achieving a public interest without harming national interests, the activities of entities, the privacy of individuals, or the safety of the environment - with the exception of data and entities that are excluded by royal orders.

6-    How do we store your personal data?
Personal data is stored and processed securely within the Kingdom's geographical borders to ensure the preservation of digital national sovereignty for this data. After that, personal data is disposed and destroyed in a safe manner that prevents misuse or unauthorized access, in accordance with regulations and instructions regulating this.

7-    Your rights in relation to the processing of your personal data
The beneficiary has the following rights, mainly depending on the purpose of collecting and processing personal data:
• Right to access your personal data: You have the right to access your personal data through the available channels to access the data.
• Right to know: The data owner has the right to know the purpose of collecting and processing their personal data, the legal basis for this purpose, the content of the data to be processed, the method of collecting it, the method of storing it, and to whom it will be disclosed.
• Right to update and correct your personal data: You have the right to request the correction of your personal data that you consider to be inaccurate, incorrect or incomplete on the Platform.

8-    General Provisions
• The NCGR is the body supervising Etimad Platform.
• Etimad Platform is fully free to update this policy at any time, including adding or changing any of the provisions of the policy.
• This policy is subject to the laws of the Kingdom of Saudi Arabia, and in the event that a dispute arises related to it, the competent body in the Kingdom is the body authorized to consider disputes related to or arising from the policy.
• This policy does not negate any rights or obligations stipulated in other laws, including the digital transactions law, the cybercrime combat law, basic cybersecurity controls, and national data governance policies.

9-    How to file a complaint or an objection?
In the event of any complaints or inquiries about the Privacy and Confidentiality Policy, you can contact the Comprehensive Service Center (Eitamed) via the Contact Us form on Etimad Platform or the communication channels provided by the NCGR.