Privacy Policy

1. Introduction

National Company for Spatial Data (hereafter referred to as “NSG,” the “Company,” “we,” or “us”) is committed to protecting your privacy and handling your personal data responsibly, in accordance with applicable data protection laws, including the Kingdom of Saudi Arabia’s Personal Data Protection Law (PDPL), as amended by Royal Decree No. (M/148).

NSG acts as a Data Controller, meaning we determine the purposes and means of processing your personal data. As required under applicable data protection laws, we are providing this privacy notice (“Policy” or “Notice”) to inform you about how we manage your personal data.

This Privacy Policy describes how we collect, use, disclose, and protect your personal data in connection with the NSG Marketplace. It may be updated from time to time. While material changes will be communicated to you where appropriate, we recommend reviewing this Policy periodically to stay informed.

If you have any questions about this Policy or how we handle your data, please refer to the “Contact Us” section below.

2. Applicability of this Policy

This Policy details how NSG collects, holds, processes, transfers, stores, and retains (referred to as “Process” or “Processing”) the Personal Data of its Customers (referred to as “Customers”, “Users” or “You”). This Policy also details your rights as a data subject under Applicable Data Protection Laws and who You can contact for any queries or grievances.

3. What Personal Data is collected from You?

• General Personal Data – Information such as your First Name, Last Name, Industry, Job Title, etc;
• Contact Information – Information such as your Email address, phone number, etc;
• Account information – Information such as User Id and Password.
• Technical and network activity – Information such as your IP address, timestamps and other online identifiers;
• Payment information – Information such as your Credit Card number, Bank account number, etc;
• Billing Information – Information such as your billing address, email address, first name, last name, company name, etc;
• Cookies – When You visit Our platform we might collect Your browser’s cookies.

4. How do we Collect Your Personal Data?

NSG may directly collect Your Personal Data You provide Us, when You:

• Use or view our platform via Your browser’s cookies;
• Fill in contact form or send Us an email;
• Register for our login area and Set up an Account in order to use Our platform’s full range of functions;
• Subscribe to Our newsletter in which We inform You about current products and services;
• Complete a customer survey or provide feedback on any of Our contact forms or via email;
• Complete transactions through Our platform, such as fulfilling an order for Our Service;
• Perform search queries on Our platform;
• Request assistance from Our Support team;
• Register for or attend Our Marketing events;
• During each of Your interactions with us, we collect information about Your connection and Your browsing.

5. What is the purpose of collection of Your Personal Data?

• To allow You to create Your account by verifying Your identity and make Our Platform accessible to You.
• To allow You to customize Your experience on the platform.
• To ensure security of the User accounts and protect our environment from unauthorized access.
• To allow You to deactivate Your account when you no longer require it.
• To keep You informed about Your account activity and status;
• To inform You about upcoming credit expiration dates and any relevant changes to credit management;
• To keep You informed about potential security risks and help You in recovering Your accounts;
• To inform You about new features, changes to terms and conditions and other relevant information;
• To provide You assistance with technical issues, account inquiries and general questions about the platform;
• To track and organize Your support interactions and resolutions;
• To ensure Customer satisfaction and address any problems You may encounter;
• To reach out to potential Customers and generate interest in NSG’s products and services;
• To promote our Products/Services and Brand (i.e. newsletters, testimonials, email marketing campaigns, location-based marketing, digital marketing campaigns, response to enquiries, events, webinars, public relations activities etc)
• To keep You informed about NSG’s offerings and updates;
• To facilitate Your transactions and to provide You with records of Your transactions and billing information;
• To provide secure and reliable DNS resolution and protect against Distributed Denial of Service (DDoS) attacks;
• To manage and fulfil requests for access to specific data collections on the platform;
• To maintain logs of activity within Our platform;
• To monitor, analyse, and visualize business data relating to the operations of Our platform;
• Consumer Profiling (non-automated, track online behavior, marketing analytics, user feedback, track website usage etc)

6. Legal basis for Collecting and Processing Your Personal Data

• Your explicit consent: When We ask for Your consent to process Your Personal Data for a specific purpose that we communicate to You. When You consent to our processing Your Personal Data for a specified purpose, You may withdraw your consent at any time and we will stop processing of your data for that purpose
• Contractual obligation: When We provide You with Services, or communicate with You about them. This includes when we use Your Personal data to take and handle orders, deliver products and Services, send You "Learn & Improve" emails that may include Product onboarding tips, Products and Services updates to help You to access and use the Platform in order to meet Your needs or even process payments.
• Legitimate interest: For us to safeguard our platform from unauthorized access and security threats and to monitor, analyse and visualize business data relating to the operations of our platform.
• Legal Obligation: When we use Your Personal Data to comply with other laws.

