Privacy Policy

First: Introduction

The National Center for Wildlife Development is a Saudi center established pursuant to Council of Ministers Resolution No. (417) dated 26/03/2019G. The Center's objectives are to oversee and manage protected areas, protect wildlife, work to reintroduce species threatened with extinction to their natural habitats, and develop and preserve terrestrial, animal, and marine wildlife, as well as to handle requests relating to this field. Pursuant to the Personal Data Protection Law issued under Royal Decree No. (M/19) dated 9/2/1443H, as amended by Royal Decree No. (M/148) dated 5/9/1444H, and its Implementing Regulations, and in keeping with the Center's commitment to protecting the data and information of its Users, this Privacy Policy has been prepared to provide the necessary protection for, and to govern the management of, all Personal Data shared with us.

This Privacy Policy applies to all visitors, Users, and other persons who visit our website.

Through this Policy, we wish to advise you of the following:

• 1. The information and data we may collect about you, and the purpose and legal basis for collecting it, in connection with your use of our website.

• 2. The approach taken by the Center in handling the Personal Data we may collect, and any third party with whom it may be shared.

• 3. The rights guaranteed by law, as set out in the Personal Data Protection Law and its Implementing Regulations.

The Personal Data we may collect is important to our provision of services within the Center's scope of work. Through this Privacy Policy, we seek to reinforce transparency in our dealings with Data Subjects and to safeguard their privacy.

Second: Collection of Personal Data

We wish to advise you that we may collect Personal Data when you contact us or request services through our website. The Personal Data that may be collected includes the following:

• a. Data you provide to us: We may collect the following data from you, directly or indirectly, in connection with the provision of electronic services through the website, including, without limitation: name, identification information, email address, and contact numbers.

• b. Complaints and inquiries data: Personal Data collected when a complaint or inquiry is submitted, including, without limitation: name, identification information, contact details, and official documents and papers that may contain Personal Data.

• c. Job applicants' data and CVs: Data collected from applicants for employment through the recruitment platform, which may include, without limitation: name, contact information, educational qualifications, work experience, and any documents that may contain Personal Data.

• d. Data collected automatically: The website may automatically collect data transmitted by your browser when you visit the website, including, without limitation: cookies, geolocation data and your real-time coordinates, and IP address (device protocol).

• e. Social media applications and external links: Our website may contain links to the Center's social media platforms, including, without limitation, X, LinkedIn, YouTube, and others, as well as external links to other websites. Such websites may collect information about you when providing you with their services, or through cookies or other tracking technologies. The Center shall bear no responsibility except within the scope of what takes place on the Center's own website.

Third: Use of Personal Data

The Center may use the Personal Data collected from you, directly or indirectly, for purposes related to the Center's scope of work concerning wildlife development, including, without limitation:

• 1. Responding to, and enabling your use of, the electronic services available on the website.

• 2. Processing the complaints you submit, which may require sharing Personal Data with the Center's Unified Contact Center team.

• 3. Evaluating candidates for employment, reviewing job applications, and verifying qualifications and experience.

• 4. Responding to inquiries received by the Center.

• 5. Responding to requests submitted by Data Subjects or those acting on their behalf.

Fourth: Disclosure of Personal Data

We wish to advise you that the Center is committed to not sharing or disclosing Personal Data to any other party or third party for any purpose other than the purpose relating to the service concerned. Where Personal Data is transferred outside the Kingdom, the safeguards set out in the Regulation on Transfer of Personal Data outside the Kingdom shall apply.

Notwithstanding the foregoing, the Center reserves the right to disclose Personal Data in the following cases:

• 1. Where explicit Consent has been obtained.

• 2. Where the Personal Data was collected from a source publicly available to all.

• 3. Where the party requesting disclosure of the data is a public entity and the request is made for security or judicial purposes, or in implementation of the provisions of another law in the Kingdom of Saudi Arabia.

• 4. Where disclosure is necessary to protect the public interest and public safety, or to protect specific individuals.

• 5. Where the Personal Data has been de-identified, together with anything that could otherwise lead to the identification of the Data Subject.

Fifth: Legal Bases for Collecting and Processing Personal Data

Pursuant to the Personal Data Protection Law and its Implementing Regulations, the legal bases on which we rely in processing your Personal Data are as follows:

1. Your explicit Consent, given in connection with the Processing of Personal Data for purposes related to the services provided by the Center.

1. Your explicit Consent, given in connection with the Processing of Personal Data for purposes related to the services provided by the Center.

• We may process Personal Data without obtaining your Consent in the following circumstances:

• b. Where the Processing is based on your initial Consent given for another purpose, and such Processing is consistent with the provisions of other laws in the Kingdom.

• c. Where the Processing of Personal Data is required for judicial or security purposes by public entities.

• d. Where necessary to comply with a legal obligation.

• e. Where necessary to protect vital interests.

• f. Where necessary to achieve the public interest.

• g. Where necessary to achieve the Center's legitimate interests.

Sixth: Storage of Personal Data

• 1. The Center recognizes the importance of storing Personal Data on its systems. Accordingly, it works to protect Personal Data and to securely delete it once it is no longer needed and there is no justification for its continued retention.

