Privacy Policy

1.Policy Purpose

This Privacy Policy (“Policy”) outlines how Jahez International Company for Information System Technology and its subsidiaries (“we”, “us” or “our”) collect and use personal data about individuals who visit our websites or receive services through any mobile application apps including but not limited to PIK, BLU, Jahez, (together, “Website”). The protection of your personal data is very important to us, and we understand our responsibilities to handle your personal data with care, to keep it secure and to comply with legal requirements. Please read this Policy carefully. It provides important information about how we use personal data and explains your legal rights.

2. Scope and Application

This Policy applies only to the Website and does not extend to the websites of any other companies or organizations (including restaurants) to which we may link which are managed by third parties (including their use of cookies). If you are a user of these links, it is your responsibility to understand how those third parties will use your data as once you leave our Website, we have no control over information that is submitted to or collected by any third parties links. We are not responsible for these other websites.
By visiting and/or ordering services on the Website, you agree and, where required, you consent to the collection, use and transfer of your information as set out in this Policy.
For data protection regulations, Jahez International Company for Information System Technology, a company registered in Riyadh, Kingdom of Saudi Arabia, King Abdullah Road, King Salman District, P.O. Box 2065, 12444 will be the data controller for your personal data when you use the Website.

3. Definitions

Term	Definition
Personal Data	Any data, regardless of its source or form, that may lead to identifying an individual specifically, or that may directly or indirectly make it possible to identify an individual, including name, personal identification number, addresses, contact numbers, license numbers, records, personal assets, bank and credit card numbers, photos and videos of an individual, and any other data of personal nature.
Sensitive Data	Personal Data revealing racial or ethnic origin, or religious, intellectual or political belief, data relating to security criminal convictions and offenses, biometric or Genetic Data for the purpose of identifying the person, Health Data, and data that indicates that one or both individual’s parents are unknown.
Data Subject	The individual to whom the Personal Data relate.
Legitimate Interest	Refers to any necessary interest of the Controller that requires the Processing of Personal Data for a specific purpose, provided it does not adversely affect the rights and interests of the data subject.

4. Responsibilities

Position or Office

Responsibility

Data Privacy Team

Acting as the direct point of contact with the Competent Authority and implementing its decisions and instructions regarding the application of the provisions of the Law and its Regulations.

Supervising the impact assessment procedures, audit reports, and evaluations related to Personal Data protection controls, documenting the assessment results, and issuing necessary recommendations accordingly.

Enabling the Data Subject to exercise their rights as stipulated in the Law.

Notifying the Competent Authority of Personal Data Breach incidents.

Responding to requests from Data Subjects and addressing complaints filed by them in accordance with the provisions of the Law and its Regulations

Monitoring and updating the records of Personal Data Processing activities of the Controller.

Handling the Controller’s violations related to Personal Data and taking corrective actions accordingly.

5. Policy Details

5.1. What information do we collect from you, and how do we collect it

We will collect and process the following data about you:
When you visit the Website or make an order through the Website, you may be asked to provide information about yourself to create an account, including your name, contact details, address, date of birth, username and password, gender, country of residence and payment information such as credit or debit card information.
We may collect information about your usage of the Website and information about you from the messages you post to the Website and the e-mails you send to us.
Records of any correspondence we have with you including when you contact our riders via call or WhatsApp or if you contact us by phone or we reach out to you by phone. We may also monitor and record any communications we have with you, including phone conversations and e mails when you call customer services, to help us to maintain service levels and meet our regulatory and legal duties.
We may collect technical information from your mobile device or your use of our services through a mobile device, for example, location data and certain characteristics of, and performance data about your device, carrier/operating system including device and connection type, IP address, unique device identifier, mobile payment methods, where we are permitted to for the purposes of fulfilling orders you have place on our Website or by law. Unless you have elected to remain anonymous through your device and/or platform settings, this information may be collected and used by us automatically if you use any of our services through your mobile device(s) via any of our mobile applications, through your mobile’s browser or otherwise.
Information that you provide by filling in forms on our Website including Jahez Group site such as contact us and newsroom sections. This includes information provided at the time of subscribing to any of our services or mailing lists such as financial calendar or requesting further services. We may also ask you for contact information when you report a problem with our Website.
Details of your visits to our Website including, but not limited to, traffic data, location data, weblogs and other communication data, and the resources that you access.
We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration. This is statistical data about our users’ browsing actions and patterns and does not identify any individual.
Your responses to any marketing surveys, ratings relating to restaurants, competitions or promotions we may ask you to complete (although you do not have to respond to them).

