🔐 Privacy and Data Management Policy

LAHINT Business Services Company

Release Date: May 7, 2025
Last Modified: May 13, 2025


1. Definitions

The terms and definitions stated in Lahint’s Terms of Use apply to this policy, in addition to the following:

  • Personal Data: Any information that identifies an individual directly or indirectly.

  • Data Subject: The natural person to whom the data pertains.

  • Processing: Any operation performed on the data, such as collection, storage, transfer, or destruction.

  • Explicit Consent: A clear affirmative action by the data subject expressing approval of the processing.


2. Scope of Application

This policy applies to all data collected by Lahint through its website, application, or any other channel. It covers customers, users, partners, and beneficiaries of Lahint’s services within the Kingdom of Saudi Arabia.


3. Data Collected

Lahint collects various types of personal data, including:

  • Identity Data: Full name, national ID/residency number, date of birth

  • Contact Data: Mobile number, email address, geographic location

  • Business Data: Commercial registration details, identity of the owner or authorized representative

  • Financial Data: Billing and payment information

  • Technical Data: IP address, device type, usage patterns

  • Documents: Uploaded files or images during service use

  • Additional Data: Other data provided during request submission or service execution


4. Methods of Data Collection

  • User registration and account creation

  • Submitting transactions or service requests via the platform

  • Communication with support or through official channels

  • Automated collection through cookies

  • Verification from relevant government databases (e.g., Ministry of Commerce, National Address)


5. Legal Basis for Processing

Lahint processes personal data based on one or more of the following legal grounds:

  • Explicit consent from the data subject

  • Execution of a contract involving the data subject

  • Legal or judicial obligation

  • Legitimate interest that does not conflict with the rights of the data subject

  • Execution of a governmental or public service


6. Purposes of Processing

  • Identity verification and execution of the requested service

  • Communication with the user for service-related or regulatory purposes

  • Compliance with legal requirements (e.g., Know Your Customer - KYC)

  • Preparation and analysis of performance and usage reports

  • Enforcement of legal agreements

  • Financial account management and auditing

  • Compliance with competent government authorities


7. Data Retention and Deletion

  • Personal data is retained only for as long as necessary or as required by law.

  • Secure deletion is performed using approved digital methods or paper destruction.

  • The data subject may request deletion if no legal basis remains for retention.


8. Data Security

Lahint applies advanced security measures, including:

  • Data encryption during transfer and storage

  • Intrusion detection and activity monitoring systems

  • Access control and backup management

  • Ongoing employee training on security policies


9. Data Sharing

Personal data is only shared in the following cases:

  • Explicit consent from the data subject

  • Official request by a government authority

  • Execution of a service requiring data sharing with a third party under a Data Processing Agreement


10. Data Subject Rights

The data subject has the right to:

  • Access their personal data

  • Correct or update their data

  • Withdraw consent to data processing

  • Request data deletion

  • Object to data processing

  • File a complaint with Lahint or with the Saudi Data and AI Authority (SDAIA)

Requests are processed within a maximum of 15 business days and can be submitted via the "Exercise Your Rights" form or through the following contact methods:

📧 Email: info@lahint.sa
📞 Phone: 0133302007