Data Protection Policy

For the purposes of this policy, “Sikka Software” refers to “Sikkat Al-Afkar Est.”, the registered legal entity.

At Sikka Software, safeguarding the data of our clients, employees, and users is a top priority. This Data Protection Policy outlines the measures we take to ensure the confidentiality, integrity, and security of personal information.

Scope

This policy applies to all employees, contractors, and partners of Sikka Software who have access to or handle personal data. It covers all personal data processed, regardless of the format or medium in which it is stored.

Data Collection and Use

1. Types of Data Collected

   • Personal Identification Information: Name, email address, phone number, and any other contact details.
   • Technical Data: IP addresses, browser type and version, time zone settings, and location data.
   • Usage Data: Information about how users interact with our website and services.

2. Purpose of Data Collection

   • To provide and improve our services.
   • To communicate with clients and users.
   • To fulfill legal and contractual obligations.
   • To personalize user experience and enhance service offerings.

Data Storage and Security

1. Storage Methods

   • Data is stored securely on encrypted servers.
   • Regular backups are conducted to prevent data loss.

2. Security Measures

   • Access to personal data is restricted to authorized personnel only.
   • Multi-factor authentication is implemented for accessing sensitive data.
   • Regular security audits and vulnerability assessments are conducted.

Data Sharing and Disclosure

1. Internal Sharing

   • Personal data is shared internally only on a need-to-know basis.

2. External Sharing

   • Personal data may be shared with third-party service providers who assist in our operations, provided they comply with data protection standards.
   • Data will not be sold or rented to third parties.

Data Retention

• Personal data will be retained only as long as necessary to fulfill the purposes for which it was collected, or as required by law.
• Upon the end of the retention period, personal data will be securely deleted or anonymized.

Rights of Data Subjects

• Individuals have the right to access their personal data, request corrections, and request deletion.
• Requests can be submitted to our Data Protection Officer (DPO).

Data Breach Response

• In the event of a data breach, immediate steps will be taken to mitigate the impact.
• Affected individuals and relevant authorities will be notified as required by law.

Training and Awareness

• All employees and contractors will receive regular training on data protection principles and practices.
• Awareness programs will be conducted to ensure compliance with this policy.

Policy Review

• This policy will be reviewed annually and updated as necessary to reflect changes in laws, regulations, or business practices.

Sikkat Al-Afkar Est.

Commercial Record: 2050141166

Mobile Number: +966531045453

Qais Bin Bahar St., Ash Shati Ash Sharqi, Dammam, Saudi Arabia