This Privacy Notice describes how we collect and use information about you when you use our website (https://www.genalive.com/) (our “Website”), applications, services, tools and features, or otherwise interact with us (collectively, the “Services”).

We are a Limited Liability Company established in the Kingdom of Saudi Arabia with our full name Genalive Medical Company a registered office at Riyadh and registered company number 1010849621, and we are the data controller for the processing of your information.

Please read this Privacy Notice carefully. By using any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Notice. If you do not agree to this Privacy Notice, please do not use or access the Services.

Our Website and Services are not intended for children, and we do not knowingly collect data relating to children. Children must not use the Services, except where their parent or guardian has provided consent.

1. CHANGES TO THIS PRIVACY NOTICE

We may modify this Privacy Notice from time to time, in which case we will update the “Last Updated” date at the top of this Privacy Notice. If we make material changes to the way in which we use information we collect, we will use reasonable efforts to notify you (such as by emailing you at the last email address you provided us, by posting notice of such changes on the Services, or by other means consistent with applicable law) and will take additional steps as required by applicable law. If you do not agree to any updates to this Privacy Notice, please do not access or continue to use the Services.

2. COLLECTION OF YOUR INFORMATION

When you use or access the Services, we collect certain categories of information about you from a variety of sources.

Information You Provide to Us

Some features of the Services may require you to directly provide us with certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features. You may provide some or all of the following information to us when you [apply or subscribe to and use our Website and Services, create an account with us, set up a profile on our Services, sign up for our newsletters or alerts, or contact us via our Website, our Services, or by telephone, text/SMS, email, social media, instant chat, our “contact us” page, or otherwise]:

• Basic contact details, such as name, address, phone number, and email.
• Account information, such as username, password, and security questions that you select and the answers you provide. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We recommend you do not share your access details with anyone else. If you believe your account has been compromised, please contact us immediately.
• Payment information, such as bank account, credit or debit card information, and billing address.
• Applicant details, such as information included in your resume or CV, references, and job history.
• User-generated content, such as messages, photos, and recordings, submitted by you through our website (“UGC”). We or others may store, display, reproduce, publish, or otherwise use UGC, and may or may not attribute it to you. Others may also have access to UGC and may have the ability to share it with third parties. If you choose to submit UGC to any public area of the Services, your UGC will be considered “public” and will be accessible by anyone, including us.
• Any other information you choose to include in communications with us, for example, when sending a message through the Services.

Information We Collect Automatically

When you visit our Website and use our Services we automatically collect the information sent to us by your computer, mobile phone or other device. This information includes: (i) your IP address; (ii) device information including, but not limited to, name and type of operating system; (iii) mobile network information; (iv) standard web information such as your browser type and the pages you access on our Website; (v) transaction information (but not payment card or account details), including device information, transaction details, and IP address; (vi) security information including a list of certain installed software, device and internet connection information, and available space on the device.

3. USE OF YOUR INFORMATION

We process your information in order to perform our contract with you, such as:

• Provide you with our Services, other content and Website functionality.
• Register and maintain your account with us.

We obtain your consent to process your information for the following reasons:

• Sign you up for our newsletters or alerts.
• Personalise our Services for you.
• If you opt-in to marketing, to communicate with you about products, services, marketing, promotions, events and other news and information we think will be of interest to you.

In order to be responsive to you, to provide effective services to you, and to maintain our business relationship, as a matter of our legitimate interests, we will use your information to:

• Administer the Website and Services, and for internal operations, in order to conduct troubleshooting, data analysis, testing, research, statistical and survey analysis
• Maintain the safety and security of our users, the Website, our Services, and business.
• Send you announcements in relation to security, privacy or administrative related communications (these communications are not marketing orientated, and we do not rely on consent, so you may not opt-out).
• Personalize our Website and our Services to ensure content is presented in the most effective manner for you and your device.
• Improve and develop our products.

In addition, we will use some or all of the above information to comply with applicable legal obligations, to enforce our contractual arrangements and our policies, and to protect or defend the Services, our rights, the rights of our users, or others.

4. COOKIES AND OTHER TRACKING TECHNOLOGIES

We use cookies and similar technologies (“Tracking Technologies”) to collect information about your browsing activities over time and across different websites following your use of our Services. These Tracking Technologies allow us to [recognize and count the number of users and to see how users move around our Website when they are using it]. This helps us to improve our Services and the way our Website works. You can find more information about cookies and how to manage them here.

Most browsers accept cookies automatically, but you may be able to control the way in which your devices permit the use of Tracking Technologies. If you so choose, you may block or delete our cookies from your browser; however, blocking or deleting cookies may cause some of the Services, including certain features and general functionality, to work incorrectly. If you have questions regarding the specific information about you that we process or retain, as well as your choices regarding our collection and use practices, please contact us using the information listed below.

