Al Baha Municipality is committed to protecting the data of beneficiaries of its services and systems and preserving their privacy by applying the necessary administrative controls and technical measures, in accordance with the relevant laws, regulations, decisions, and policies.

This Privacy Notice has been drafted to help beneficiaries understand the nature and type of data collected through the Municipality’s various channels, the purpose of its collection and processing, and how it is protected.

It is important for the beneficiary to be aware of how the Municipality uses their personal data and their rights, in accordance with the policies and regulations in force in the Kingdom of Saudi Arabia.

Your use of Al Baha Municipality services indicates that you have reviewed and agreed to what is stated in this Privacy Notice and any ongoing amendments thereto.

We encourage beneficiaries of the Municipality’s services to regularly review the Privacy Notice to stay informed of any updates.

We review and collect the personal data necessary depending on the service you wish to use or obtain, including the following:

Account data: Includes login data such as usernames and passwords, and contact data such as phone numbers, email addresses, and personal addresses.

Technical data: Including your Internet Protocol (IP) address, which is used to connect your personal computer to the Internet.

Financial data: Includes data collected for the purpose of processing payments, such as account numbers and credit card numbers.

Health data: Includes any personal data related to an individual’s health condition, whether physical, mental, psychological, or related to their healthcare services.

Status identification data: May include data about your social status as a beneficiary of the Municipality’s services.

The Municipality collects and processes certain personal data obtained directly or indirectly using various methods, including:

Services: When registering on the official channels of Al Baha Municipality, including mobile applications, products, or various services.

Communication: When communicating with the Municipality through customer service channels.

Surveys.

Submitting requests.

Data provided to us by other entities.

Cookies.

The collection and processing of your personal data is necessary to perform services that achieve the public interest. Such data is collected for the following purposes:

Enabling and providing Municipality services and fulfilling their requirements.

Issuing policies and preparing studies that serve business requirements.

Resolving and handling inquiries and complaints from beneficiaries of the Municipality’s services.

Improving service performance, development, and beneficiary experience, and ensuring continuity of service delivery at the required quality.

Authenticating the user’s identity when registering for the Municipality’s various services.

Meeting certain legal and regulatory requirements.

In accordance with the Data Sharing Policy issued by the National Data Management Office, we will not share your personal data with non-governmental entities unless they are authorized to perform specific government services or after obtaining your consent.

We may share necessary personal data with government entities for specific purposes based on a legal basis or justified practical need aimed at achieving a public interest, without causing harm to national interests, entity activities, individual privacy, or environmental safety. This excludes data and entities exempted by Royal Orders.

When sharing your personal data, we ensure it is shared through a secure and trusted environment in accordance with relevant laws, regulations, and policies. Additional steps may be taken to protect your data, including signing data sharing agreements between the Ministry and other entities under specific terms and conditions consistent with data sharing principles.

In accordance with applicable regulations, your personal data will be stored and processed securely within the geographical borders of the Kingdom of Saudi Arabia to ensure the preservation of national digital sovereignty, unless it falls under cases of data transfer or processing outside the Kingdom as stipulated in Article (Twenty-Nine) of the Personal Data Protection Law.

Protecting your personal data and ensuring it is handled properly is one of our top priorities. Access to personal data is restricted to authorized individuals only, through the implementation of several technical and organizational measures, including but not limited to the following:

Controlling access to systems and networks.

Raising awareness and training employees on data protection.

Applying appropriate security measures to protect data, such as encryption.

Deleting and disposing of personal data once the purpose of its collection has ended, in accordance with applicable laws and regulations and Article (Eighteen) of the Personal Data Protection Law.

Providing a secure physical environment for paper copies of personal data records.

For more details on how your personal data is processed and how to exercise your rights, you may review the policies and standards issued by the National Data Management Office and approved by the Ministry’s Data Office.

The right to be informed, which includes informing you of the legal or practical justification for collecting your personal data, its purpose, and that it will not be processed later in a manner inconsistent with the purpose for which it was collected, except in cases stipulated in Article (Ten) of the Personal Data Protection Law.

The right to access your personal data held by the Municipality, including reviewing it and obtaining a clear copy that matches the content of the records at no cost, in accordance with regulations, without prejudice to the Credit Information Law regarding financial consideration and without prejudice to Article (Nine) of the Personal Data Protection Law.

The right to request correction, completion, or updating of your personal data held by the Municipality.

The right to request the destruction of your personal data held by the Municipality once it is no longer needed, in accordance with Article (Eighteen) of the Personal Data Protection Law.

Please note that some or all of these rights may be subject to certain exceptions and exemptions determined by the law and will be assessed on a case-by-case basis to ensure their applicability.

If you have any inquiry, complaint, or request regarding your rights related to the processing of your personal data or about the Privacy Notice in general, you may contact the Digital Transformation Agency at Al Baha Municipality via email: bahacare@baha.gov.sa.

To view the Personal Data Protection Law click here

To view the National Data Governance Policy issued by the Saudi Data and AI Authority click here