Introduction
The protection of your privacy is very important to us. Hereinafter, we set out the principles that we follow and the purpose for which we collect and process your data.
We collect and process your data carefully, only for the purposes described in this Privacy Policy and only to the extent necessary as defined herein and within the scope of the applicable legal regulations, including, but not limited to, the Personal Data Protection Law (PDPL). We only store your personal data to the extent and for as long as it is required for the performance of our services or as we are otherwise legally obligated to do.
Categories of personal data
The personal data that we collect, process, and enrich from and about you is limited to those categories and types of data that are necessary to enable us to provide the specific types of services that we are contracted to by our customers. Personal data in our platforms includes driver information, vehicle data, telematics data (including periodic location data, driving behavior modeling, and accident event data), insurance policy information, and links between these data types. Not all categories of data apply to all our services and solutions.
Storage of personal data
All data shall be stored or processed outside the jurisdiction of KSA, such data shall be subjected to encryption or anonymization prior to transfer, ensuring that it remains entirely unrelated to the identity of the data subject, as per the Personal Data Protection Law (PDPL) and the prescribed Data Privacy and Security Protocols.
Purpose and use of data collected The purpose of data collected, processed and enriched from you is for the objective of analyzing driving behavior to deduce a risk score associated with your motor insurance policy. Your data will be shared with individuals you have chosen to share it with in the application. This data may also be used in order to verify and validate claims brought forth by the policy holder.
Data security
We protect your personal data by means of appropriate technical and organizational security measures and store it solely on our secure servers. Your personal data is secured against loss, destruction, and manipulation and against access, modification, or distribution by unauthorized persons by means of industry-standard measures in accordance with the state of the art. Sensitive data is encrypted both during transmission over the Internet and at rest when it is stored in our system and databases.
Disclosure to third parties
In order to comply with the Privacy Policy, we may disclose personal data to other entities within our group of companies, as well as to subcontractors and service providers who assist us in connection with the ways we use personal information (for instance, providing support). We take great care and strive to only work with subcontractors and service providers whom we believe maintain an acceptable standard of data security compliance, which are in line with the data protection laws of the Kingdom of Saudi Arabia. We require all third parties to agree to process this information based on our instructions and requirements consistent with this Privacy Policy. We may also disclose personal data to regulators and government authorities in connection with our compliance procedures and
obligations or where we are otherwise authorized or required by law to do so. We do not sell, broker, or pass on any personal data for any purpose other than what has been set out in this Privacy Policy.
Data Transfer outside KSA
Before sharing Personal Data with entities located outside of the KSA, it is expressly confirmed that the legislations of the recipient country enable the lawful processing and receipt of such data and that the recipient entities are equipped with secure and confidential servers to handle such data.
Data retention
We will process personal data throughout the duration of any contract we have with a customer and, thereafter, will continue to store only the personal data needed to meet any legal obligations and for our legitimate business interests. The information we retain will be handled in accordance with this Privacy Policy and as soon as any personal data is no longer needed, it will be securely deleted.
Rights of data subjects
You have the right to information, correction, deletion, and transferability of your data. Furthermore, you have the right to restrict its processing. You have the right to object to the processing of your personal data, but please note that such an objection only has a future effect and does not affect previous processing.
For the assertion of these rights, you can contact us at the address given below. If you feel that we have not complied with applicable data protection law, you have the right to file a complaint directly with the competent regulatory authority.
Contact
Walaa Cooperative Insurance Al Khobar Al Janubiyan,
Al Khobar 34621, Kingdom of Saudi Arabia
www.walaa.com
Updates
We review our Privacy Policy regularly and update it as and when required in accordance with the prevailing laws. We will inform you of any important changes via our website and Walaa Drive smartphone application.