5. DISCLOSURE OF YOUR INFORMATION

• With service providers and vendors (including data analytics vendors, payment processors, security vendors, and website hosting vendors) that assist us to provide our Website and Services to you.
• When you request us to share certain information with third parties (including through your use of social media widgets or login integrations) with your consent or to perform a contract with you.
• With professional advisors (including auditors, law firms, or accounting firms) in our legitimate interests or as required by law.
• For legal and security reasons and to protect our services and business, in our legitimate interests or as required by law. We will share your information with regulators, law enforcement agencies, public authorities, or any other relevant organisations: to comply with applicable law or obligations thereunder, including cooperation with law enforcement, judicial orders, and regulatory inquiries; to protect the interests of, and ensure the safety and security, of us, our users, a third party or the public; to exercise or defend legal claims; and to enforce our terms and conditions or other agreements.
• With our affiliates or otherwise within our corporate group, in our legitimate interests.
• With a prospective buyer, seller, new owner, or other relevant third party in connection with or anticipation of an asset sale or purchase, a share sale, purchase or merger, bankruptcy, or other business transaction or re-organization (including while negotiating or in relation to a change of corporate control), in our legitimate interests.

6. WHERE WE STORE YOUR INFORMATION

The information that we collect from you will be accessed from, transferred to, and stored and used in countries outside the country in which you are located or the Kingdom of Saudi Arabia (if different), by us and by our third-party service providers or partners. We will take all steps reasonably necessary to ensure that your information is treated securely and in accordance with this Privacy Notice.

Where legally required, transfers of personal data outside the Kingdom of Saudi Arabia will take place to jurisdictions deemed to provide an adequate level of protection for personal data by the relevant competent authority in the Kingdom or alternatively will take place on the basis of an appropriate safeguard or exception.

7. SOCIAL FEATURES

Certain features of the Services allow you to initiate interactions between the Services and third-party services or platforms, such as social networks (“Social Features”). Social Features include features that allow you to access our pages on third-party platforms, and from there “like” or “share” our content. Use of Social Features may allow a third party to collect and/or use your information. If you use Social Features, information you post or make accessible may be publicly displayed by the third-party service. Both we and the third party may have access to information about you and your use of both the Services and the third-party service. For more information, see the section below, Third Party Websites and Links.

8. THIRD PARTY WEBSITES AND LINKS

We may provide links to third-party websites or platforms. If you follow links to sites or platforms that we do not control and are not affiliated with us, you should review the applicable privacy notice, policies and other terms. We are not responsible for the privacy or security of, or information found on, these sites or platforms. Information you provide on public or semi-public venues, such as third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators.

9. DATA SECURITY

Despite our reasonable efforts to protect your information, no security measures are impenetrable, and we cannot guarantee “perfect security.” Any information you send to us electronically, while using the Services or otherwise interacting with us, may not be secure while in transit. We recommend that you do not use unsecure channels to send us sensitive or confidential information.

10. RETENTION OF YOUR INFORMATION

We retain your information as follows:

• your account data for as long as you keep your account open or as needed to provide you with our Services;
• if you contact us, we will keep your data for 3 years after you contact us;
• your technical usage information for 3 years; and
• data on your use of our Website and our Services is retained for 3 years.

We will also retain and use your information for longer periods of time to the extent necessary based on our consideration of various criteria, including whether we need the information to continue providing you the Services, comply with our legal obligations, resolve disputes, enforce our contractual agreements and our policies, prevent harm, promote safety, security and integrity, and to protect or defend the Services, our rights, the rights of our users, or others. We may also store your information in an aggregated and anonymized format; we may use this information indefinitely without further notice to you.

11. YOUR RIGHTS

• Right to Be Informed: You have the right to be informed about how we collect, process, store, and destroy your personal data, as well as the legal basis for these activities and to whom your data may be disclosed. This information is available in this Privacy Notice. Note that there may be certain restrictions to this right, such as when disclosure would compromise the privacy of others or when legal obligations prevent full disclosure.

• Right of Access to Your Personal Data: You are entitled to request access to your personal data in a clear and readable format. Please be aware that there may be restrictions to this right, such as when access would reveal personal data about another individual or when access is restricted by law.

• Right to Request Correction of Your Personal Data: If you believe that any personal data we hold about you is inaccurate, incorrect, or incomplete, you have the right to request its correction.
• Right to Request Destruction of Your Personal Data: In certain circumstances, you have the right to request the destruction of your personal data. This right is subject to legal bases and obligations that may require us to retain certain data.

• Objection to Marketing: You can object to marketing at any time by opting-out using the unsubscribe/opt-out function displayed in our communications to you.

• Right to Withdraw Your Consent for Processing Your Personal Data: Where you have provided your consent for processing, you may withdraw your consent for the processing of your personal data at any time.

To exercise any of these rights, please contact [email protected]. We will respond to requests to exercise these rights in accordance with the timelines set out in the applicable laws.

In addition, you may make a complaint to us (using the contact details above) if you have concerns regarding how we process your personal data. You may also make a complaint to the Competent Authority, which for the Kingdom of Saudi Arabia is the Saudi Data and AI Authority (contactable via sdaia.gov.sa).

Please note that a number of these rights only apply in certain circumstances, and all of these rights may be limited by law. For example, if fulfilling your request would adversely affect other individuals or if we are required by law to retain your information.

12. HOW TO CONTACT US

We welcome your questions and feedback about our privacy practices and this Privacy Notice. You can contact us at [email protected].

13. LANGUAGE

Except as otherwise prescribed by applicable law, in the event of any inconsistency between the English language version and local language version of this Privacy Notice, the English language version will prevail.