We prioritize the privacy and security of your personal data. All user information is handled with the utmost care and confidentiality.

The Saudi Press Agency's Saudi Photos platform (cc.spa.gov.sa) adheres to the Personal Data Protection Law (Royal Decree No. M/19, dated 09/02/1443 AH). We also align with the personal data protection principles and guidelines issued by the Saudi Data and Artificial Intelligence Authority and the National Data Management Office.

The Personal Data Protection Law and its regulations govern the processing of personal data by all entities, including those outside the Kingdom that process data related to individuals residing in the Kingdom. This ensures the protection of your rights regarding your personal information.

Privacy Policy

This Privacy Policy ("Policy") governs the relationship between you ("User", "You", or "Yours") and the Saudi Press Agency's (SPA) Saudi Photos platform (cc.spa.gov.sa) ("Platform", "We", or "Ours"), a government platform in the Kingdom of Saudi Arabia developed by the SPA.

We value your privacy and are committed to protecting your personal information. This Policy outlines the types of information we may collect from you or that you may provide ("Personal Data") while using the Platform and any related services ("Services"). It also describes our practices for collecting, using, storing, protecting, and disclosing this information. You have certain choices regarding our use of your Personal Data, and this Policy explains how you can access and update it.

Data Collection

You can use the Platform anonymously or with limited personal information. However, some services may require you to provide certain Personal Data. You have the right to choose not to provide any Personal Data, but this may limit your access to certain features or services.

We encourage you to contact us if you have any questions about the information we request.

Personal data collection is directly related to the Platform's objectives and adheres to all applicable legal requirements. Data collection methods are relevant to the user's circumstances, transparent, secure, and free from any deceptive or coercive practices.

If the collected data is no longer necessary for its intended purpose, the Platform will cease collection and promptly delete any previously collected data.

Before collecting your Personal Data, the Platform will ensure the following criteria are met:

• Clear rationale for collecting your personal data.
• Specification of the purpose of data collection, indicating which information is mandatory or optional, along with processing details that align with the purpose and comply with legal requirements.
• Disclosure of the identity and contact information of the personal data collector, unless restricted for security reasons.
• Identification of any entities to whom the personal data may be disclosed, including details on whether data will be transferred, disclosed, or processed outside the Kingdom.
• Explanation of the potential effects and risks associated with non-compliance with the personal data collection procedures.
• Assurance of privacy and protection of your data in accordance with legal standards.
• Inclusion of any other factors required by regulations based on the nature of the activities carried out by the entity.

When personal data is collected from non-users, the following conditions will be met:

1.    Obtaining the consent of the personal data owner in accordance with legal provisions.

2.    Ensuring that the personal data is publicly available or sourced from publicly accessible platforms.

3.    If applicable, confirming that the entity collecting the data is a public entity, and that the data is not being used for purposes other than those for which it was collected, security purposes, system implementation, or to meet judicial requirements per regulations.

4.    Assessing whether compliance with collection prohibitions could harm the data owner or jeopardize their vital interests, as per regulatory standards.

5.     Establishing that the collection or processing of data is necessary to protect health, public safety, or the life and health of specific individuals.

6.    Ensuring that the personal data is not recorded or stored in a format that allows for the identification, directly or indirectly, of its owner.

What Data Do We Collect?

The Platform retrieves your personal data from the Government Service Bus (GSB), a unified channel designed to facilitate the electronic exchange of government services among entities in a secure, accurate, and efficient manner through the Government Secure Network (GSN).

Access to several government services is available via the GSB, and the personal data collected may include, but is not limited to, information that can explicitly or implicitly identify an individual, such as name, personal identification number, addresses, contact numbers, license numbers, records and personal property, bank account numbers, credit card information, static or dynamic images of the individual and other personal data.

Personal data encompasses any process performed on this information through any means, whether manual or automated. This includes collection, recording, storing, indexing, formatting, modifying, updating, integrating, retrieving, using, disclosing, sending, publishing, sharing, interconnecting, blocking, scanning, and destruction of the data.

Automatic Collection of Information

When you visit the Platform, our servers automatically capture your Internet Protocol (IP) address. Your IP address serves as an identifier for your computer, allowing other devices on the internet to direct data to it. This process also collects certain information, such as the type of browser and search engine you use, without personally identifying you. The collection of your IP address assists in diagnosing server issues and conducting necessary statistics to measure platform usage, including visitor counts and language settings. Access to your IP address is restricted to our technical team only.

Cookies

The Platform may store cookies on your computer when you visit. Cookies are small data files that uniquely identify you as a user and help us enhance your understanding of the Platform, as well as better meet your needs while using government digital services. Most browsers are typically set to accept cookies by default, but you have the option to adjust your browser settings to reject all cookies or to receive alerts when cookies are being sent.

Geolocation

You may occasionally be prompted to consent to share your geolocation in order to access certain services offered by the Platform. By determining your geolocation, we can provide customized services that enhance your experience on the Platform.

Data Processing

Your personal data will only be processed after reasonable efforts are made to verify its accuracy, completeness, currency, and relevance to the purpose for which it was collected in accordance with the regulations. To safeguard your data and information, the Platform adheres to the highest security standards. Sensitive data, as well as any data that must remain confidential under legal requirements, is encrypted. Sensitive data includes information related to an individual's ethnic or tribal origin, religious, intellectual, or political beliefs, membership in civil associations or institutions, as well as criminal and security data, biometric data that identifies genetic information, insurance information, health data, location data, credit data, and information regarding an individual's parents, whether anonymous or identified.

Only our technical team is authorized to handle this information to provide services that meet your needs. We do not disclose your IP address to anyone outside of the Platform's technical team.

Disclosure of Information

Your data may be disclosed to government officials in exceptional circumstances, but it will never be made public without your consent. Personal data will only be disclosed under the following circumstances:

• If you have consented to its disclosure in accordance with legal provisions.
• If your personal data was obtained from a publicly available source.
• If the requesting party is a public body or requires the data for security purposes, legal compliance, or to fulfill judicial requirements as specified by regulations.
• If the disclosure is necessary to protect public interest, ensure public safety, or safeguard the life or interests of specific individuals.
• If the disclosure is limited to processing data in a way that does not identify the owner of the personal data or any other individual specifically. Your data will not be disseminated, exchanged, or sold to any third party without your consent.

Your personal information will not be disclosed unless one of the following conditions is met:

• It poses a threat to security, harms the Kingdom's reputation, or conflicts with the Kingdom's interests.
• It affects the Kingdom's relations with other countries.
• It prevents the disclosure of a crime, infringes on the accused's right to a fair trial, or impacts the integrity of ongoing criminal proceedings.
• It endangers the safety of individuals.
• It violates the privacy of another individual who is not the owner of the personal data, as specified in the regulations.
• It conflicts with incomplete or unreasonable interests.
• It breaches applicable professional obligations.
• It involves a violation of an obligation, procedure, or court ruling.
• It reveals a confidential source of information that should remain undisclosed in the public interest.

Right to Access or Modify

Any user who provides personal data to the Platform has the right to access or correct it. You can modify your personal data directly through the Platform or by requesting changes via email at (cc@spa.gov.sa).

Data Retention

Your personal data will be retained and used for the period necessary to comply with legal requirements. Once the purpose for which it was collected has concluded, your data will be securely destroyed and disposed of. However, if all identifying information has been eliminated in accordance with regulatory controls, the Platform may retain the data after the original purpose has been fulfilled.

The Platform may retain personal data beyond its original purpose only under the following circumstances:

• If there is a valid reason for its preservation for a specific period, it will be destroyed at the end of that period or when the original purpose has been fulfilled, whichever is longer.
• If the personal data is related to an ongoing case before a judicial authority and its retention is necessary for that purpose; in this case, it will be destroyed after the judicial proceedings are completed.

Data Analytics

The Platform may utilize third-party analytics tools that employ cookies or similar information collection technologies to gather standard internet activity and usage data. This information is used to generate statistical reports on user activity, including metrics such as the number of visits to the Platform, the services utilized, the pages visited, and the duration of time spent on each page.

The data collected from these analytics tools is also employed to monitor and enhance the performance of the Platform and its services. Notably, we do not use third-party analytics technologies to track or collect personally identifiable information about our users. Information gathered through these statistical reports is not associated with individual users.

Links to Other Sites

This Policy pertains solely to the Platform. The Platform may contain links to other resources that we do not own or control. If you navigate to another site through the Platform, we encourage you to review that site's Privacy Policy to understand its information security measures and privacy practices.

Protection of Personal Data

We are dedicated to safeguarding the privacy and confidentiality of personal data and will not access it without your consent, except in legal cases where disclosure is required by law. We secure the information you provide by storing it on computer servers in a secure, controlled environment that is protected from unauthorized access, use, modification, or disclosure.

We maintain sufficient administrative, technical, and physical safeguards to protect against unauthorized access of personal data under our control.

Changes to the Privacy Policy

The Platform reserves the right to update this Privacy Policy at any time. The updated version of the Policy will take effect immediately upon publishing, unless otherwise specified. Your continued use of the Platform and its services after the effective date of the updated Policy (or any other specified action) will indicate your acceptance of these changes.

To view the most recent updates, please check the update date at the bottom of this page. We may also notify you of the latest updates through other means at our discretion, including the contact information you have provided.

Privacy Policy Acceptance

By using the Platform, you acknowledge that you have read this Policy and agree to all its terms and conditions. Your continued use of the Platform constitutes acceptance of this Policy and the terms governing it. If you do not agree with this Policy, you must refrain from using any content or services provided through the Platform.

Contact Us

If you have any inquiries, concerns, or complaints regarding this Policy or your collected data, or if you wish to exercise your rights, please email us at cc@spa.gov.sa.