Privacy Policy

1. Introduction

The Saudi Red Crescent Authority (“SRCA,” “we,” “us,” or “our”) is committed to protecting the privacy and security of our visitors and service users. By using our website, regardless of whether you browse, submit inquiries, requests, or use our digital services, you agree to this Privacy Policy and any updates made to it.

2. Information We Collect

a. Information You Provide

Contact information: full name, email address, phone number
National ID (if necessary), along with any data shared via inquiry, feedback, or complaint forms

b. Automatically Collected Information

IP address, access time and date, referring URLs, pages visited
Cookies and similar technologies to remember settings, assist with voting/poll participation, and support core site functionality

3. Purposes of Collection

We process your personal data to:

Respond to inquiries, complaints, suggestions, and applications
Improve user experience and site design
Provide electronic services (e.g., volunteer, recruitment)
Fulfill legal and regulatory obligations
Ensure cybersecurity, fight fraud, and analyze site usage.

4. Legal Basis for Data Processing

Your data is processed based on the following legal grounds under Saudi law:

Consent provided at the time of submission
Compliance with statutory obligations
Execution of contracts or service requirements
Protection of vital interests (e.g. medical emergencies)
Performance of tasks in the public interest.

5. Data Sharing

We do not share personal data with non-governmental third parties. Data may be disclosed to:

Relevant government entities or departments, as authorized or legally required
Judicial or regulatory authorities upon legal request

6. Data Storage, Retention, and Security

All personal data is stored securely on servers located within Saudi Arabia, aligned with national cybersecurity policies
We retain data only as long as necessary for its original purpose or as required by law, after which it is securely deleted or rendered irretrievable
We maintain robust technical and administrative safeguards to prevent unauthorized access, alteration, disclosure, or destruction.

7. Your Rights

Under the Saudi Personal Data Protection Law, you have the right to:

Be informed about how your data is used
Access your personal data
Correct any inaccurate or incomplete data
Request a copy of your data in a usable format
Request deletion of data if no longer necessary or legally required
Withdraw consent where relied upon
You can exercise these rights by contacting our Data Protection Office via DMO@srca.org.sa

8. Cookies & Technology

We use essential cookies that cannot be disabled because they are required for core functionality
Cookies enable remembering login status, poll participation, browser settings, and analytic insights

9. Links to External Sites

Our website may include links to third-party sites that follow different privacy practices. We are not responsible for their content or policies. We recommend reviewing the privacy statements of linked websites

10. Impacts of Not Providing Data

Refusing to provide required personal data may hinder our ability to process your requests or deliver services, including emergency or support functions

11. Privacy Office & Contact

Data Protection Office (DPO):

Saudi Red Crescent Authority – Data & Privacy Management Office
Location: Riyadh, Saudi Arabia
Email: DMO@srca.org.sa

12. Updates to Privacy Policy

We may revise this policy from time to time. It is your responsibility to review updates. Continued use of the site constitutes acceptance of any changes

Summary

We collect both user-submitted and technical data for essential functions
Processing is lawfully grounded and limited to the needs of providing services
Data is stored securely and only shared with government or legal authorities
You have rights to access, amend, copy, or delete your data
Cookie use is essential for site operation
Contact our DPO for any requests or concerns