Privacy Policy and Terms of Use

The Municipality of Al-Baha is committed to protecting the data of its service beneficiaries and maintaining their privacy by applying the necessary administrative controls and technical measures, as outlined in the relevant systems, regulations, decisions, and policies.

This privacy notice is crafted to help beneficiaries understand the nature and type of data collected through the various channels of the Municipality, the purpose of collecting and processing this data, and how it is protected.

It is important for the beneficiary to be aware of how the Municipality uses their personal data and their rights according to the policies and regulations in place in the Kingdom of Saudi Arabia.

By using the services of the Municipality of Al-Baha, you acknowledge and agree to the contents of this privacy notice and any ongoing modifications made to it. We encourage beneficiaries of the Municipality's services to regularly review the privacy notice to stay informed about any updates.

What Personal Data is Collected: We collect and view your personal data as required depending on the service you wish to use or obtain. This includes:

  • Account Data: Includes login data such as usernames, passwords, contact information like phone numbers, email addresses, and personal addresses.
  • Technical Data: Including your IP address, which connects your personal computer to the internet.
  • Financial Data: Includes data collected for payment purposes such as account numbers and credit card numbers.
  • Health Data: Includes any personal data related to an individual's health status, whether physical, mental, or psychological, or related to their health services.
  • Condition Identification Data: May include data about your social status as a beneficiary of the Municipality's services.

How Personal Data is Collected: The Municipality collects and processes some personal data, obtained either directly or indirectly, through various methods including:

Direct Methods:

  • Services: When registering through official channels of the Municipality of Al-Baha, including mobile applications or different products or services.
  • Communication: When contacting the Municipality via customer service channels.
  • Surveys.
  • Submitting requests.

Indirect Methods:

  • Data provided by other parties.
  • Cookies.

Legal Basis for Collecting Your Personal Data and Purpose of Collection: The collection and processing of your personal data are essential for providing services that serve the public interest. The data is collected for the following purposes:

  • Enabling and providing Municipality services and fulfilling their requirements.
  • Issuing policies and preparing studies that serve business needs.
  • Addressing and resolving inquiries and complaints from the Municipality’s service beneficiaries.
  • Improving the performance and development of services, enhancing the beneficiary's experience, and ensuring the continuity of quality service delivery.
  • Authenticating the user's identity when registering for the Municipality's various services.
  • Meeting certain legal and regulatory requirements.

Sharing Personal Data: According to the data-sharing policy issued by the National Data Management Office, we will not share your personal data with non-governmental entities unless they are authorized to perform specific government services or unless we have obtained your consent to do so.

We may share necessary personal data with government entities for specific purposes based on legal grounds or a justified practical need aiming to achieve a public interest without causing harm to national interests, agency activities, individual privacy, or environmental safety. Data that is excluded by royal orders is not shared.

When sharing your personal data, it will be done in a secure and trusted environment in accordance with relevant regulations, and we may take additional steps to ensure the protection of your data by signing data-sharing agreements with other entities based on specific terms and conditions consistent with data-sharing principles.

Storing and Transferring Personal Data Outside the Kingdom: In accordance with the applicable regulations, your personal data will be stored and processed securely within the Kingdom of Saudi Arabia’s geographical boundaries to ensure the protection of digital national sovereignty over the data, unless there are cases where data is transferred or processed outside the Kingdom’s borders, as specified in Article 29 of the Personal Data Protection Law.

Protecting Personal Data: Protecting your personal data and ensuring it is handled correctly is a primary priority for us. We ensure that personal data is only accessible to authorized individuals through the implementation of various technical and organizational measures, including but not limited to:

  • Controlling access to systems and networks.
  • Training staff on data protection.
  • Implementing appropriate security measures to protect data, such as encryption.
  • Deleting personal data when it is no longer needed, in accordance with applicable regulations, as stated in Article 18 of the Personal Data Protection Law.
  • Providing a secure physical environment for the paper records of personal data.

For more details on the processing of your personal data and how to exercise your rights, you can refer to the policies and standards issued by the National Data Management Office, which are approved by the Ministry's data office.

Your Rights Regarding Personal Data Processing:

  • The right to be informed: This includes informing you of the legitimate or practical grounds for collecting your personal data, the purpose for which it is collected, and that it will not be processed in ways that contradict the purpose for which it was collected, except in the cases specified in Article 10 of the Personal Data Protection Law.
  • The right to access your personal data: This includes reviewing and obtaining a copy of your data in a clear format consistent with the records, free of charge, as stipulated in the regulations, and without violating the credit information system fees or the provisions of Article 9 of the Personal Data Protection Law.
  • The right to request correction of your personal data held by the Municipality, or its completion or update.
  • The right to request the deletion of your personal data when it is no longer required, in accordance with Article 18 of the Personal Data Protection Law.

Please note that some or all of these rights may be subject to specific exceptions and exemptions outlined in the law. Each case will be assessed individually to ensure appropriateness.

Do You Have an Inquiry or Complaint Regarding the Privacy Notice?

If you have any inquiries, complaints, or requests regarding your rights related to the processing of your personal data or the contents of the privacy notice in general, you can contact the Digital Transformation Agency at the Municipality of Al-Baha via email: bahacare@baha.gov.sa.

To view the Personal Data Protection Law, click here.

To view the National Data Governance Policy issued by the Saudi Data and Artificial Intelligence Authority, click here.