5.2 Minors

We will not knowingly collect any personal data about children or persons under the age of 18 and nor do we intend to collect personal data of visitors of our Website under 18. However, we are unable to verify an individual’s age when visiting the Website. We therefore advise parents to monitor their children’s online activities, to prevent their personal data being collected without parental consent. If you feel that we have collected personal data of a minor without valid consent and in accordance with applicable Kingdom of Saudi Arabia (“KSA”) laws, please contact us at Privacy@jahez.net. We will then proceed to erase such data.

5.3 Cookies

Our Website uses cookies to distinguish you from other users of our Website. This helps us to provide you with a good experience when you browse our Website and also allows us to improve our Website.

5.4How do we use your information

5.4.1 In this section we set out in more detail:

The main purposes for which we use your personal information
The legal bases upon which we are using your personal information

Purposes and Legal bases

To register you as a new customer, process and deliver your order and manage our relationship with you:

To collect identity and contact information to register you as a new customer on our Website to receive services and orders.
To provide you with access to the relevant parts of the Website and to supply the services you have requested.
To carry out our obligations under any contracts entered between you and us.
To enable us to produce accurate bills at checkout.
To manage payment, fees and charges from you or to you.
To respond to your requests and queries.
To notify you about changes to our terms and privacy policy.
To ask you to leave a review or take part in a survey.

Legal Basis

For all information – legitimate interest: To supply you with the goods and services you request and to fulfil and deliver orders we rely on legitimate interests.
Responding to your enquiries and ensuring we can effectively communicate with you to resolve your requests, keep you updated on any changes and to retain such records, we rely on legitimate interests.
Consent: Where we cannot rely on our legitimate interest to process your personal information for any of these purposes, we will do so only with your consent.

Ensuring the quality of our services & effectiveness of our Website:

Where we record customer service calls, we do so to ensure compliance with our service terms and conditions, to maintain customer service standards and for training and service improvement purposes to help train our staff.
To use data analytics to improve our website, products, services, marketing, customer relationships and experiences.
To request your participation in surveys, feedback, rating of restaurants or other initiatives which help to gather information used to develop and enhance our products and services.
To allow you to participate in interactive features of our service, when you choose to do so.
To ensure that content from our Website is presented in the most effective manner for you and for your computer and applicable mobile devices.
To notify you about changes to our services.

Legal Basis

Legitimate Interests: We have a legitimate interest in providing to you the facilities on our Website that you have requested in understanding how our Website is used and the popularity of the content on our Website.
It is necessary for our legitimate interests to keep our Website updated and relevant to develop our business.
Consent: Where we cannot rely on legitimate interests to process your personal information for any of these purposes we will do so only with your consent.

Marketing and direct marketing:

To provide you with information, via telephone, SMS, as well as email regarding our products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.
When you have chosen at a device level to begin or continue receiving push notifications from us, we may send you push notifications relating to the services that you have requested from us and information about our services and offers. You can choose to stop receiving push notifications from us at any time by changing your preferences on your mobile device or by contacting us Privacy@jahez.net
Please note that if you use our online contact us or newsroom tool on our Website, we may contact you from time to time in relation to your initial enquiry, you can ask us not to contact you at any time by contacting Privacy@jahez.net
If you do not want us to use your data or change your mind about being contacted in the future, please let us know by emailing us on the contact details set out above and/or amending your profile accordingly.
We may use your personal data to send you direct marketing communications about our offers, promotions, experiences or our related services. This will be in the form of email, SMS or targeted online advertisements, where you have consented for such purposes.

Legal Basis

Legitimate Interest: We have a legitimate interest in understanding our relationship with you and potential customers. We rely on legitimate interest to study how you use our products and services to develop them, to understand market and customer buying trends to grow our business and to inform our marketing strategy.
Consent: Where we cannot rely on legitimate interests to process your personal information for any of these purposes we will do so only with your consent.

Internal Business Purposes:

For internal purposes, such as internal reviews, website and system administration, internal audits.
To administer and protect our business and Website which includes troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting data.
For carrying out data analytics, to predict future trends in customer buying and trends.

Legal Basis

Legitimate Interest: It is necessary for our legitimate interests to ensure the provision of administration; IT services and network security is secure to prevent fraud or cybercrimes for running our business.
Legal Obligation: Where we do not rely on legitimate interest, we will process to comply with a legal obligation.

To comply with our legal and regulatory obligations

To help prevent and detect fraud and loss.
Where necessary to comply with other applicable laws in KSA.
To administer, support, improve and develop our business, for any other purpose whether statistical or analytical and to help us prevent fraud.
As required to comply with our legal obligations, to resolve disputes or to comply with Saudi Data Artificial Intelligence Authority (“Competent Authority”) requirements.

