Personal Data Collection and Processing Notice

By accessing or using the HUMAIN Marketplace (“Marketplace”), you acknowledge and consent to the collection, processing, storage, and use of your personal data by Al-Mustaqbal Lil-Thaka Al-Istinai Company (CR No. 1009089438) (“HUMAIN”) in accordance with this Notice and the Personal Data Protection Law of the Kingdom of Saudi Arabia (“PDPL”) and its Implementing Regulations.

What data we collect

HUMAIN collects the following categories of personal data in connection with your use of the Marketplace:

• Identity and registration data (name, commercial registration details, national ID or Iqama, contact information);
• Account and transaction data (login credentials, Order history, payment and settlement records);
• Verification and compliance data (KYC documentation, screening results, beneficial ownership information); and
• Usage and technical data (access logs, IP addresses, device information, interaction data).

Why we collect and use it

Your personal data is collected and processed for the following purposes:

• Verification: to verify your identity, eligibility, and compliance with HUMAIN’s onboarding requirements and applicable law;
• Audit and regulatory compliance: to maintain records required for regulatory, financial, and legal audit purposes, including anti-money laundering and sanctions screening obligations;
• Marketplace operations: to manage your account, process Orders, facilitate payments, and provide customer support;
• Security: to protect the Marketplace against fraud, unauthorised access, and cyberattacks; and
• Legal compliance: to comply with requests from regulatory authorities, courts, and law enforcement.

Legal basis for processing

HUMAIN processes your personal data on the basis of: (a) contract performance - processing necessary to provide Marketplace services to you; (b) legal obligation - processing required by applicable law; (c) legitimate interests - for security, fraud prevention, and audit purposes; and (d) consent - where required by the PDPL for specific processing activities.

Retention

Personal data collected for verification and audit purposes will be retained for five (5) years from the date of collection or the termination of your account (whichever is later), or such longer period as may be required by applicable law.

Sharing of your data

HUMAIN may share your personal data with: (a) regulatory authorities, law enforcement agencies, and courts as required by applicable law; (b) third-party service providers engaged by HUMAIN to perform onboarding, verification, payment processing, or cybersecurity functions, under appropriate data processing agreements; and (c) HUMAIN’s affiliates for internal compliance and operational purposes. HUMAIN does not sell personal data to third parties.

Your rights under the PDPL

Subject to applicable law, you have the right to access, correct, and request the deletion of your personal data, to object to or restrict its processing, and to withdraw consent where processing is based on consent. To exercise your rights, contact HUMAIN at [Insert Email].

For further details about the privacy of your personal data, please visit the Marketplace Privacy Notice [here]

This Notice is governed by the laws of the Kingdom of Saudi Arabia. HUMAIN may update this Notice from time to time; the current version is published on the Marketplace.