7. How do we store Your Personal Data and for how long?

NSG uses technical and organisational security measures in order to protect the Personal Data We have under Our control against accidental or intentional manipulation, loss, destruction and against access by unauthorised persons. Our security procedures are continually enhanced as new technology becomes available.

We will delete Your Personal Data when the purpose of the processing has been achieved unless further statutory retention periods exist, e. g. we still need Your Personal Data to fulfil contractual or legal obligations (accounting, tax reasons, etc.).

Even after the service has been provided or after termination of the contract, it may be necessary to continue to store personal data in order to comply with contractual or legal obligations.

8. Who might receive Your Personal Data?

In the context of our processing of Your Personal Data, it may happen that the data is transferred to other places, companies or persons or that it is disclosed to them.

We only transfer Your Personal Data to third parties if there is an appropriate legal basis for doing so, in particular if:

• You have given your explicit consent
• This is necessary for the performance of the contract with You
• There is a legal obligation for the disclosure
• The transfer is necessary for the purposes of legitimate interests, as well as for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest to not transfer your data.
• External service providers Process Personal Data on our behalf in pursuant to Article 29 of the KSA Personal Data Protection Law (PDPL).

Recipients of your Personal Data may include, for example, data centres that store our website and databases, IT service providers that maintain our systems or provide CRM functionalities and consulting firms, payment service provider within the context of payment transactions, service providers commissioned with IT tasks or providers of services and content that are embedded in a website. If we pass data on to our service providers, they may use the data exclusively for the fulfilment of their tasks. We have carefully selected and commissioned the service providers.

In such a case, the legal requirements will be respected and in particular corresponding contracts or agreements, which serve the protection of your data, will be concluded with the recipients of your data.

9. Transfer of Your Personal Data outside of the Kingdom of Saudi Arabia

Your personal data may be processed by NSG and its affiliated companies and those other parties described above, which may involve your personal data being transferred outside the Kingdom of Saudi Arabia. Where SDAIA has not issued an adequacy decision in relation to the jurisdiction where your personal data is processed, and you are a KSA Data Subject, we will ensure that there are adequate mechanisms in place to protect your personal data in accordance with applicable data protection laws. We will do this through use of data transfer agreements implementing standard data protection clauses.

10. Your Rights regarding Processing of Your Personal Data

Under Personal Data Protection Law (PDPL), you have the following rights, which primarily depend on the purpose of Personal Data collection and processing:

• Right to Be Informed: You are entitled to be informed how we collect your Personal Data, legal basis for collection and processing, how such data is processed, stored, destroyed, and to whom it will be disclosed. You can access all details through this Privacy Policy or contact us using the below mentioned information.
• Right of Access to Your Personal Data: You are entitled to request access to your Personal Data held by us in a readable and clear format, if technically feasible, by contacting Privacy@neospacegroup.com. Please note, we may restrict access if required for security purposes, by law, or to fulfil judicial obligations.
• Right to Request Correction of Your Personal Data: You are entitled to request correction of your Personal Data that you believe is inaccurate, incorrect, or incomplete, by emailing us at Privacy@neospacegroup.com. Such requests will be reviewed and addressed within 30 days, and you will be notified of the outcome.
• Right to Request Destruction of Your Personal Data: You are entitled to request destruction of your Personal Data under certain circumstances (e.g., if the service for which it was collected is complete, or if you withdraw your consent). NSG may retain certain data where legally required.
• Right to Withdraw Consent: You are entitled to withdraw your prior Consent to Processing based on it, at any time. You can withdraw Your Consent by emailing us. Once We have received notification that You have withdrawn your consent, We will no longer Process your Personal Data for the purpose(s) You originally agreed to.
• Right to Submit a Complaint: You have the right to submit a complaint regarding the application of the PDPL to the Saudi Data and Artificial Intelligence Authority (SDAIA).
• Right to Compensation: You have the right to claim compensation for material or moral damages if you are harmed as a result of a violation under the Personal Data Protection Law and its Implementing Regulations.

In case of partial or complete incapacity, a valid legal guardian may exercise these rights on behalf of the Data Subject. NSG may request supporting documentation to verify guardianship.

Unless otherwise stipulated by law, you will not be charged any fees for exercising these rights. You will receive a response within 30 days from the date your request is received.

For further information or to exercise your rights, please contact the NSG Data Protection Office using the contact details provided below.

11. Contact Us

You can reach out to the Data Protection Office at NSG by writing to the below email address. Email: Privacy@neospacegroup.com

12. Complaint or Objection Filing Method

If you believe your rights under the Personal Data Protection Law have been violated, you can file a complaint with NSG by emailing Privacy@neospacegroup.com.
 If you remain unsatisfied after 30 days, or if NSG does not address your concern, you may escalate the complaint to the Saudi Data and Artificial Intelligence Authority (SDAIA) via their official complaint portal or as described on their website (www.sdaia.gov.sa).