Privacy Policy

The Saudi Organic Farming Association is committed to protecting the privacy of its website visitors and members, and to processing personal data in accordance with the Personal Data Protection Act of the Kingdom of Saudi Arabia and its implementing regulations. This policy explains what data we collect when you use the website, the member portal, and online forms; how we use and protect that data; and what your rights are regarding it.

By using the website or submitting any request through it, you acknowledge that you have read and understood this policy.

We collect data that you provide directly, depending on the service you use:

• Membership application and member account: Name of the entity or applicant, membership type, ID number or commercial registration number, contact information (cell phone, email, WhatsApp, and website), region, city, neighborhood, address, and location on the map; authorized representative information; photos and documents attached to the application; and password (stored encrypted and not accessible to anyone).
• Service Requests: The answers and attachments you enter in the service form.
• Communication and Support: Name, email address, cell phone number, message text, and any subsequent replies.
• Smart Assistant: The text of your question and the response to it, without us asking for your name or contact information.
• Page ratings: Your rating, comments, and any optional information you choose to provide.

We automatically log a limited amount of technical data, such as your IP address and browser type, when you submit a request, message, or rating, for security purposes and to prevent misuse. As for visitor statistics, we store aggregate numbers for each page that do not identify individual visitors.

• Reviewing and processing membership applications, managing member accounts, and renewing memberships.
• Processing service requests, following up on them, and keeping you informed of their status.
• Displaying member organization data in the Member Directory and on the interactive map to the extent described below.
• Responding to your messages and inquiries, and improving the AI assistant’s responses.
• Improving the website’s content and services and measuring user satisfaction.
• To protect the website and its users, and to comply with regulatory obligations.

We do not use your data for any purposes other than these, and we do not send you promotional messages without your consent, which you can opt out of at any time.

One of the association’s goals is to promote its accredited member organizations and make them more accessible. Therefore, the member directory, interactive map, and product pages may display information about the member organization, such as: the organization’s name, brief description, and logo; the region, city, address, and location on the map; branches; contact information; products; and the Organic Certificate.

Identification numbers, commercial registration numbers, attached documents, and passwords are not displayed. Members have the right to request that their organization’s information—or parts thereof—be hidden from public view by contacting us.

We do not sell or rent your personal data. We share it only in the following cases, and only to the extent necessary:

• With relevant government authorities when required by law or upon a lawful request.
• With technical service providers we use to operate the website and its features—such as hosting, email, the smart assistant, and CAPTCHA—in accordance with obligations that ensure data confidentiality and security.

Personal data is not transferred outside the Kingdom except in accordance with the controls specified by the Personal Data Protection Law and its regulations.

The website uses a limited number of cookies and other storage mechanisms in your browser to operate the site and make it easier to use, including:

• Recognizing that you are logged in to the members’ portal.
• Saving accessibility preferences, such as font size and contrast.
• Saving your conversation with the smart assistant during your visit and saving your membership application draft until you submit it.

We do not use advertising cookies. You can delete or block these cookies in your browser settings, though some features may not work properly as a result.

We take appropriate technical and organizational measures to protect your data from unauthorized access, loss, or alteration, including: encrypting communication with the website, encrypting passwords, restricting access to data to employees authorized based on their job duties, and logging data operations. In the event of an incident involving personal data, we will handle and report it in accordance with regulatory requirements.

We retain your data for the duration of your membership, for as long as necessary to fulfill the purpose for which it was collected, or for as long as required by law. After that period ends, the data is destroyed or processed in a manner that prevents identification of the data subject.

The Personal Data Protection System guarantees you the following rights:

• The right to know how your data is collected and processed, and the purpose of such processing.
• Access to your data and the right to obtain a copy of it.
• The right to request that your data be corrected, supplemented, or updated.
• To request the deletion of your data when it is no longer needed, unless the law requires its retention.
• To withdraw your consent to the processing at any time, unless there are legal grounds requiring otherwise.

Members can update much of their data directly through the member portal. To exercise your other rights, please contact us via the contact information below, and we will respond to your request within the legally prescribed timeframe. You have the right to file a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA).

We may update this policy from time to time to reflect changes in our services and applicable regulations, and we will post the updated version on this page. If the change is substantial, we will notify our members.

For any questions about this policy or your personal data:

• Email: info@sofa.org.sa
• Phone: +966506444055
• Address: Riyadh, Saudi Arabia