• Full name and identification details when required to provide a service.
• Contact information, including telephone number, email address, and address.
• Zakat, tax, accounting, and financial information required to provide our services.
• Documents relating to Zakat and tax assessments, returns, objections, and disputes.
• Information submitted through the Website’s forms or other communication channels.
• Any additional information voluntarily provided by the client in connection with a requested service.

We process personal data only to the extent necessary to provide our professional services and fulfil our contractual and regulatory obligations. Such purposes include:

• Providing specialized Zakat and tax advisory services.
• Preparing, reviewing, and submitting Zakat and tax assessments and returns.
• Managing objections, disputes, and related regulatory procedures.
• Representing clients before the Zakat, Tax and Customs Authority and other competent authorities.
• Communicating with clients, responding to enquiries, and following up on requested services.
• Fulfilling professional, contractual, legal, and regulatory obligations.
• Enhancing the quality, efficiency, and security of our services and protecting the Company’s legitimate interests.

Personal data is processed on one or more lawful bases established under the Saudi Personal Data Protection Law and its Implementing Regulations, depending on the nature of the service and the purpose of processing.

• The data subject’s consent, where consent constitutes the lawful basis for processing.
• The performance of a contract to which the data subject is a party or taking steps at their request before entering into a contract.
• Compliance with a legal or regulatory obligation applicable to the Company.
• The pursuit of a legitimate interest where permitted by applicable law, provided that such interest does not prejudice the rights or interests of the data subject.

The Company implements appropriate technical, organizational, and administrative measures designed to protect personal data against unauthorized access, disclosure, alteration, use, loss, or destruction.

• Storing data within secured systems and applying encryption and access controls where appropriate.
• Restricting access to authorized personnel whose professional responsibilities require access to such data.
• Maintaining professional confidentiality and periodically reviewing and updating information-security procedures.
• Taking appropriate action to address any suspected or confirmed personal-data security incident.

The Company does not sell clients’ personal data or disclose it to third parties except where disclosure is necessary, legally permitted, or authorized by the client.

• To comply with applicable legal or regulatory obligations.
• In response to an official request from the Zakat, Tax and Customs Authority, judicial bodies, or other competent authorities.
• To authorized service providers supporting our professional or technical operations, subject to appropriate confidentiality and data-protection obligations.
• Where necessary to establish, exercise, or defend the Company’s legal rights.
• With the client’s explicit consent or upon the client’s documented instructions.

Subject to the Saudi Personal Data Protection Law, its Implementing Regulations, and any applicable statutory limitations, data subjects may have the right to:

• Be informed of the lawful basis and purpose for collecting and processing their personal data.
• Request the correction, completion, or updating of inaccurate or incomplete personal data.
• Request access to their personal data and obtain a copy in a clear and readable format.
• Request the destruction of personal data once the purpose for which it was collected has ended, subject to applicable legal and regulatory retention obligations.
• Withdraw consent where consent constitutes the lawful basis for processing.
• Submit an enquiry or complaint regarding the processing of their personal data.

The Company retains personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected and to satisfy applicable contractual, professional, legal, regulatory, accounting, and reporting requirements.

Nama Almaal reserves the right to amend or update this Privacy Policy whenever necessary to reflect changes in applicable laws, regulatory requirements, business practices, or the services provided through the Website.