Privacy Policy

1. Who We Are

NODJ is a secure data collaboration and governance platform operated by DataPlus Company, registered and headquartered in the Kingdom of Saudi Arabia.

If you have questions about this policy, please contact us at:

2. Information We Collect

We may collect and process the following types of personal data:

3. How We Use Your Data

We collect and use personal data to:

• • Provide access to and manage your use of the Service
• • Verify your identity and secure your account
• • Process transactions or support services
• • Respond to inquiries and communicate updates
• • Monitor system integrity and improve our platform
• • Comply with legal or regulatory obligations
• • Investigate and prevent misuse or fraud

We only process your data for specific, lawful purposes in accordance with PDPL Article 5.

4. Legal Basis for Processing

We rely on one or more of the following lawful bases to process your personal data under PDPL:

• • Your explicit consent
• • Performance of a contract
• • Legal or regulatory obligation
• • Legitimate interests (e.g., system security, service improvement)

5. Data Storage and Retention

We store your personal data only as long as necessary for the purposes outlined in this policy, or as required by applicable law.

Once data is no longer needed, we securely delete or anonymize it in accordance with PDPL Article 16 and relevant implementing regulations.

6. Sharing of Personal Data

We do not sell or rent your personal data. We may share it with:

• • Authorized employees and contractors under confidentiality agreements
• • Third-party service providers (e.g., hosting, analytics, payment processing)
• • Government or regulatory authorities, if required by law or national security reasons
• • Successor entities in the event of a merger or acquisition (with notice)

All third parties are subject to data protection obligations consistent with PDPL.

7. International Data Transfers

Where your data is processed outside the Kingdom of Saudi Arabia:

• • We ensure the receiving country offers adequate data protection standards; or
• • We implement safeguards such as data protection agreements or government approvals, in line with PDPL Article 29.

We do not transfer your data internationally unless strictly necessary and legally permitted.

8. Your Rights Under PDPL

Under the Saudi PDPL, you have the right to:

• • Access your personal data
• • Correct inaccurate or outdated data
• • Delete your data (subject to legal limitations)
• • Withdraw consent where applicable
• • Restrict or object to certain processing activities
• • File a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA)

To exercise your rights, please complete our Data Subject Rights Request Form or contact us at: support@nodj.sa

We will respond within the timeframe required by law (typically 30 days).

9. Cookie Policy

10. Data Security

We implement industry-standard security practices including:

• • Data encryption (in transit and at rest)
• • Access control and audit logging
• • Intrusion detection and malware protection
• • Secure infrastructure hosted in compliance with Saudi regulatory frameworks

We also train employees and conduct regular security assessments.

11. Children's Data

Our platform is not intended for individuals under 18. We do not knowingly collect data from children. If you believe a minor has submitted personal data to us, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy to reflect legal, technical, or operational changes. If updates are material, we will notify you by email or through the Service.

The "Last Updated" date at the top will always reflect the most recent version.

13. Contact Us

For questions about this Privacy Policy or to exercise your rights: