Protecting Personal Data Across QanunHR

This Privacy Policy explains how our HR platform ("the Platform", "we", "our", or "us") collects, uses, processes, stores, and protects personal data when users access our website, landing pages, and HR management application.

Our services are designed in accordance with the data protection regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (Saudi Arabia) issued by the Kingdom and supervised by the Saudi Data and Artificial Intelligence Authority.

By using our website or HR application, you agree to the collection and use of information in accordance with this Privacy Policy.

Collection of Personal Data

We may collect personal data necessary to provide HR management services. This may include:

Full name
Email address
Phone number
National ID or employee identification information
Job title and employment details
Payroll and compensation information
Attendance and performance records
Organizational information provided by employers

The data may be provided directly by organizations using the platform or entered by authorized HR administrators.

Purpose of Data Processing

Personal data collected through the Platform may be processed for the following purposes:

Managing employee lifecycle processes
Payroll administration and HR operations
Attendance and leave management
Performance monitoring and employee evaluation
Compliance with Saudi labor regulations
Improving system functionality and user experience
Ensuring security and preventing unauthorized access

Personal data will only be processed for legitimate and clearly defined purposes consistent with Saudi regulations.

Legal Basis for Processing

Processing of personal data is conducted in accordance with the requirements of the Personal Data Protection Law (Saudi Arabia) and applicable Saudi regulations. Organizations using the platform act as the data controllers for their employees’ information, while the Platform acts as the data processor providing HR management services.

Data Security

We implement appropriate administrative, technical, and organizational safeguards to protect personal data from unauthorized access, disclosure, alteration, or destruction. Security measures may include:

Secure cloud infrastructure
Encryption technologies where applicable
Access control mechanisms
Authentication and authorization systems
Continuous system monitoring and security management

These measures are implemented in accordance with recognized security practices and applicable Saudi regulations.

Data Storage and Transfer

Personal data may be stored on secure infrastructure. Where applicable, we ensure that data handling complies with Saudi data protection regulations. Cross-border data transfer, if required for infrastructure or technical operations, will only occur in accordance with the requirements set by Saudi data protection authorities.

Data Sharing

We do not sell or rent personal data. Personal data may only be shared in limited situations such as:

With authorized service providers necessary for operating the Platform
With the organization that owns and manages the employee data
When required by Saudi laws or government authorities
To protect legal rights, security, or compliance obligations

All service providers are required to maintain appropriate confidentiality and data protection standards.

Data Retention

Personal data is retained only for as long as necessary to provide HR services and comply with legal obligations. Organizations using the platform control the duration of employee data storage and may request deletion or modification in accordance with Saudi regulations.

User Rights

Under the Personal Data Protection Law (Saudi Arabia), individuals may have the right to:

Access their personal data
Request correction of inaccurate information
Request deletion of personal data where applicable
Request clarification regarding how their data is processed

Requests may be submitted through the contact information provided on the Platform.

Cookies and Website Analytics

Our landing pages may use cookies and similar technologies to:

Improve website performance
Analyze traffic and usage patterns
Enhance user experience

Users may adjust browser settings to disable cookies if desired.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect legal, regulatory, or operational changes. Updated versions will be published on the website with the effective revision date.

Contact Information

If you have questions about this Privacy Policy or the handling of personal data, you may contact us through the contact details provided on the website or platform.