Privacy Policy Statement:

1. Who are we and what do we do?

The Saudi Red Crescent Authority is a national humanitarian authority responsible for providing emergency medical care and alleviating human suffering in the Kingdom, inspired by the principles of the International Red Cross and Red Crescent Movement. Our mission includes providing emergency ambulance services, disaster response, health and community education programs, and encouraging volunteer work.
The Saudi Red Crescent Authority is committed to protecting personal data in accordance with applicable data protection laws and regulations, ensuring compliance with the Personal Data Protection Law of the Kingdom of Saudi Arabia and its implementing regulations.

2. What categories of personal data do we process, for what purpose, on what legal basis, and for how long do we retain it?

We collect and process the following personal data:

Field	Purpose	Legal Basis	Retention Period
Name	Conducting a training course	Legitimate interest	Six years after the last interaction
National ID Number	Conducting a training course	Legitimate interest	Six years after the last interaction
Mobile Number	Conducting a training course	Legitimate interest	Six years after the last interaction
Email Address	Conducting a training course	Legitimate interest	Six years after the last interaction

3. How do we collect your personal data?

We collect your personal data through one of the following methods:

• Directly from you:Collected directly from the data subject.
• Indirectly: Collected through the "Nafath" platform.

4. Is your personal data disclosed or shared?

No

5. Do we transfer your data outside the Kingdom of Saudi Arabia?

No

6. How do we protect your personal data?

To ensure the security and confidentiality of your personal data, we implement all necessary technical and organizational measures in accordance with the requirements issued by the National Cybersecurity Authority.

7. What are your rights regarding the personal data we hold about you?

Under Saudi law, and depending on the jurisdiction you are subject to, you may have a number of rights regarding your personal data.

Right	Mechanism for Exercising the Right
Right to access	Privacy Notice
Right to access	Data subjects' access to their data through the user's profile on the e-learning platform
Right of data subjects to obtain their personal data held by the Authority in a clear and readable format	Through the user's profile on the e-learning platform
Right of data subjects to request correction, completion, or updating of their data held by the Authority	Logging into their profile and editing their data
Right of data subjects to request the destruction of their data held by the Authority once it is no longer needed	Calling the unified number 19971 and submitting an electronic support ticket

Further information and advice regarding your rights can be obtained by contacting us through this form.

8. How can you contact us?

If you have any inquiries regarding the protection and processing of personal data, or need to exercise any of the rights related to your personal data, please contact us:

9. Changes to this Privacy Notice

We may change/update this privacy notice at any time in the future, at our own discretion. Any changes take effect immediately upon publication of the amended notice. If the changes are material, we will provide you with additional notice, for example through a banner on our website or by sending an updated copy of this notice in writing, including electronically where applicable.