Privacy Policy

1Introduction

Wojod respects your privacy, and our goal is to provide an excellent service to all our customers. This privacy notice has been written in line with the Personal Data Protection Law and its regulations in the Kingdom of Saudi Arabia, to help you understand what data we collect from you and how Wojod handles it.

Because Wojod cares about its users’ data and information, we are committed to keeping that data confidential and private, and to using it to deliver the level of service users expect, in line with the laws, terms and conditions in force in the Kingdom of Saudi Arabia.

Using the Wojod website means the user agrees to this privacy policy.

2The data we collect

• Data required when you sign up for our services (such as name, email address, address, phone number and date of birth).
• Data required to use our services, website or apps (such as cookies and usage data).
• Data exchanged when we communicate with you (such as customer support requests and your feedback).

3Why we collect personal data

To provide the highest level of services and products, we collect and use your personal data for the following reasons:

• To develop, improve and/or market our products and services.
• To enable and support our operations and systems, so our services stay available and reliable.
• To understand customers’ needs and eligibility for products and services, and to recommend products and services that may be relevant to them.
• To tell you about new products and services.
• To respond to, and follow up on, any inquiries, suggestions or complaints a user submits.

4How we collect data

• Through the data the data subject provides to the website when signing up.
• Through cookies collected when the website is visited.
• Through analytics tools, including session recordings, that show how our website and apps are used so we can improve them. Sensitive information you enter is hidden before it is recorded.

5Storing and destroying personal data

Personal data is stored on servers protected with the best technologies in line with the policies and controls of the National Cybersecurity Authority and international standards, to prevent unauthorized access and reduce cyber risks.

Once the data is no longer needed, and in line with the laws and regulations, it will be destroyed securely so that it cannot be viewed or recovered again, in accordance with Wojod’s policies.

6The legal basis for collecting and processing personal data

Personal data is collected and processed based on the data subject’s consent. The data subject may withdraw their consent to the collection and processing of their personal data at any time, unless another legal basis applies. To do so, contact the Wojod team through:

7Rights of the data subject

The right to be informed

The data subject has the right to know how we collect their data, the legal basis for collecting and processing it, how it is processed, stored and destroyed, and who it will be shared with. You can find all the details in this policy, or contact us through the details in section 9.

The right to access personal data

The data subject may request a copy of their personal data through the email address in section 9. It will be sent to them by email, free of charge, within 30 business days.

The right to correct personal data

The data subject may request the correction of personal data they believe is inaccurate, incorrect or incomplete, through the email address in section 9. The request will be reviewed and a decision made within 30 business days, and they will be notified by email.

The right to have personal data destroyed

The data subject may request that their data be destroyed, unless there are legal requirements, statutory provisions or contractual obligations that require it to be kept.

The right to withdraw consent to processing

The data subject may withdraw their consent to the processing of their personal data at any time, unless there are legitimate purposes that require otherwise. Some destruction or withdrawal requests may be limited where legal or regulatory obligations require the data to be kept.

8Sharing personal data

Your personal data is not disclosed to any other party without your consent, unless there is a legal justification in the cases set out by law.

We may use trusted service providers, such as analytics providers, that process data on our behalf. Some of them may process it outside the Kingdom under appropriate safeguards.

9Exercising the rights of the data subject

The data subject may request access to, correction of, or destruction of their data by contacting us through:

10Complaints and inquiries

If you have any complaints or inquiries about the privacy policy or how personal data is handled, contact Wojod’s management through:

11Updates to the privacy policy

This privacy policy was last updated on 15 October 2026.

Wojod’s management reserves the right to add to or change any part of this privacy policy and will notify the data subject. Wojod’s management may close the data subject’s account if they do not accept a change to the privacy policy after being notified of it.