Privacy Policy

NIZMA respects the privacy of its users and is committed to handling personal data in accordance with the laws and regulations applicable in the Kingdom of Saudi Arabia. NIZMA is a trade name and platform affiliated with Al Bard Al Fakher Establishment. Data Controller Information: Al Bard Al Fakher Establishment Unified National Number: 7041926655 Platform Trade Name: NIZMA Website: nizma.tech Email: [nizma.erp@gmail.com](mailto:nizma.erp@gmail.com) Contact Number: 0545658945 Address: Building 7410, Al Khans Bin Shuraiq Bin Amr Street, Al Asilah District, Makkah 24423, Kingdom of Saudi Arabia Secondary Number: 2691 Short Address: MFUA7410 1. Scope of This Policy This Policy explains how personal data is collected, processed, stored, and used when using the NIZMA website, creating an account, or using the platform's services. This Policy does not govern data that the customer processes independently outside the scope of NIZMA. 2. Data We May Collect Depending on how the service is used, the data may include: Account information such as name, username, email address, and mobile number. Establishment information such as the establishment name, business information, addresses, and contact details. Information relating to users and employees added by the establishment owner to the account. Login, session, and security information necessary to protect the account. Operational data that the customer chooses to enter into the platform, such as data relating to customers, suppliers, products, sales, purchases, invoices, inventory, and accounts. Subscription, plan, and payment information when paid services are used. Support information and communications sent by the user to NIZMA. Technical data and logs necessary to operate and protect the service, diagnose faults, and prevent misuse. 3. How We Collect Data Data may be collected: Directly from the user during registration or when data is entered. From the establishment owner or authorized users within the establishment's account. Automatically while the platform is being used where this is necessary to operate or protect the service or to record security and technical events. From service providers or third parties where necessary to provide a service requested by the user and to the extent permitted by applicable laws and regulations. 4. Purposes of Processing Data is used, as necessary, for purposes including: Creating and managing accounts. Operating NIZMA features. Carrying out operations requested by the user. Managing users and permissions. Providing technical support. Protecting accounts and the platform. Detecting and preventing unauthorized or fraudulent use. Managing subscriptions and paid services. Sending operational communications relating to the service. Developing and improving the performance and security of the platform. Complying with legal and regulatory requirements. Retaining records necessary to evidence transactions and consents where required. 5. Lawful Basis for Processing Personal data is processed in accordance with the lawful bases permitted by applicable laws and regulations, depending on the nature of each processing activity. These may include: Performing a contract or providing a service requested by the user. Taking steps at the user's request before entering into a contract. Complying with a legal obligation. The consent of the data subject where consent is required. Pursuing a legitimate interest where permitted by law and where that interest does not conflict with the rights of the data subject. 6. Mandatory and Optional Data Certain data is necessary to create an account, operate the service, or perform a specific function. If the user does not provide the required data, it may not be possible to create the account or perform the related function. Data that is not necessary for the core service will be optional where this is made clear by the system or user interface. 7. Customer Data Entered by NIZMA Users A customer may enter into NIZMA personal data relating to its customers, employees, suppliers, or other individuals. In such cases, the customer is responsible for having a lawful basis that permits the collection, entry, and use of such data. NIZMA processes such data to the extent necessary to provide the service to the customer and in accordance with the instructions and operations performed by the user within the system. 8. Disclosure of Data Personal data is disclosed only where permitted by law or required for the provision of the service. This may include disclosure to: Infrastructure, hosting, and technology service providers where necessary to operate the platform. Communication, email, backup, or other technology service providers where such services are actually used. Payment service providers where an electronic payment service connected to the platform is used. Government, judicial, or regulatory authorities where there is a binding lawful request. Users' personal data is not sold to advertisers. 9. Transfer of Data Outside the Kingdom If the use of a particular service provider or technical infrastructure requires personal data to be transferred to or processed outside the Kingdom, this will be carried out in accordance with the applicable legal requirements and controls in the Kingdom of Saudi Arabia. 