Zati Data Protection Policy | Abaq Al-Hayat

Personal Data Protection Policy

Abaq Al-Hayat — Aakhri update: 24 July 2026 — Publication ki tareekh se nafiz

Is page aur "Privacy Policy" mein kya farq hai? Privacy Policy (jo pehle publish ki gayi thi) aap ko customer ke taur par mukhatib karti hai: hum aap ke bare mein kya data collect karte hain, kyun collect karte hain, aur aap ke kya huqooq hain. Yeh page ek mukhtalif maqsad rakhta hai — yeh hamare andarooni data protection governance framework ko wazeh karta hai: ek idare ke taur par hum data protection ko apne andarooni kaam ke nizam ke taur par kis tarah manage karte hain, Saudi Personal Data Protection Law ke framework ke mutabiq, jo customer ko sirf maloomat dene se aage barh kar multiple governance policies ka taqaza karta hai.

1. Muqaddama

Yeh policy woh andarooni framework qaim karti hai jiske zariye Abaq Al-Hayat apni tamam activities aur affiliated brands mein personal data protection ko manage karta hai, Saudi Personal Data Protection Law aur us ke implementing regulations ke mutabiq.

2. Data Protection ke Bunyadi Usool

Qanooni JaiziyatHar processing activity ke liye qanooni bunyad aur wazeh consent
Maqsad ki HudoodAise maqsad ke liye processing nahi ki jati jo customer ko bataya na gaya ho
Data mein KamiHum zaroorat se zyada data collect nahi karte
DurustgiZaroorat ke mutabiq data ko update aur correct kiya jata hai
Hifz ki MuddatData ko maqsad ya qanoon ki zaroorat se zyada muddat tak nahi rakha jata
Hifazat aur RaazdariMunasib technical aur organizational safeguards

3. Governance aur Zimmedariyan

Data protection policies senior management ki manzoori se nafiz hoti hain, aur ek andarooni fard ya function ko muqarrar kiya jata hai jo tamam departments aur affiliated brands mein is policy ki pabandi ki nigrani karta hai. Data protection se mutalliq rabtay ki tafseel: info@abqalhayat.com.

4. Privacy by Design aur Default Privacy

Jab bhi koi nayi service, product, ya web page develop kiya jata hai (misal ke taur par hamare kisi brand ke liye naya online store launch karna), hum data protection ko shuru se design ka bunyadi hissa samajhte hain, na ke baad mein shamil ki jane wali cheez — is mein default setting ke taur par data collection ki sab se kam satah ko enable karna bhi shamil hai.

5. Data Classification aur Security Controls

Hum process kiye jane wale data ko us ki sensitivity ke darjay ke mutabiq classify karte hain (aam identification data, financial data, aur sensitive data jaise identity documents), aur har classification ke liye munasib security controls lagu karte hain, jin mein access controls aur jahan mumkin ho encryption bhi shamil hai.

6. Data Protection Impact Assessment (DPIA)

Kisi bhi high-risk data processing activity ko launch karne se pehle (jaise customer behavior track karne ke liye naya system ya sensitive data collect karne wala platform), hum Data Protection Impact Assessment karte hain taa-ke implementation se pehle mumkinah risks aur unhein kam karne ke tareeqon ki pehchan ki ja sake.

7. Third-Party aur Service Provider Management

Hum har external service provider ke data protection practices ka jaiza lete hain jiske saath hum kaam karte hain (jaise hosting providers, payment gateways aur analytics tools), aur contract ke zariye un par aise data protection standards ki pabandi lazim karte hain jo un standards se kam na hon jin ki hum khud pabandi karte hain.

8. Data Breach Incidents ka Response

Daryaft aur Roktham

Incident ka pata chalte hi us ka daira tay karna aur foran aise iqdamat karna jo us ke mazeed phailao ko rokein.

Jaiza

Mutasir data, mutalliq afrad, aur risk ki satah ka taayun karna.

Ittila

Saudi Data and Artificial Intelligence Authority aur mutasir afrad ko qanooni muddat ke andar muttala karna.

Review

Incident ke asbaab ka tajziya karna aur us ke dobara hone se bachne ke liye controls ko update karna.

9. Employees ki Training

Personal data handle karne wale tamam employees ko is policy ke اصول aur customer data ke hawale se un ki qanooni zimmedariyon par baqaidgi se training di jati hai.

10. Consent aur Data Subjects ke Huqooq ka Intizam

Hum consent record karne aur us ki withdrawal ko track karne ke liye ek standard andarooni procedure lagu karte hain, aur data subjects ki requests (maloomat, access, correction aur destruction) ka muqarrar muddat ke andar jawab dete hain. Customer ke taur par aap ke tamam huqooq ki tafseel ke liye hamari Privacy Policy dekhein.

11. Is Policy mein Tabdeeliyan

Hum apni andarooni practices ya qanoon aur us ke regulations mein kisi bhi tabdeeli ke mutabiq is policy ko update kar sakte hain. Har update is page par aakhri update ki tareekh ke saath publish kiya jayega.

12. Hum se Rabta Karein

Is policy ke hawale se kisi bhi sawal ke liye hum se in zarae ke zariye rabta karein:

  • Email: info@abqalhayat.com
  • Address: Riyadh - King Fahd Road South - Al Jafal Commercial Center - Third Floor - Office 21