Introduction
This policy aims to comply with the requirements of national data governance policies and relevant regulations concerning the protection of individuals' rights and privacy, as per the Personal Data Protection Law issued by the National Data Management Office (NDMO) and its related regulations. This policy reflects the company’s commitment to the highest standards of compliance and privacy protection. It is designed to protect personal data and ensure its confidentiality, safeguarding the rights of users of the Green Pineapple Company's digital platform. Additionally, it regulates the collection, processing, sharing, and retention of personal data.
- Definitions
The following definitions are applied in this policy, unless the context requires otherwise
- The Company : Ananas AlKhadra, the owner and operator of the digital platform.
- The Digital Platform : The company's website used for offering electronic insurance intermediary services.
- Personal Data : Any information—regardless of its source or form—that can identify an individual directly or indirectly, especially when combined with other data.
- Sensitive Data : Personal data referring to an individual's ethnic or tribal origin, religious or philosophical beliefs, political opinions, membership in associations or civil institutions, criminal or security records, biometric traits, genetic, financial, health data, location data, or information indicating that an individual is orphaned (missing one or both parents).
- Data Subject : The individual who benefits from the company’s services, whose personal data is being collected, or their legal representative or guardian.
- Personal Data Processing : Any operation performed on personal data, whether automated or manual, such as collection, transfer, storage, sharing, destruction, analysis, pattern extraction, or linking with other data.
- Data Breach : Any disclosure or access to personal data without authorization or legal justification, either intentional or accidental.
- Data Controller : Any entity contracted with the company that processes personal data.
- Scope of the Policy
This policy applies to all personal data collected, processed, stored, archived, or disposed of by the company, as well as to all systems involved in processing this data. It also applies to all authorized employees responsible for using the data to fulfill the company's objectives.
- Purpose of Collecting Personal Data
- To personalize the users’ experience and provide them with suitable offers.
- To improve the quality of services offered via the digital platform.
- To better understand users' needs and develop services accordingly.
- To complete insurance procedures and issue insurance policies.
- To process requests from users via the Green Pineapple Company's digital platform.
- Personal Data Content
- Contact Information : Such as name, address, phone number, email address, and any other details necessary to complete an insurance policy request.
- Insurance Data : Such as identity number, date of birth, gender, type of insurance requested, vehicle data, and any other information necessary to issue an insurance policy based on the chosen product.
- Methods of Collecting Personal Data
Personal data is collected directly and indirectly via
- Integration with Yaqeen services.
- User registration on the digital platform.
- Official communication channels between the company and its clients.
- How Personal Data is Processed
- Personal data is processed to fulfill the company’s tasks and responsibilities in accordance with established policies, controls, and procedures, ensuring compliance with relevant laws and regulations.
- Personal data is processed by those authorized by the company as specified in the policies approved for this purpose.
- While the company will not share personal data with third parties without the consent of the data subject, it reserves the right to disclose any information to the relevant authorities when necessary for public interest, security purposes, compliance with legal requirements, or judicial processes, or in accordance with applicable laws, regulations, and procedures.
- The Company may process personal data for marketing purposes, provided that it has been collected directly from the data subject and after obtaining their explicit consent through the pop-up acknowledgment before completing the payment process, with the exception of sensitive personal data.
- How Personal Data is Destroyed
Personal data is destroyed once it is no longer required for its intended purpose. Data will not be retained after its intended purpose is fulfilled, unless there is a legal obligation to retain it for a specified period, or if it is closely linked to a legal case requiring retention. In such cases, personal data will be destroyed after the legally specified period or after the judicial process is completed, whichever is longer, and in compliance with established security standards and regulations.
- Rights of the Data Subject
A data subject with an account on the digital platform has the following rights, subject to the provisions of applicable laws and regulations
- Right to be informed : This includes being made aware of the legal basis for collecting their personal data and the purpose of its collection.
- Right to access : The right to access their personal data, review it, and obtain a copy of it in a clear and readable format, free of charge, as per the relevant laws and regulations, subject to any restrictions or exceptions specified therein.
- Right to correction : The right to request the correction, completion, or updating of their personal data.
- Right to destruction : The right to request the destruction of personal data no longer necessary for the purposes for which it was collected, subject to relevant laws and regulations.
- Exercising Data Subject Rights
The data subject may exercise their rights or inquire about the privacy policy by contacting the company through the official communication channels listed on the digital platform.
- Updates to the Privacy Policy
- Green Pineapple Company reserves the right to modify this policy at any time. Any changes will be effective upon publication on the company’s digital platform. Continued use of the website and communication with the company after the changes indicate acceptance of those modifications. We recommend reviewing the privacy policy regularly to stay informed of any updates. The last update to this policy was on 20/10/2025.
- The Arabic language is the official language for implementing this policy and its terms and conditions. In case of any dispute in the interpretation of any clause in another language, the Arabic text shall prevail.
- This policy is governed by the applicable laws, regulations, and policies in the Kingdom of Saudi Arabia, and the courts of Saudi Arabia have exclusive jurisdiction to hear any disputes arising from it.