10. Data Retention Data is retained for the period necessary to achieve the purpose for which it was collected, or for the period required to comply with legal or contractual obligations or to protect rights and claims. When the data is no longer required, it will be handled through deletion, destruction, or anonymization, as required by applicable laws and regulations, the nature of the data, and the technical capabilities of the system. 11. Data Protection NIZMA takes reasonable technical and organizational measures to protect data against unauthorized access, loss, alteration, or unlawful disclosure. Depending on the nature of the service, these protections may include permission management, account protection, access restrictions, security event logging, backups, and other appropriate technical measures. No technical method can be guaranteed to be completely free from all risks. 12. Rights of the Data Subject Data subjects have the rights granted to them under the Personal Data Protection Law and related regulations, as applicable to their circumstances. These rights include: The right to be informed of the lawful basis and purpose for collecting personal data. The right to access personal data in accordance with applicable legal requirements. The right to request a copy of personal data in a readable and clear format as provided by law. The right to request the correction, completion, or updating of inaccurate data. The right to request the destruction of personal data where the circumstances prescribed by law are met. Any other rights granted under applicable laws and regulations. 13. Exercising Your Rights Requests relating to personal data may be submitted through: Email: [nizma.erp@gmail.com](mailto:nizma.erp@gmail.com) Contact Number: 0545658945 We may request sufficient information to verify the identity of the person making the request and to protect their data before carrying out the request. Requests will be handled in accordance with the timeframes and procedures established by applicable laws and regulations. 14. Withdrawal of Consent Where processing is based on the consent of the data subject, the data subject may withdraw that consent in accordance with applicable legal requirements. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. Withdrawal of consent may result in the inability to provide a service that necessarily depends on the relevant data. 15. Data Accuracy Users are required to maintain the accuracy of their data and update it when it changes. NIZMA also takes appropriate steps to verify data accuracy where this is required or reasonably possible given the nature of the service. 16. Security Incidents If an incident involving personal data occurs, NIZMA will take the necessary measures to address the incident and reduce its effects. The competent authorities or affected data subjects will be notified where notification is required under applicable laws and regulations. 17. User Accounts Within Establishments The establishment owner or authorized users may manage the establishment's users and their permissions. Authorized persons within the establishment may be able to access data according to the permissions granted to them by the establishment owner. The customer is responsible for appropriately managing internal permissions. 18. Use of Data for Marketing Personal data will not be used to send marketing communications that require consent unless the required lawful basis or consent has first been obtained. Users may request to stop receiving marketing communications where an opt-out mechanism is available. Operational communications necessary for the service, such as security or account-related messages, are not considered marketing communications. 19. External Links and Services The platform may contain links to or integrations with external services. The user's interaction with those services is subject to the privacy policies and terms of the respective service providers. 20. Children's Data NIZMA is a business management platform and is not a service directed at children. The platform is not intended to collect children's data directly for the purpose of creating independent accounts for them. If a customer enters data relating to a minor as part of its business data, the customer is responsible for having the lawful basis required for doing so. 21. Changes to This Privacy Policy This Policy may be updated when the services, methods of processing, or legal and regulatory requirements change. The date of the latest update will be shown at the top of the Policy. Where a material change requires notification or renewed consent, the appropriate action will be taken in accordance with applicable laws and the mechanisms available on the platform. 22. Complaints and Inquiries For any inquiry or request relating to privacy or personal data: NIZMA Affiliated with Al Bard Al Fakher Establishment Unified National Number: 7041926655 Email: [nizma.erp@gmail.com](mailto:nizma.erp@gmail.com) Mobile: 0545658945 Website: nizma.tech Address: Building 7410 Al Khans Bin Shuraiq Bin Amr Street Al Asilah District Makkah 24423 Kingdom of Saudi Arabia Secondary Number: 2691 Short Address: MFUA7410