Legal Basis:

For all information – compliance with a Legal Obligation or Legitimate Interest. As a business we have a legitimate interest in ensuring that our business conducts appropriate risk management procedures.
We have a legal obligation as a business to report and follow any applicable laws and regulatory obligations.

5.5 On what legal basis are we entitled to process your data

5.51 As outlined above, we will process your information in accordance with KSA Personal Data Protection Law (“PDPL”) and its Implementing Regulations (the “Regulations”) on one of the following legal bases: –

Article 5 of PDPL and Article 11 of Regulations- You have given clear consent for us to process your personal data.
Article 6 (2) of PDPL – To comply with a legal obligation.
Article 6 (4) -Our legitimate interests that we have as a business, which include but is not limited to providing you with a service, fulfilling and delivering orders, marketing our products and services and carrying out data analytics to help us predict future market trends and behaviors.

5.6 How long do we keep your data for

Unless a longer retention period is required by applicable laws in KSA, we will retain your information for as long as your account is active as well as for an additional period afterwards to cover any outstanding issues or queries that may arise in relation to your account. We will periodically review retention periods to check they are appropriate. We will not keep your data for any longer than is necessary.
If you are not an active customer, and you do not wish to hear from us, you can contact us at Privacy@jahez.net and we will delete your information immediately.

5.7 How do we disclose your information to

Our Service Providers: We disclose information to service providers who provide services on our behalf. During the life of your account, it is likely that the identity and categories of third parties will change. Your data will only be used by our third-party providers to provide the requested services to us and each service provider is subject to a set of terms consistent with this Policy. We have a legitimate interest in contacting and dealing with service providers in providing services to us.
We use the following types of third-party providers to provide us with services:

Providers of website management and hosting services
Providers of database, sales administration and market interaction software
Payment solution providers
Fraud prevention agencies to help us make decisions about your ability to make payments, identity checks, prevention of fraud and money laundering and management of the account
Survey and market research providers
Providers of email communication tools and webinar platforms
Partner restaurants that you have placed your order with or logistic companies to deliver your purchased goods
Providers of outsourced printing services

3.Third party auditors, where necessary to meet our legal and regulatory obligations.

4.Other third parties: We may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries.

5.We may also disclose your personal information to third parties:

If we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets
You request or authorize the disclosure of information to a third-party
If Jahez International Company for Information Systems Technology or substantially all its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
If we are under the duty to disclose or share your personal data to comply with any legal or regulatory obligation.

5.8 Where we store your information and transfers your data outside KSA

As we are in KSA, the information that we collect from you will be transferred to and stored/processed within KSA. A minority of our service providers are based outside KSA. At the date of this Policy, one of our service provider’s is based in Germany. This may change if we decide to start using different service providers.
As such the data that we collect from you may be transferred to, stored at, and processed at a destination outside KSA.
We will always take steps to ensure that any international transfer of personal data is carefully managed to protect your rights and interest, we will either:

Only transfer your personal data to countries which are recognized as providing an adequate level of legal protection and approved by the Competent Authority; and
Ensure that transfers outside KSA are subject to appropriate legal safeguards such as standard contractual clauses and binding common rules.

5.9 Your rights

You have the right to ask us not to process your personal data for marketing purposes.
You can exercise your right at any time to prevent such processing by contacting us at Privacy@jahez.net
You have the right to ask us for more information about the safeguards we have put in place regarding data transfers.
We will not process any sensitive personal data without obtaining your explicit consent in accordance with the PDPL and Regulations in KSA.
As a data subject, you have the following rights:

The right to be informed of the use of your personal data
The right to access your personal data
The right to request correction of your personal data including any data that is required updating
The right to request destruction or deletion of your personal data
Right to request provision on your personal data in a clear format and readable
Right to withdraw consent at any time
If you have a complaint in relation to the processing of your data carried out under this Policy, you have the right to lodge a complaint with the Competent Authority.

You may seek to exercise any of these rights by updating your information online (where possible) or by sending a written request to Privacy@jahez.net

6. Related Information

We will make changes to this Policy from time to time, for example, to keep it up to date or to comply with legal requirements or changes in the way we operate our business. We will make sure that you are aware of any significant changes by sending an email message to the email address you most recently provided to us or by posting a notice on the Website so that you are aware of the impact to the data processing activities before you continue to engage. We encourage you to regularly check back and review this Policy so that you will always know what information we collect, how we use it, and who we share it with.