What does this policy cover?
This policy describes how we (referred to as "Welcome Saudi", "Fresh Healthcare Saudi for Communications and Information Technology, Welcome Travel Solutions Ltd, "we" or "us") will make use of your data when you interact with us through our websites and all of the webpages, subdomains and subparts of the platform (our "Platform").
It also describes your data protection rights, including the right to object to some of the processing that we carry out. More information about your rights, and how to exercise them, is set out in the “What rights do I have?” below. If you are under the age of 18 you are not permitted to create a profile on our Platform. If an adult creates a profile on your behalf, it is the adult who enters into this policy and agrees to its terms
Summary of how we use your data
We use your personal data in order to provide the services to you, for service administration purposes, to personalize the content you see on the Platform, to identify your location and to improve the services offered to you.
Data is shared with companies or entities processing your data on our behalf and on our instruction.
Where we rely on your consent, such as for processing your data in order to provide personalized services to you, or sending direct marketing in relation to our relevant products and services, or other products and services provided by us, you can withdraw this consent at any time
What information do we collect?
General information such as your name, username and password, gender, age/date of birth, home address, email address and phone number, passport details, travel details and plans.
Personal information in relation to your health, ethnicity, religion, genes, family background or criminal record.
Marketing preferences including any consent you have given us, information related to the browser or device you use to access our Platform, including, but not limited to, IP addresses and location data.
Examples of Personal Information collected: version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site.
Purpose of collection: to load the Site accurately for you, and to perform analytics on Site usage to optimize our Site.
Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels
As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:
We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://policies.google.com/privacy?hl=en.You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
Using Personal Information
We use your personal Information to provide our services to you, which includes: offering products for sale, processing payments, maintaining you profile accounts (Traveller and Business accounts), and keeping you up to date on new products, services, and offers.
You can opt out of targeted advertising by:
FACEBOOK - https://www.facebook.com/settings/?tab=ads
GOOGLE - https://www.google.com/settings/ads/anonymous
BING - https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads]
Withdrawing consent or otherwise objecting to direct marketing
Where we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above. In some cases, we are able to send you direct marketing without your consent, where we rely on our legitimate interests. You have the right to opt-out of direct marketing. You can do this by contacting us at firstname.lastname@example.org
Who will we share this data with, where and when?
We will keep your data generally confidential but we may share your data in the following instances:
We will share your personal data with third parties where we obtain your consent at that time. We will only share the specific personal data which you authorize us to share with such third party. In such case, they will be a data controller and they may have their own privacy terms detailing how they use that personal data.
Personal data may be shared with government authorities and/or law enforcement officials if mandated by law or if required for the legal protection of our legitimate interests in compliance with applicable laws.
Personal data may also be shared with third-party service providers, who will process it on behalf of us for the purposes identified above. Such third parties include (without limitation) providers of website hosting, maintenance, call centre operation and identity checking.
Personal data may also be shared with professional advisers acting as processors or joint controllers including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services to us.
In the event that our service is privatized, sold or integrated with another business, your details will be disclosed to our advisers and any prospective purchaser’s adviser and will be passed to the new supplier of such services.
If you are accessing our Platform from within the European Economic Area ("EEA"), your data might be accessed, collected and/or stored on servers outside of the EEA.
What rights do I have?
You have the right to ask us for a copy of your personal data; to correct, delete or restrict (stop any active) processing of your personal data; and to obtain the personal data you provide to us for a contract or with your consent in a structured, machine-readable format. In some cases where you have requested that your personal data is deleted, we may still have to keep this data on our Platform as the removal of such data will impact other data. In such cases, you can request that such data is anonymized.
In addition, you can object to the processing of your personal data in some circumstances in particular, where we don’t have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing.
These rights may be limited, for example, if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law to keep or where we have compelling legitimate interests in keeping.
To exercise any of these rights, you can get in touch with us using the details set out below.
The provision of certain information is mandatory for the provision of certain services: if the relevant data is not provided, then we might not be able to provide you with certain services. All other provision of your information is optional. However, note that failure to provide the optional data means that we will not be able to send you communications about the goods and services that may be of interest to you, nor personalise the way that our content is presented to you.
Pursuant to the General Data Protection Regulation (“GDPR”), if you are a resident of the European Economic Area (“EEA”), we process your personal information under the following lawful bases:
When you create an account or place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase this information. For more information on your right of erasure, please see the ‘Your rights’ section below.
The Site is not intended for individuals under the age of 18. We do not intentionally collect Personal Information from children. If you are the parent or guardian and believe your child under the age of 18 has provided us with Personal Information, please contact us at the address below to request deletion.
The performance of the contract between you and the Site;
Compliance with our legal obligations;
To protect your vital interests;
To perform a task carried out in the public interest;
For our legitimate interests, which do not override your fundamental rights and freedoms.
Your rights - GDPR
If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information below.
Your Personal Information will be initially processed in Ireland and then will be transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Shopify’s GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.
If you are a resident of California, you have the right to access the Personal Information we hold about you (also known as the ‘Right to Know’), to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information below.
If you would like to designate an authorized agent to submit these requests on your behalf, please contact us at the address below.
A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor.
We use the following cookies to optimize your experience on our Site and to provide our services.
The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.
You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.
Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as www.allaboutcookies.org.
Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Behavioural Advertising” section above.
How do I get in touch with you?
We hope that we can satisfy queries you may have about the way we process your data. If you have any concerns about how we process your data, or would like to opt-out of direct marketing, you can get in touch by emailing us at email@example.com.
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at [firstname.lastname@example.org] or by mail using the details provided below:
Fresh Healthcare Saudi for Communications and Information Technology, 3141 Anas Bin Malik, Riyadh, 13521-8292
Welcome Travel Solutions Ltd, 20-22 Wenlock Road, London N1 7GU, United Kingdom
Last updated: [August 2021]
If you are not satisfied with our response to your complaint, you have the right to lodge your complaint with the relevant data protection authority. You can contact your local data protection authority, or our supervisory authority here: https://ico.org.uk/make-a-complaint/ if you are based in the UK.