• 2. Personal Data collected through the website is stored on local servers located within the Kingdom of Saudi Arabia and is subject to the security technologies and controls issued by the National Cybersecurity Authority.

• 3. The Center destroys Personal Data once the purpose for which it was collected has been fulfilled and there is no justification for its retention, using secure means and technologies.

• 4. In certain cases, Personal Data may need to be retained after the purpose of its collection has been fulfilled, namely:

  • a. Where there is a legal basis justifying its retention for a specified period under the laws and regulations of the Kingdom, or for security reasons.

  • b. Where the Personal Data is closely connected to a case brought before the judicial authorities and its retention is necessary.

  • c. Where all elements that could lead to the identification of the Data Subject have been de-identified or concealed.

Seventh: Mandatory Nature of Collecting Personal Data

The Center is committed to collecting Personal Data relevant to the provision of its services and to ensuring the efficiency and quality of its performance. Providing Personal Data may be mandatory to complete certain services and procedures offered by the Center, and failure to provide it may impede the completion of requests or the receipt of services. The potential effects of not providing Personal Data include the following:

• 1. Inability to process the request or perform the requested service.

• 2. Cancellation or rejection of the request where the required Personal Data is not provided, or where incomplete data is provided.

• 3. Inability to contact the User to notify them of the status of their request or to respond to their inquiries.

• 4. Delay in fulfilling requests as a result of missing Personal Data.

• 5. Restriction of access to certain digital services that may require authentication using Personal Data.

Eighth: Rights of Data Subjects in Connection with the Processing of Personal Data

The Center makes every effort to provide high-quality services to all Users and to safeguard their rights as set out in the Personal Data Protection Law and the Center's approved Personal Data Protection Policy. These rights are as follows:

• • Right to be informed: You have the right to be informed of the collection of Personal Data and its uses, including the purposes of processing Personal Data, the retention periods applicable to it, and the parties with whom it will be shared.

• • Right to access Personal Data: You have the right to access your Personal Data held by the Center.

• • Right to request a copy of Personal Data: You have the right to obtain a copy of your Personal Data held by the Center, in a clear and readable format.

• • Right to request correction of Personal Data: You have the right to submit a request to the Center to correct your Personal Data where it may be inaccurate, incorrect, or incomplete.

• • Right to request destruction of Personal Data: You have the right to submit a request to the Center to destroy your Personal Data in the following cases:

  • a. Where you believe that the purpose for which the data was collected has been fulfilled and there is no longer a need to retain it.

  • b. Where a legitimate objection has been raised to our use of the Personal Data, for example:

    • 1. Where our use of the Personal Data conflicts with the provisions of the Law or other relevant laws.

    • 2. Withdrawal of Consent to the collection and Processing of the Personal Data.

• • Right to withdraw Consent to the Processing of Personal Data: You have the right to withdraw your previously given Consent to the Processing of your Personal Data at any time, unless there is a legal basis preventing you from doing so.

You may exercise any of the above rights by contact the Data Management Office at the Center by dmo@ncw.gov.sa.

Please note that the Center may retain certain records when logging requests it receives, in order to fulfil its obligations as a government entity subject to the provisions of the Law, and such retention is considered necessary for compliance with the laws and regulations of the Kingdom of Saudi Arabia. For further details on how your Personal Data is processed and how to exercise these rights, you may contact the Center's Data Management Office by email at dmo@ncw.gov.sa.

Ninth: Personal Data Protection Officer

Users and Data Subjects may exercise their rights by contact the Center's Data Management Office by email at dmo@ncw.gov.sa.

Except as otherwise provided under applicable laws and regulations, you will not be required to pay any fee or financial consideration for exercising these rights. Requests received will be responded to within thirty (30) working days from the date the complete request is received. This period may be extended by a further thirty (30) days where fulfilling the request requires unexpected or unusual additional effort, or where multiple requests are received from the same Data Subject; the requester will be notified of any such extension and the reasons for it.

Tenth: Complaints and Inquiries

Should you wish to submit a complaint, inquiry, or concern relating to data privacy or to how Personal Data is handled, you may contact our Data Management Office at the Center by email at dmo@ncw.gov.sa.

We will address all inquiries or issues you raise concerning the Processing of Personal Data. Where you are not satisfied with the handling of your complaint, or where no response is received within fifteen (15) working days, you may submit your complaint to the competent authority (the Saudi Data & Artificial Intelligence Authority) through the following available channels:

• • The website of the Saudi Data & Artificial Intelligence Authority (www.sdaia.gov.sa)

• • The National Data Governance Platform (www.dgp.sdaia.gov.sa)

Eleventh: Review and Update

The Center reserves the right to add to, or amend, any provision of this Privacy Policy. In the event of any update or amendment, the Center will notify Data Subjects, and the Center may close a Data Subject's account where they do not agree to the update or amendment made.

This Policy will be reviewed annually and updated whenever necessary, or upon the occurrence of any material change, consistent with applicable laws and regulations, in order to ensure its continued adequacy and effectiveness, and such review shall be recorded in the official log of updates.

• • This Policy was issued on 02/02/2025.

• • This Policy was last updated on 18/08/2026.