Privacy Policy
Effective Date : January 2025
Last Updated : January 2025
This Privacy Policy outlines how personal data is collected, used, and protected in compliance with the Saudi Personal Data Protection Law (PDPL). This policy applies to all personal data processed by or on behalf of Usability Lab.
About Us
Usability lab is responsible for processing your personal data under the PDPL. For inquiries, please contact us at:
Email : contact@usabilitylab.ai
Address : Madinah, Saudi Arabia
Definitions
- Personal Data : Any information that directly or indirectly identifies an individual, including but not limited to name, identification number, location data, online identifier, or factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that individual.
- Processing : Any operation performed on Personal Data, whether by automated means or not, such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, alignment, combination, restriction, erasure, or destruction.
- Data Subject : Data Subject: An individual whose Personal Data is being processed.
- Controller : Controller: The entity that determines the purposes and means of processing Personal Data.
- Processor : The entity that processes Personal Data on behalf of the Controller.
Personal Data We Collect
We may collect the following categories of personal data based on your interaction with us:
- Identity Data: Name, national ID, email address, or other identifiers.
- Contact Data: Email, phone number, and postal address.
- Observed Data: Usage patterns, IP address, and device information.
- Voluntary Data: Information you provide during correspondence or surveys.
Purpose of Data Collection
We use your data for:
- Providing requested services and responding to inquiries.
- Improving our platform and customizing user experiences.
- Complying with legal obligations under Saudi regulations.
- Sending marketing communications with explicit consent.
Legal Basis for Processing
Data processing is conducted with explicit consent or as required for:
- Performance of a contract.
- Compliance with Saudi legal obligations.
- Protection of vital interests.
Data Retention and Deletion
We retain personal data only as long as necessary for the stated purposes or as required by law. Data will be securely deleted upon expiration of the retention period.
Data Transfers
Data transfers outside Saudi Arabia are restricted. Transfers occur only with explicit consent or in compliance with SDAIA-approved mechanisms ensuring equivalent data protection standards.
Your Rights
Under PDPL, you have the following rights:
- Access: Request a copy of your data.
- Correction: Rectify incorrect or incomplete data.
- Deletion: Request the erasure of unnecessary data.
- Restriction: Restrict processing in specific scenarios.
- Objection: Object to processing of your data under specific conditions.
To exercise your rights, contact us at [privacy@yourcompany.com]. If unresolved, you may lodge a complaint with SDAIA.
Data Protection Officer
We have appointed a Data Protection Officer (DPO) to oversee compliance with PDPL requirements. For any inquiries or concerns regarding your Personal Data, you may contact our
DPO at:
Email: contact@usabilitylab.ai
Data Breach Notification
In the event of a Personal Data breach, we will promptly notify the Saudi Data and Artificial Intelligence Authority (SDAIA) and affected Data Subjects, as required by PDPL.
Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect or process Personal Data from children without verifiable parental consent. If we become aware that we have inadvertently collected Personal Data from a child without such consent, we will delete the information as soon as possible.
Security Measures
We implement robust measures in line with the Essential Cybersecurity Controls (ECC) to safeguard your data, including encryption, access controls, and regular security audits.
Cookies
Our platform uses cookies to enhance functionality and analyze usage. You may control cookies via browser settings. For more details, see our Cookie Policy at [Link].
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will notify you of any significant changes by posting the new Privacy Policy on our website and indicating the effective date. We encourage you to review this policy periodically for any updates
Third-Party Processors
We may engage third-party service providers to process Personal Data on our behalf. We ensure that such Processors provide sufficient guarantees to implement appropriate technical and organizational measures in compliance with PDPL requirements. All processing by third parties is governed by a data processing agreement to ensure the protection of your Personal Data.
Cross-Border Data Transfers
We will not transfer your Personal Data outside the Kingdom of Saudi Arabia unless it is necessary to fulfill our contractual obligations to you, and we have obtained your explicit consent, or the transfer is required by law. In such cases, we ensure that the transfer complies with PDPL requirements and that adequate safeguards are in place to protect your Personal Data.
Automated Processing
Some features within our services may automatically process your information to make recommendations, analyze behaviors, or personalize experiences. For example:
- Audio recordings may be transcribed for analysis.
- Behavioral data may identify patterns like excessive scrolling or clicks to improve user experience.
These features are designed to enhance our services and are conducted in compliance with PDPL standards.
Contact Us
For questions or concerns, please contact us:
Email: contact@usabilitylab.ai