Privacy Policy

NSG Website Privacy Policy

NEO SPACE GROUP (hereafter referred to as “NSG” or the “Company” or “Us” or “We”) care about Your privacy and are committed to Processing Your Personal Data in accordance with fair information practices and Applicable Data Protection Laws [i.e., Kingdom of Saudi Arabia Personal Data Protection Law pursuant to Royal Decree No. (M/19) dated 09/02/1443 AH corresponding to 16/09/2021 G)]. The Company is a ‘Data Controller’, which means that We are responsible for deciding how We hold and use Personal Data about You. We are required under Applicable Data Protection Laws to notify You of the information contained in this privacy notice (“Notice” or “Policy”).

We are committed to protecting and respecting Your privacy. This Policy explains how We process Your personal data. This Policy may change from time to time. We will advise You of material changes, but You are advised to review this Policy periodically. If You have any questions, feel free to get in touch via the method set out in the “contact us” section of this notice below.

1. Applicability of this Policy

This Policy details how NSG collects, holds, processes, transfers, stores, and retains (referred to as “Process” or “Processing”) the Personal Data of its Customers (referred to as “Customers”, “Users” or “You”). This Policy also details Your rights as a data subject under Applicable Data Protection Laws and who You can contact for any queries or grievances.

2. What personal data do We collect about You and how do We collect it?

In general, You can visit and browse our Website without telling us who You are and without revealing any information about Yourself.

We may collect and generate personal data about You in accordance with this notice. This personal data includes:

When You visit our Website or fill in forms on our Website or elsewhere personal details You provide by filling in forms on our Website or elsewhere, including Your name, e-mail address, telephone numbers, postal and billing address, data of birth and location details.

When You contact us, or We contact You or You purchase our products:

information that You provide about Yourself anytime You contact us about our products or for employment (for example, Your name, date of birth, contact details and transaction information relating to any purchase of our products), including by phone, email, post, through social media or via a service partner or distributor of our products

1. Other sources of personal data
2. We may also receive information about You from:
   1. Third-party marketing agencies employed by Us;
   2. our service partners; and
   3. our appointed distributors

We may combine information We have about You from various sources, including the data that You have provided to us.

3. How do We use Your personal data?

We use Your personal data for the following purposes:

1. to provide You with our products and services;
2. to prepare invoices, and process and keep records of payments You make in relation to NEO SPACE GROUP™ products and services.
3. to provide Customer services including the assessment and resolution of any complaints or enquiries made to us, including information on technical service issues and security announcements, billing reminders and Welcome letters (and if You have contacted us and request a response, We may share Your personal information with NEO SPACE GROUP™ service partners or distributors to enable an adequate response is given to Your enquiry);
4. billing reminders & Welcome letters on Contact Us tab
5. to protect and support our business, personnel and Customers; and
6. for compliance, to comply with legal, regulatory and other requirements.
7. for employment purposes, including processing job applications, conducting interviews, verifying qualifications and references, maintaining employment records, and managing employee relations.

Except as described in this Privacy Statement, we will not use or disclose Your personal information to anyone outside of NEO SPACE GROUP™ without Your consent or where the identifying information can be removed.

On what basis do We use Your personal data?

We use Your personal data on the following basis:

1. Processing based on consent. You can withdraw Your consent at any time without affecting processing operations carried out based on other legal bases. To this end, you can contact: Privacy@neospacegroup.com.
2. In order to fulfil a contract, we have with You relating to our products and services.
3. Processing carried out due to a legitimate interest of NEO SPACE GROUP™, being the purposes set out in the “How do We use Your personal data?” section above; and
4. To comply with certain legal and regulatory obligations of NEO SPACE GROUP™

5. How do We store Your Personal Data and for how long?

NSG uses technical and organisational security measures in order to protect the Personal Data We have under Our control against accidental or intentional manipulation, loss, destruction and against access by unauthorised persons. Our security procedures are continually enhanced as new technology becomes available.

We will delete Your Personal Data when the purpose of the processing has been achieved unless further statutory retention periods exist, e. g. We still need Your Personal Data to fulfil contractual or legal obligations (accounting, tax reasons, etc.).

Even after the service has been provided or after termination of the contract, it may be necessary to continue to store personal data in order to comply with contractual or legal obligations.

6. With whom do We share Your personal data?

In the context of our processing of Your Personal Data, it may happen that the data is transferred to other places, companies or persons or that it is disclosed to them.

We only transfer Your Personal Data to third parties if there is an appropriate legal basis for doing so, in particular if:

• You have given Your explicit consent
• This is necessary for the performance of the contract with You
• There is a legal obligation for the disclosure
•  The transfer is necessary for the purposes of legitimate interests, as Well as for the establishment, exercise or defence of legal claims and there is no reason to assume that You have an overriding legitimate interest to not transfer Your data.
•  External service providers Process Personal Data on our behalf in pursuant to Article 29 of the KSA Personal Data Protection Law.

Recipients of Your Personal Data may include, for example, data centres that store our Website and databases, IT service providers that maintain our systems or provide CRM functionalities and consulting firms, payment service provider within the context of payment transactions, service providers commissioned with IT tasks or providers of services and content that are embedded in a Website. If We pass data on to our service providers, they may use the data exclusively for the fulfilment of their tasks. We have carefully selected and commissioned the service providers.

