العربية
First - Introduction

The center provides several services through digital platforms, during which it collects and processes personal data. The center is committed to maintaining the confidentiality and privacy of this data and using it to achieve the desired level of service provision in accordance with the terms and conditions applicable in the Kingdom of Saudi Arabia.


Second - Personal Data Collected

Due to the nature of the services provided by the center, we may request that you disclose the following data:
  1. Full name
  2. Date of birth
  3. National ID number
  4. Address
  5. Phone number
  6. Email address
  7. Gender
  8. P.O. Box
  9. Postal code

Third - Methods of Collecting Personal Data

The data is collected through registration on the website/platform and through the national platform "Nafath."

​Fourth - Use of Personal Data

  1. Personal data is used to complete the requested services by notifying the beneficiary via text messages and improving the user experience.
  2. The identity and accuracy of user information are verified through the "Nafath" national platform.
  3. Data is also used to build usage statistics and geographic distribution.
  4. Some data is used to measure user satisfaction and digital experience after the service has been provided.
Fifth - Disclosure of Personal Data

The center is committed to not sharing user data with third parties, except in cases mentioned in Article 15 of the Personal Data Protection Law, which states: "The Controller may not Disclose Personal Data except in the following situations:
  1. Data Subject consents to the Disclosure in accordance with the provisions of the Law.
  2. Personal data has been collected from a publicly available source.
  3. The entity requesting Disclosure is a Public Entity, and the Collection or Processing of the Personal Data is required for public interest or security purposes, or to implement another law, to fulfill judicial requirements.
  4. The Disclosure is necessary to protect public health, public safety, or to protect the lives or health of specific individuals.
  5. The Disclosure will only involve subsequent Processing in a form that makes it impossible to directly or indirectly identify the Data Subject.
  6. The Disclosure is necessary to achieve legitimate interests of the Controller, without prejudice to the rights and interests of the Data Subject, and provided that no Sensitive Data is to be processed.

The regulations shall set out the provisions, controls and procedures related to what is stated in paragraphs (2) to (6) of this Article."
If the center or any other entity wishes to use your personal data for purposes other than those mentioned in "Fourth: Use of Personal Data," your prior consent will be obtained.


Sixth - Methods of Storing, Retaining, and Disposing of Personal Data

All personal data is stored in the center’s databases and retained for the time necessary to achieve the purpose for which it was collected. Servers and databases are protected according to the best standards and practices, as required by the National Cybersecurity Authority's regulations. Subsequently, the data is securely disposed in a manner that prevents unauthorized access or retrieval, in compliance with the provisions of Article 18 of the Personal Data Protection Law, which states:"
  1. The controller shall, without undue delay, destroy the personal data when no longer necessary for the purpose for which they were collected. However, the controller may retain data after the purpose of the collection ceases to exist; provided that it does not contain anything that may lead to specifically identifying data subject pursuant to the controls stipulated in the regulations.
  2. In the following cases, the controller shall retain the personal data after the purpose of the collection ceases to exist:
    a. If there is a legal basis for retaining the personal data for a specific period, in which case the personal data shall be destroyed upon the lapse of that period or when the purpose of the collection is satisfied, whichever longer.
    b. If the personal data is closely related to a case under consideration before a judicial authority and the retention of the personal data is required for that purpose, in which case the personal data shall be destroyed once the judicial procedures are concluded."
Seventh - Rights of Data Subjects

The National Center for Wildlife prioritizes the confidentiality of its users' and visitors' information. The center makes every effort to ensure the privacy and protection of personal data in accordance with national regulations.

Under the provisions of personal data protection regulations, data subjects have the following rights:
  1. The right to be informed: This includes being informed of the legal basis for collecting their personal data, the purpose of collection, how it will be processed, and which entities will receive the data.
  2. The right to access personal data: You have the right to request access to your personal data and obtain a copy, in accordance with the relevant laws and regulations, subject to certain restrictions and exceptions.
  3. The right to request correction of personal data: You have the right to request corrections if your personal data is inaccurate, incomplete, or incorrect.
  4. The right to request the deletion of personal data: You have the right to request the deletion of your personal data, in accordance with the applicable data protection laws.
  5. The right to withdraw consent for data processing: You can withdraw consent for the processing of your personal data at any time unless there are legitimate grounds for processing the data.
Eighth - Complaints and Inquiries

For complaints or inquiries related to the privacy policy or personal data processing, please contact the Data Management Office via email at dmo@ncw.gov.sa


Ninth - Updates to the Privacy Policy

Visitors to the portal and beneficiaries of its services should regularly review the privacy terms and information confidentiality principles for any updates. Please note that the center is not obligated to announce any updates to these terms and principles.


Tenth - Related Policies and Legislation

Personal Data Protection Law, which can be viewed through the following link [Here]

The Privacy Policy for the Employment Platform, which can be viewed through the following link [Here]


The last update to this policy was made on February 02, 2025.