Privacy Policy

The Ministry of Justice is committed to safeguarding the confidentiality and privacy of user data, using it solely to deliver high-quality services in accordance ​with the laws

ِِAnd regulations of the Kingdom of Saudi Arabia. By accessing the Ministry of Justice website or its affiliated platforms, users implicitly consent to this Privacy Policy.

Who Collects User Data?

• The Ministry of Justice prioritizes the confidentiality of user and visitor information. We strive to provide exceptional service to all users. This Privacy Policy forms part of the terms and conditions for using the Ministry's website.
• Users and visitors have to regularly review the privacy terms and conditions for updates.
• The Ministry of Justice is not liable for any direct, indirect, incidental, consequential, special, or exceptional damages resulting from the use or inability to use the Ministry's website.
• When accessing a service linked to the Ministry of Justice, the respective entity will: 
• Act as the data controller. 
• Be responsible for processing any shared data. 
• Publish and manage its own privacy notice, including contact details.

Purpose of Collecting Personal Data

Personal data is collected to address inquiries, suggestions, or complaints submitted by users. The data is used for the following purposes: 

• Facilitating access to government services and processing applications. 
• Implementing general service improvements. 
• Providing information about local services. 
• Monitoring website usage to detect security threats. 
• Sending email alerts upon user subscription or activation. 
• Gathering feedback to enhance services, such as content or service ratings. 
• Responding to user feedback or inquiries.

Content of Personal Data Collected

• Questions, inquiries, or feedback, including your email address when you contact us about a service or provide additional information through any communication channel (electronic or non-electronic, such as website inquiries). Your email address, message, and our response may be stored for quality assurance purposes. 
• Your email address and subscription preferences when you opt into email alerts. 
• Your Internet Protocol (IP) address and web browser details. 
• Information on website usage collected via cookies.

Sources and Methods of Collecting Personal Data

The Ministry of Justice collects personal data from: 

1. Users directly, through information provided on the website. 
2. Cookies, which indirectly record data during website visits. 
3. Authorized legal representatives of the data subject, where applicable under the Personal Data Protection Law in Saudi Arabia.

Storage and Destruction of Personal Data

Personal data is stored within the Kingdom of Saudi Arabia on servers managed by the National Information Center. These servers employ advanced security technologies, compliant with the National Cybersecurity Authority's policies and international standards, to prevent unauthorized access and mitigate cyber risks. Data is securely destroyed after its purpose is fulfilled, in accordance with National Information Center policies, ensuring it cannot be viewed or retrieved.

Method of Storage

• The Ministry of Justice uses tools to collect anonymized data about website usage, such as IP addresses, which are anonymized before analytics processing.
• Personal information (e.g., names or addresses) is not stored, ensuring users are not identifiable through analytics data. Analytics data is not combined with other datasets in a way that could identify individuals.
• Data is collected solely for quality control and monitoring purposes, with ongoing assessments of data protection measures to ensure their effectiveness.

How Data Is Processed

Anonymized data is processed to analyze: 

• Pages visited on the Ministry's website. 
• Duration of website visits. 
• How users arrived at the website. 
• User clicks during visits.

Rights of the Personal Data Subject 

• Right to be informed: Data subjects have the right to understand how their data is collected, the legal basis for its collection and processing, how it is stored, processed, destroyed, and with whom it is shared. 
• Right to access: Data subjects may request a copy of their personal data via email, which will be provided within seven business days. 
• Right to correction: Data subjects may request corrections to inaccurate, incorrect, or incomplete personal data via email. Corrections will be reviewed and completed within seven business days, with notification sent via email. 
• Right to destruction: Data subjects may request the deletion of their personal data, except where legal or contractual obligations require retention. 
• Right to withdraw consent: Data subjects may withdraw consent for data processing at any time, unless legitimate purposes require otherwise.

How to Exercise These Rights

The Ministry of Justice prioritizes the confidentiality of user and visitor information, striving to deliver high-quality services.

• Users and visitors should regularly review the privacy terms and conditions for updates.
• The Ministry will not disclose personal information unless voluntarily provided by the user, and such information will only be used for its intended purpose.
• Data subjects may withdraw consent for data sharing at any time.
• Submitting data through the Ministry's website or direct applications implies full consent to its storage, processing, and use by relevant authorities. The Ministry reserves the right to disclose information to authorities when required.
• Users are responsible for the accuracy, completeness, and truthfulness of data submitted via the website.

Recommendations to Protect Personal Data 

• Do not share confidential information related to the Ministry of Justice over the phone or online with unauthorized entities. 
• Use a secure browser for online transactions, close unused applications, and keep antivirus software updated. 
• Contact the Ministry's Data Management and Privacy Office for questions about privacy principles. 
• Personal data is protected using appropriate security technologies for electronic storage and transmission. 
• This website may link to external websites or portals with different privacy practices. The Ministry is not responsible for the content or privacy policies of these sites, and users should review their respective privacy notices.

Sharing Personal Data

• In accordance with the Data Sharing Policy issued by the National Data Management Office, personal data will not be shared with non-governmental entities unless they are authorized to provide specific government services or with user consent.
• Personal data may be shared with government entities for specific purposes, based on regulatory requirements or justified needs in the public interest, provided it does not harm national interests, entities, individual privacy, or environmental safety. Data exempted by royal decrees is excluded.
• Data sharing occurs in a secure, reliable environment, compliant with relevant laws and regulations. Additional safeguards, such as data sharing agreements, may be implemented.
• The Ministry promotes data sharing to enhance integration between entities within and outside the Kingdom, ensuring data is sourced correctly and reducing duplication. Entities sharing data must obtain consent from the primary data source before sharing.
• All parties involved in data sharing are jointly responsible for adhering to specified purposes and implementing security controls as per agreements and regulations.
• Ethical practices are applied to ensure data sharing is fair, transparent, and compliant with security policies and the National Cybersecurity Authority's guidelines.

 ​

Exercising Personal Data Subject Rights

For questions about this Privacy Policy or concerns about the misuse or mishandling of personal data, contact us at:

dmpo@moj.gov.sa

 ​

Relevant Legislation 

• National data governance policies (issued by SDAIA): the main principles and general rules for the protection of personal data, and for data sharing Click here
• Electronic Transactions LawClick here
• Anti-Cyber Crime LawClick here
• Basic Controls for CybersecurityClick here