In such a case, the legal requirements will be respected and in particular corresponding contracts or agreements, which serve the protection of Your data, will be concluded with the recipients of Your data.

7. How do We protect Your personal data? 

To ensure the security and confidentiality of Your personal data, We put in place all necessary technical and organizational means in accordance with the requirements issued by the National Cybersecurity Authority.

8. Transfers of Your personal data outside of the Kingdom of Saudi Arabia

Your personal data may be processed by NEO SPACE GROUP™ and its affiliated companies (together referred to as the NEO SPACE GROUP™), as Well as by third parties as described above. This may involve the transfer of Your personal data outside the Kingdom of Saudi Arabia.

In accordance with the Saudi Personal Data Protection Law (PDPL), We will ensure that any such transfers comply with applicable legal requirements. Personal data will only be transferred outside the Kingdom if:

• The recipient country or international organization has adequate data protection regulations and oversight., The list of such countries will be notified by Saudi Data and Artificial Intelligence Authority (SDAIA)
• The transfer is approved by SDAIA on grounds of national interest or compliance.
• Specific exemptions apply, such as for the protection of vital interests, fulfilment of international agreements, or where only minimal necessary data is transferred.

If the destination is not deemed adequate, We will implement appropriate safeguards such as Standard Contractual Clauses (SCC), Binding Common Rules (BCR), or recognized certifications. Prior to any such transfer, We will conduct a Transfer Impact Assessment (TIA) and document all necessary safeguards to ensure the protection and confidentiality of Your personal data.

9. Your rights

You have several rights regarding Your personal data, including but not limited to:

• Right to be informed: The data subject has the right to know how We will use his/her personal data as explained in this privacy policy.
• Right to access and obtain personal data: The data subject has the right to request a copy of his/her personal data.
• Right to rectify personal data: The data subject has the right to request the correction of his/her personal data that he/she deems inaccurate, incorrect or incomplete, and it will be reviewed and updated.
• Right to destroy personal data: The data subject has the right to request the destruction of his/her personal data in certain circumstances in accordance to the relevant regulations, unless there is a legal text specifying a specific period of retention or contractual requirements.
• Right to withdraw consent to the processing of personal data: The data subject can withdraw his/her consent to the processing of his/her personal data -at any time- unless there are legitimate purposes in accordance with the Saudi Regulations that require the contrary.
• Right to data portability: The data subject may have the right to request for a copy of Your Personal Data in a machine-readable format, and the right to transmit that data to a different controller.
• The Right to submit any complaint related to applying the provisions of the Law to the Saudi Data and Artificial Intelligence Authority (SDAIA).
• The Right to claim compensation for material or moral damage if You are harmed as a result of any violation stipulated in the Personal Data Protection Law and its Implementing Regulations.

In case of partial or complete incapacity of the Data Subject, a valid legal guardian may exercise the rights on behalf of the Data Subject. NSG will collect necessary documents to verify the validity of the guardianship over the Data Subject. 

Unless otherwise stipulated by the law, you will not be required to pay any fees in return for exercising this right. In case of submitting a request for exercising this right, you will receive a response within 30 days as of the request receiving date. 

If  You would like more information about Your rights, to exercise these rights, or if You have any concerns about our processing of Your personal data, please contact us via the method set out in the “Complaint or Objection Filing Method for the Personal Data Protection” section of this notice below. If You choose to exercise Your rights, we will respond in accordance with, and to the extent required by, our legal obligations.

If You believe that We have illegally processed Your personal data, or if You have suffered as a result of unlawful processing of Your personal data, you can present a claim to Your local supervisory authority.

Where You are given the option to share Your personal data with us, you can always choose not to do so. If You object to the processing of Your personal data, NEO SPACE GROUP™ will respect that choice in accordance with its legal obligations. This could mean that We are unable to perform the actions necessary to achieve the purposes of processing described above.

10. Security and protection of your Personal Data

We respect your privacy and are committed to protecting the Personal Data. We take enough technical and organizational measures capable of protecting the Personal Data and information against loss, damage, disclosure, replacement with incorrect data or information, or addition of untrue information.

11. Contact Us 

You can reach out to the Data Protection Office at NSG by writing to the below email address.

Email: Privacy@neospacegroup.com

12. Complaint or Objection Filing Method for the Personal Data Protection

If You have any Personal Data Protection Law concerns, or if We do not comply with the Personal Data Protection Law, you can file a complaint to the Data Privacy Office using the Email address mentioned above.

If You are unsatisfied with how We process Your complaint, you can file a complaint to the Competent Authority SDAIA.

• SDAIA Address
  Kingdom of Saudi Arabia
  Riyadh
  Website
  Saudi Data & AI Authority (sdaia.gov.sa)
  National Data Governance Platform “DGP” (dgp.sdaia.gov.sa)

13.  Privacy Policy/Notice updates

NSG reserves the right to change the Privacy Policy/Notice or Terms & Conditions when necessary. We keep this Privacy Notice under regular review to reflect any changes and in accordance with Applicable Data Protection Laws.

This Notice may also be supplemented by other statements as needed to comply with local requirements in the country where You live.