Privacy and Data Protection

Privacy Policy

Section One - Introduction

The Ministry was established as the “Ministry of Environment, Water and Agriculture” pursuant to Royal Decree No. (5/21/1/4951) dated 18/04/1373 AH. The Ministry is responsible for promoting the sustainability of the environment and natural resources, achieving food security, and supporting the agricultural sector in the Kingdom of Saudi Arabia through various programs and financial support for farmers.

The Ministry provides a range of services through digital platforms, through which personal data is collected and processed. The Ministry is committed to maintaining the confidentiality and privacy of such data and using it to provide users with the expected level of service, in accordance with the applicable terms and conditions in the Kingdom of Saudi Arabia. Use of the Ministry’s official website or Naama Platform constitutes the user’s acceptance of this Privacy Policy.

Section Two - Contact Methods and Privacy Policy Updates

The Personal Data Protection Officer, under the supervision of the Ministry’s Data Management Office, serves as the point of contact for requests related to the processing of personal data, requests to exercise data subject rights, complaints, and other inquiries related to this Policy.

The Personal Data Protection Unit may be contacted via email at: dpo@mewa.gov.sa

If no response is received within seven days of submitting a request or complaint, the Ministry’s Data Management Office may be contacted directly at: dmo@mewa.gov.sa

The Ministry reserves the right to amend or add any provision of this Policy and will notify all users of such changes. The Ministry may terminate the data subject’s account or service if the data subject does not agree to any changes to the Privacy Policy, in accordance with the applicable personal data protection laws and regulations and the Ministry’s requirements.

Arabic is the official language for the application of the terms and provisions of this Policy. In the event of any discrepancy or conflict in the interpretation of this Policy in another language, the Arabic version shall prevail.

This Policy was last updated on 29 Rabi’ Al-Awwal 1446 AH.

Section Three - Personal Data Collected

Due to the nature of the services provided by the Ministry, the following personal data is collected:

• Full name
• Date of birth
• National ID number
• Address
• Phone number
• Email address
• Gender

Section Four - Methods and Purposes of Data Collection

Personal data provided by the data subject to the website or platform is collected through registration and through integration with the systems of the Ministry of Interior. No personal data is collected from any other entities.

Certain personal data is also collected indirectly through cookies when visiting the website.

National identification data is verified through integration with the Nafath Platform.

Section Five - Processing of Personal Data

• Personal data is processed to improve the user experience and complete the requested services.
• The user’s identity and the accuracy of their information are verified through the Nafath Platform.
• The user’s address is linked to their geographic location to direct them to the nearest Ministry center when required.
• User data is transformed and processed to develop business intelligence dashboards that support improved decision-making within the Ministry and the development of appropriate services based on population group, age, gender, and other relevant information.
• Data is used to prepare usage and geographic distribution statistics.
• Certain data is used to measure user satisfaction and the digital experience.

Section Six - Sharing of Personal Data

The Ministry shares personal data with government agencies after entering into an agreement with the relevant government agency, in accordance with the updated Data Sharing Policy issued by the Saudi Data & AI Authority. Such government agencies are required to comply with applicable personal data protection provisions.

This applies to all government agencies, except in certain judicial cases or cases related to public security, as provided for under the Personal Data Protection Law in the Kingdom of Saudi Arabia.

Section Seven - Storage, Retention, and Disposal of Personal Data

First - Storage and Retention

All personal data is stored in databases belonging to the Ministry, within the Ministry’s facilities or those of its affiliated entities, and within the Kingdom of Saudi Arabia. Servers and databases are protected using appropriate methods and technologies in accordance with the controls and requirements of the National Cybersecurity Authority.

Second - Data Disposal

Once the purpose for which the data was collected has been fulfilled and the retention period has expired, the Ministry securely and effectively disposes of all data subject to the applicable retention and disposal policy, in accordance with the Personal Data Protection Law and its regulations, the requirements of the National Cybersecurity Authority, the National Center for Archives and Records, and other applicable regulations.

Section Eight - Rights of Personal Data Subjects

Protecting the data of users and beneficiaries is among the Ministry’s highest priorities. The Ministry makes every effort to ensure the privacy, confidentiality, and protection of personal data in cooperation with all relevant entities.

In accordance with applicable personal data protection regulations and controls, data subjects have the following rights:

• Right to Be Informed:
  This includes being informed of the legal basis for collecting personal data, the purpose of collection, how the data is processed, and the entities with which the data is shared.
• Right to Request Access to Personal Data Held by the Ministry in a Readable and Clear Format:
  Subject to the controls and procedures specified in the applicable regulations, the data subject may contact the Personal Data Protection Officer to request a copy of their personal data free of charge.
• Right to Request Correction of Personal Data Held by the Ministry, Including Updating or Correcting Such Data:
  The data subject may contact the Personal Data Protection Officer. The correction or amendment request will be reviewed and confirmation will be provided by email.
• Right to Request the Destruction of Personal Data Held by the Ministry When It Is No Longer Needed:
  This is subject to the applicable personal data protection regulations and controls.
• Right to Withdraw Consent to the Processing of Personal Data:
  The data subject may withdraw consent to the processing of their personal data at any time, unless there are legitimate purposes that require otherwise.

Section Nine - Exercising Data Subject Rights

The data subject may exercise the rights set out in Section Eight, including the right to access personal data, the right to be informed, the right to correction, the right to destruction, and the right to withdraw consent, by contacting the Ministry’s Personal Data Protection Officer through the email address provided in Section Two.

For more information on the relevant laws and regulations referred to in this Policy, please refer to the following links: