Rights available
- The right to be informed about the legal basis and purpose of collection and processing.
- The right to access personal data held by the controller.
- The right to obtain personal data in a clear and readable form or receive a copy where applicable.
- The right to request correction, completion or updating of inaccurate or incomplete personal data.
- The right to request destruction of personal data where applicable and subject to lawful retention requirements.
- The right to withdraw consent where consent is the actual processing basis, without affecting processing already lawfully performed.
How to submit a request
Email [email protected] with the subject “Personal Data Request”. State your name, business contact details, relationship with Massader, the right you wish to exercise, and enough context to locate the relevant enquiry or correspondence. Do not initially send a national ID, passport, password or unnecessary sensitive document.
Identity verification
Massader must take reasonable steps to confirm that a request concerns the requester and to avoid disclosing information to an unauthorized person. We may ask targeted questions or request proportionate evidence after assessing the request. Verification information will be limited to what is reasonably necessary.
Authorized representatives
A representative should identify the person concerned, explain the request and provide evidence of authority appropriate to the circumstances. Massader may verify the authority directly and may communicate with the individual where necessary to protect their information.
Assessment and limitations
Rights are applied under the Saudi PDPL, its Implementing Regulation and other applicable laws. A request may be limited where the law permits or requires, including to protect another person’s rights, confidential commercial information, legal claims, security, statutory records or an applicable preservation obligation. If a request cannot be fulfilled in full, Massader will explain the applicable position where permitted.
Consent withdrawal
Where a specific activity genuinely relies on consent, withdrawal can be requested through [email protected]. Withdrawal does not make earlier lawful processing invalid and does not prevent processing based on another applicable legal ground. RFQ acknowledgement is not bundled marketing consent.
Questions and complaints
Send a privacy concern or request to [email protected] so Massader can review it. If the concern is not resolved, the individual may use the complaint services provided by the Saudi Data and AI Authority or other competent authority, subject to the applicable official process and statutory conditions.
Request minimization
An initial request should contain only the information needed to understand and locate the matter. Do not attach identity documents unless Massader specifically requests a proportionate verification document through an authorized channel.