1. Introduction
IPMA KSA (“we”, “our”, or “us”) is committed to protecting the privacy and personal data of its users, members, and visitors. This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with the Saudi Personal Data Protection Law (PDPL) and other applicable regulations in the Kingdom of Saudi Arabia.
By using our website and services, you agree to the terms of this Privacy Policy.
2. Personal Data We Collect
We may collect and process the following types of personal data:
- Full name
- Contact information (email address, phone number)
- Nationality and professional details (if applicable)
- Membership information and identification numbers
- Login credentials (encrypted)
- Payment-related information (processed securely via authorized payment gateways)
- Technical data such as IP address, browser type, and device information
3. Purpose of Data Collection
Personal data is collected and used for the following purposes:
- Processing membership applications and registrations
- Managing user accounts and memberships
- Processing payments and issuing receipts
- Generating digital membership cards and certificates
- Communicating important updates, notices, and service-related information
- Responding to enquiries and support requests
- Improving website functionality and user experience
- Complying with legal and regulatory requirements
4. Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:
- Consent provided by the data subject
- Performance of contractual obligations
- Compliance with legal and regulatory requirements
- Legitimate organizational interests, where applicable
5. Data Storage and Security
We implement appropriate technical and organizational security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.
Personal data is stored securely within systems that comply with applicable Saudi data protection requirements. Access is restricted to authorized personnel only.
6. Data Sharing and Disclosure
We do not sell or rent personal data to third parties.
Personal data may be shared only with:
- Authorized service providers (such as payment gateways and IT service providers)
- Regulatory or governmental authorities when required by law
- Internal departments for legitimate operational purposes
All third parties are required to maintain the confidentiality and security of personal data.
7. Cross-Border Data Transfer
Personal data will not be transferred outside the Kingdom of Saudi Arabia unless permitted under the PDPL and with appropriate safeguards in place or with the explicit consent of the data subject.
8. Data Retention
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations.
Once data is no longer required, it is securely deleted or anonymized.
9. Data Subject Rights
In accordance with the PDPL, data subjects have the right to:
- Access their personal data
- Request correction or updating of inaccurate data
- Request deletion of personal data where legally applicable
- Withdraw consent for data processing (where applicable)
- Be informed about how their personal data is used
Requests can be submitted through our official contact channels.
10. Cookies and Tracking Technologies
Our website may use cookies and similar technologies to enhance user experience and analyze website performance. Users can control cookie preferences through their browser settings.
11. Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time to reflect legal, regulatory, or operational changes. Updates will be published on this page with the revised effective date.
12. Contact Information
For questions, concerns, or requests related to this Privacy Policy or personal data processing, please contact us through the official contact details provided on our website.