Introduction

This Privacy Policy explains how Special Integrated Logistics Zone (SILZ) ("SILZ", "we", "our", "us") processes, collects, uses, stores, and protects personal data ("Personal Data") when you access or use our digital platforms, including the SILZ One-Stop Shop (OSS), website, portals, applications, and any related digital services (collectively, the "Platforms"). SILZ is established under the laws of the Kingdom of Saudi Arabia, with its principal office in Riyadh, Kingdom of Saudi Arabia.

Data We Collect

We may collect Personal Data directly from you or automatically when you interact with our Platforms. This includes, but is not limited to:

• Full name
• National ID / Iqama / Passport details
• Date of birth
• Email address and phone number
• Nationality and gender
• Company name, role, and occupation
• Licensing, permits, and regulatory data
• Financing, investment, or operational details (where applicable)
• Government support or beneficiary status (where applicable)
• IP address, device identifiers, browser type, operating system
• Platform usage data, logs, timestamps, and cookies

We only collect Personal Data that is necessary, relevant, and proportionate to the purposes described below.

Purposes of Processing

SILZ processes Personal Data for legitimate business and regulatory purposes, including:

• Registering and authenticating users on the OSS and other Platforms
• Processing applications, licenses, permits, and service requests
• Managing investor, tenant, partner, and visitor journeys
• Responding to inquiries, feedback, and complaints
• Communicating updates, notifications, and service-related information
• Complying with applicable laws, regulations, and government requirements
• Enhancing platform security, performance, and user experience
• Conducting analytics, reporting, and service improvement initiatives

Disclosure of Personal Data

SILZ may disclose Personal Data:

• To government authorities, regulators, and public entities where required by law
• To service providers, contractors, and technology partners acting on our behalf
• For compliance, audit, risk management, or legal enforcement purposes

Where required, Personal Data may be transferred outside the Kingdom of Saudi Arabia. In such cases, SILZ will ensure appropriate safeguards are in place to protect the data in accordance with applicable laws.

Note: Failure to provide certain Personal Data may result in limited access to some services or functionalities.

Data retention

SILZ retains Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, to comply with applicable legal, regulatory, and contractual obligations, or to resolve disputes. Upon expiry of the retention period, Personal Data shall be securely deleted, anonymized, or archived in accordance with applicable laws.

Your Rights

Subject to applicable laws, you may have the right to:

• Access your Personal Data
• Request correction or updating of inaccurate data
• Request deletion of your Personal Data
• Withdraw consent (where processing is consent-based)
• Be informed about how and why your data is processed
• Obtain a copy of your Personal Data in a readable format

We will respond to requests within legally prescribed timelines.

Personal data breach management

In the event of a personal data breach that may pose a risk to data subjects, SILZ shall take appropriate remedial and containment measures and, where required, notify the competent authority and affected individuals in accordance with applicable laws and regulations.

Cookies & Tracking Technologies

SILZ uses cookies and similar technologies to:

• Enable core platform functionality
• Enhance performance and user experience
• Analyze usage patterns and improve services

Where required, cookies will only be deployed with your consent. You may adjust your browser settings to refuse cookies; however, this may affect platform functionality. SILZ may use analytics tools (e.g., Microsoft Clarity) to understand how users interact with the Platforms. By using our Platforms, you consent to such data processing in accordance with applicable privacy standards.

Regulatory compliance

SILZ processes Personal Data in compliance with the Saudi Personal Data Protection Law and its implementing regulations, and under the supervision of the competent authority in the Kingdom of Saudi Arabia.

Data Accuracy

Users are responsible for ensuring that the Personal Data provided to SILZ is accurate, complete, and up to date. SILZ shall not be responsible for inaccuracies arising from incorrect or incomplete information submitted by users.

Lawful Basis for Processing

SILZ processes Personal Data based on lawful grounds, including:

• Legal obligations
• Performance of a contract
• Legitimate interests
• User consent (where applicable)