Privacy Policy of SAAML

We at SAAML aim for transparency in our daily operations with customers, partners, and providers. Your privacy and data protection are important to us, and in the name of transparency, we would like to outline and clarify how we protect you.

The goal of this Privacy Policy is to inform you about the types of information (including personal data) that we may gather or collect from you in connection with your use of this website. The Privacy Policy is also intended to explain the conditions under which we use and disclose that information, and your rights in relation to that information.

Last updated: 31 October 2026.

The Basis for Using Your Data

We handle personal data in line with Saudi Arabia's Personal Data Protection Law (PDPL). We use it to provide the services you sign up for and to meet our legal obligations. We also rely on our legitimate interests, where they do not override your rights, to keep our site and services secure, answer your enquiries and measure how our site is used. We will not later use your data in a way that does not fit these purposes, except where the PDPL allows it. For marketing, we ask for your consent, and you can withdraw it at any time.

Collection of Information

Information You Provide

• Information that you enter when you create an account on our website—for example, your name, email address, company information and others.
• Information that you enter when you register a company on our website—for example, Company name, Owner information, company's customer support and others.
• Information relating to any shipments you track which include the shipment Tracking Number.
• Information contained in any communications that you send to us by email or through our website, subscribe to our newsletter, respond to a survey, fill out a form, inquire or request about materials being ordered and similar situations in which you have chosen to provide personal information to us.
• Any other personal information that you send to us.

If you do not want your personal information collected, do not provide it to us. The database and its contents remain at our company and stay with data processors or servers acting on our behalf and responsible to us. Your personal data will not be passed on by us or by our agents for use by third parties in any form whatsoever unless we have obtained your consent or are legally required to do so.

Information We Collect

You can visit all public areas of our site without providing any personal information about yourself. However, our website does collect, store, and use certain non-personal information, such as:

• Information about your computer, including your IP address, geographical location, browser type and version, and operating system.
• Information about your visits to and use of this website, including the referral source, length of visit, page views, and website navigation paths.
• Information that is generated while using our website, including when, how often, and under what circumstances you use it.
• Some parts of the site use embedded pixel or JavaScript technologies to facilitate your use of the website and to track general traffic.

Cookies

A cookie is a small file that is placed on your computer's hard drive. It helps analyze web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyze data about webpage traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes, and then the data is removed from the system.

We use Google Analytics to measure how the site is used. Until you accept in the cookie banner, Google Analytics sets no cookie on your device and receives only cookieless measurement signals that carry no identifier for your browser. If you accept, Google Analytics cookies are used to measure repeat visits. You can change your choice at any time with the Cookie settings link at the bottom of every page.

We also set one cookie of our own, sg_attr, when you arrive on the site. It keeps for 30 days where your visit came from: the campaign (utm parameters or a Google Ads gclid), the first page you opened and the site that referred you. We use it only to know where an enquiry came from when you contact us through a form on this site, so it is attached to your enquiry in our customer system. It is not shared with Google or used for advertising. You can delete it in your browser settings at any time.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

Security of Information

We will always limit the amount of data that is collected to a bare minimum but do understand that the data we have needs to be well protected:

• We will take reasonable technical and organizational precautions to prevent the loss, misuse, or alteration of your personal information.
• We will store all the personal information you provide on our secure (password- and firewall-protected) servers.
• All electronic financial transactions entered through our website will be protected by encryption technology.
• You acknowledge that the transmission of information over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet.
• You are responsible for keeping the password you use for accessing our website confidential; we will not ask you for your password (except when you log in to our website).

Sharing of Data

SAAML may share your personal information as follows:

• Business Transfers: SAAML reserves the right, under consideration of statutory law, to disclose or transfer your personal information in connection with the sale or transfer of all or a portion of our business or assets.
• Companies who work on our behalf: SAAML contracts with other companies to perform business support functions on our behalf, which may involve limited access to your personal information.
• Law Enforcement: We may disclose your personal data in response to a court order, or a request for cooperation from a law enforcement or other government agency.

When We Act for Delivery Companies

Delivery companies, logistics providers (3PLs) and merchants run their operations on SAAML, including the delivery portals and apps they offer under their own brand. Each of these companies decides why and how the personal data of its customers, senders and receivers is processed, and is responsible for it. We process that data on the company's behalf and on its instructions, except where a Saudi law obliges us to disclose it.

If you are a customer of one of these companies, its privacy policy applies to you. Send your requests about your data to that company. We help it answer them.

How Long We Keep Data

We keep personal data only for as long as we need it for the purpose we collected it for, or for as long as a law requires.

• We keep shipment records, tax invoices, receipts and accounting records for the periods that tax, zakat, commercial record-keeping and postal rules set, which for these records is at least 10 years from the end of the financial year they belong to.
• If a record is needed for a case before a court or other judicial authority, we keep it until the proceedings end.
• When a period ends, we must destroy the data or remove everything that identifies the person.

Deleting Your Account

You can ask us to delete your account. We then delete your personal data, except the records a law requires us to keep, and we keep only those, for the periods above.

Your Rights

Under the PDPL you have the right to:

• know how we collect and use your personal data, which this policy explains;
• see the personal data we hold about you and get a copy of it;
• ask us to correct it;
• ask us to delete it once we no longer need it, unless a law requires us to keep it for a set period or it is needed for a case before a court or other judicial authority;
• withdraw any consent you gave, including to marketing.

To use these rights, email us at contactus@saaml.com. We act on your request within 30 days. If it needs unusual effort, or you send us several requests, we may take up to 30 more days, and we will tell you in advance, with the reason. You can also complain to the Saudi Data and AI Authority (SDAIA) within 90 days of the incident or of when you learned of it, for example if you are not satisfied with our answer or we do not reply in time.

We will not sell, distribute, or lease your personal information to third parties unless we have your permission or are required by law to do so.

Changes to This Policy

We may update this policy from time to time by publishing a new version on our website. You should check this page occasionally to ensure you understand any changes to this policy.

Contact Us

If you have questions or concerns about your privacy when visiting our website, please contact us.

Email: contactus@saaml.com

Address: Riyadh, Saudi Arabia