Privacy Policy
This Privacy Policy ("Policy") governs the collection, use, disclosure, and protection of personal data when using the Onaizah Colleges website and the electronic services it provides. The purpose of this Policy is to explain how Onaizah Colleges processes personal data in a manner that promotes transparency and safeguards the privacy of its beneficiaries, in accordance with the applicable laws and regulations of the Kingdom of Saudi Arabia.
- The official website of Onaizah Colleges, available at: www.oc.edu.sa, hereinafter referred to in this Policy as the "Website" or the "Electronic Services," as applicable.
- Onaizah Colleges Company, hereinafter referred to in this Policy as "Onaizah Colleges," "we," "our," or "us."
- All visitors to the Website, students, faculty members, employees, applicants, alumni, and any individual using the Electronic Services, collectively referred to in this Policy as the "User," the "Beneficiary," or "you," as the context requires.
Onaizah Colleges is committed to protecting the privacy of beneficiaries' personal data and processes such data in accordance with the principles of lawfulness, transparency, and data minimization. Appropriate technical and organizational measures are implemented to safeguard personal data against unauthorized access, use, disclosure, alteration, or destruction, in compliance with the Personal Data Protection Law (PDPL) and other applicable laws and regulations in the Kingdom of Saudi Arabia.
By accessing or using the Website or any of the Electronic Services provided by Onaizah Colleges, you acknowledge that you have read and understood this Policy. Your continued use of the services following the publication of any updates to this Policy constitutes your acceptance of such updates, unless the applicable laws or regulations require your explicit consent in specific circumstances.
Collection of Personal Data
Onaizah Colleges collects personal data only to the extent necessary to provide its academic, administrative, and electronic services, enhance the quality of those services, and fulfill applicable legal and regulatory obligations. Personal data may be collected directly from users, automatically through the use of the Electronic Services, or from legally authorized entities when necessary, in accordance with applicable laws and regulations.
- Basic Information:Basic information includes data provided by the beneficiary when registering, applying for admission, or using the Electronic Services, such as name, national identification or residency number (where applicable), email address, mobile number, gender, nationality, university or employee identification number, and any other information required to provide academic and administrative services. This information is used to verify identity, manage user accounts, communicate with beneficiaries, and deliver the requested services.
- Academic Information:Onaizah Colleges may collect academic information related to the beneficiary, including academic program, college, department, courses, academic records, attendance, examinations, assessment results, training hours, and any other information necessary for delivering academic services and managing the educational process.
- Device Information:Onaizah Colleges may collect technical information about the device used to access the Electronic Services, including the device type, operating system, browser type, language settings, Internet Protocol (IP) address, and device identifiers. This information is collected for information security purposes, performance analysis, user experience enhancement, and technical troubleshooting.
- Usage Information:Onaizah Colleges collects information relating to the use of its Electronic Services, including the pages visited, duration of use, submitted requests, login activities, and interaction history with the Electronic Services. Such information is collected to improve service quality, enhance operational efficiency, and strengthen the security of electronic systems.
- Electronic Log Data:Onaizah Colleges maintains technical logs relating to the use of its Electronic Services. Such logs may include the date and time of access, Internet Protocol (IP) address, browser type, operating system, pages visited, links accessed, and other technical information required for monitoring system performance, analyzing technical issues, and maintaining information security.
Cookies
Onaizah Colleges uses cookies and similar technologies to enhance the user experience, improve the performance of the Website, analyze usage patterns, and support the security of its Electronic Services. Cookies are small text files stored on a user's device when visiting the Website and are not used to collect personal data without a lawful basis.
- Essential Cookies:These cookies are required to enable the core functionality of the Website, including user authentication, session management, and the secure operation of the Electronic Services. Disabling these cookies may affect the availability or functionality of essential services.
- Analytical Cookies:These cookies help Onaizah Colleges understand how visitors interact with the Website by collecting aggregated and non-identifiable statistical information. Such information is used to improve Website performance, develop content, and enhance the quality of Electronic Services.
- Managing Cookies:Users may manage, disable, or delete cookies through their web browser settings. Please note that disabling certain cookies may affect the functionality or performance of some Electronic Services.
Use of Personal Data
Onaizah Colleges processes personal data solely for the purposes for which it was collected and in accordance with the applicable laws and regulations. Such purposes include, but are not limited to, the following:
- Providing academic, administrative, and Electronic Services.
- Managing admission, registration, and academic affairs.
- Verifying users' identities and protecting their accounts.
- Communicating with students, faculty members, employees, alumni, applicants, and other beneficiaries regarding official services and notifications.
- Enhancing the performance of the Website and improving Electronic Services.
- Conducting statistical analysis using aggregated or anonymized data that does not identify individuals.
- Complying with applicable legal, regulatory, and judicial requirements.
- Protecting information security and detecting unauthorized access or misuse of the Electronic Services.
Onaizah Colleges will not process personal data for purposes incompatible with those for which it was originally collected unless such processing is permitted by applicable law or the explicit consent of the data subject has been obtained where required.
Third Parties
Onaizah Colleges does not sell, rent, or disclose personal data to third parties except where permitted by law or where necessary for the provision of Electronic Services. Personal data may be shared, only to the extent necessary, with service providers responsible for hosting systems, operating Electronic Services, or providing technical support, under contractual arrangements that ensure confidentiality and compliance with applicable data protection requirements.
Electronic Payments
Where Electronic Payment Services are available through the Website, payment information is processed by authorized payment service providers. Onaizah Colleges does not retain payment card information or other sensitive financial data except to the extent required by applicable laws or for processing financial transactions. Payment processing is subject to the privacy policies and security standards of the respective payment service providers.
Legal Basis for Processing
Onaizah Colleges processes personal data based on the lawful grounds established under applicable laws and regulations. These may include the data subject's consent where required, the performance of contractual obligations, compliance with legal obligations, or the pursuit of legitimate interests that do not override the rights of the data subject.
Retention of Personal Data
Onaizah Colleges retains personal data only for the period necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, or protect the legitimate rights and interests of the Colleges and the data subjects. Upon the expiration of the applicable retention period, personal data will be securely destroyed or anonymized unless continued retention is required by applicable law. Beneficiaries may request the correction or updating of their personal data and may exercise their statutory rights in accordance with the procedures adopted by Onaizah Colleges, subject to the applicable laws governing the retention of official records and documents.
Mandatory Disclosure
Onaizah Colleges may disclose or otherwise process personal data where required to comply with applicable laws, regulations, judicial orders, or requests from competent authorities, or where necessary to protect information security, prevent fraud or misuse of the Electronic Services, or safeguard the legitimate rights of Onaizah Colleges, its beneficiaries, or third parties, to the extent permitted by law.
Service Providers
Onaizah Colleges may engage specialized service providers to host systems, operate Electronic Services, provide technical support, or deliver other technology-related services. Such providers are authorized to process personal data solely for the purpose of providing the contracted services and are contractually obligated to maintain confidentiality and comply with applicable data protection laws and regulations.
Information Security
Onaizah Colleges implements appropriate technical, administrative, and organizational measures to protect personal data against unauthorized access, disclosure, alteration, loss, destruction, or misuse, taking into account the nature of the data and the potential risks associated with its processing. While Onaizah Colleges is committed to applying industry-recognized information security practices, no method of transmission over the Internet or electronic storage can be guaranteed to be completely secure. Users are therefore responsible for maintaining the confidentiality of their account credentials and must promptly notify Onaizah Colleges of any suspected unauthorized use of their accounts.
Rights of Data Subjects
Onaizah Colleges is committed to enabling data subjects to exercise their rights in accordance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia and its Implementing Regulations. Subject to applicable legal requirements, data subjects are entitled to the following rights:
- The right to be informed of the legal basis for collecting personal data, the purpose of its collection, the methods of its processing, and the entities with which it may be shared where permitted or required by law.
- The right to access personal data held by Onaizah Colleges and to obtain a copy thereof in accordance with the applicable procedures.
- The right to request the correction, updating, or completion of personal data that is inaccurate, incomplete, or outdated.
- The right to request the destruction of personal data where the purpose for its collection has ceased to exist, without prejudice to any legal or regulatory obligations requiring its retention.
- The right to withdraw consent where the processing of personal data is based on consent, provided that such withdrawal does not affect any processing carried out on another lawful basis or any legal or contractual obligations.
All requests relating to personal data are reviewed and processed in accordance with the approved procedures of Onaizah Colleges and the applicable laws and regulations of the Kingdom of Saudi Arabia.
Privacy of Minors
Onaizah Colleges is committed to protecting the privacy of all beneficiaries, including applicants and students who are below the legal age where applicable. Personal data relating to minors is processed in accordance with the applicable laws and regulations, and any required legal consent will be obtained whenever necessary.
Policy Updates
Onaizah Colleges reserves the right to amend or update this Privacy Policy from time to time in response to legal, regulatory, or operational developments. The most recent version of the Policy will be published on the Website and shall become effective as of the date of publication unless otherwise stated. Continued use of the Website or the Electronic Services following the effective date of any amendments constitutes acceptance of the updated Privacy Policy, to the extent permitted by applicable law.
Contact
Email: |