Privacy Policy
We explain to you how your data is collected, used, and protected within the Naqal platform.
Privacy Policy
Platform Host: Munira Musa Ibrahim Al-Hadri Commercial Establishment, Commercial Name: Naqal, Commercial Register: 7048926815, Tax Number: 310873037700003. National Address: Kingdom of Saudi Arabia, Riyadh, Al-Awali District, Qais bin Muhsin. Contact: info@naqqal.net – +966561383950.
1. Data Controller
Munira Moussa Ibrahim Al-Hadri Trading Est. is the personal data controller via the Naqal website and application. For privacy requests: support@naqqal.net Or Data Rights Form.
2. Data We Collect
Account and contact data, order and service data, pickup and delivery locations, payment reference data without retaining full card data, vehicle and license data for drivers, geolocation during order fulfillment, network address, device data and security logs, and correspondence and complaints.
3. Purpose and Legal Basis
Contract and order execution, account management, payment and support, safety and fraud prevention, regulatory compliance, and service improvement. Marketing is based on independent, withdrawable consent and is not a condition for providing the service.
4. Obligation and Choice
The data marked as required is necessary to create the account or fulfill the request. Failure to provide it may prevent the completion of the service. Marketing data and additional notes are optional.
5. Sharing and Processing
Data is shared to the necessary extent with the selected driver or service provider, payment, map, hosting, notification, login, and support providers, and competent authorities when there is a legal justification. The processing entities are bound by protection and confidentiality instructions.
6. Transportation outside the Kingdom
Some technical infrastructure services may process data outside the Kingdom in accordance with the requirements of the Personal Data Protection Law and transfer controls, and after assessing protection, necessity, and appropriate contracting. Information regarding categories and countries can be requested via the privacy email.
7. Retention
Accounts: For the duration of the account and for 5 years after its closure unless regulations require a longer period. Requests and transactions: 7 years for evidentiary, billing, and regulatory compliance purposes. Data shall be deleted or anonymized when the purpose is fulfilled unless retention is legally required or necessary to protect an existing claim.
8. Data Subject Rights
You have the right to be informed, to access, to obtain a copy, to correct, to destroy, and to withdraw your consent whenever it is the legal basis, subject to regulatory exceptions. We verify identity and typically respond within 30 days, and the period may be extended in permitted cases with notification to you.
9. Protection and Incidents
We use appropriate access controls, encryption, logs, and security reviews. When a data breach occurs, we take containment and reporting measures to the competent authority and affected individuals when legally required.
10. Cookies and Notifications
Necessary files are used to run the account, orders, and security. Unnecessary marketing files or messages are not activated except with a clear choice, and opting out is easy.
11. Children and Updates
The service is intended for those who are 18 years of age or older. We publish any material modification with a new version number and effective date, and we require new consent when the change so requires.