Privacy Policy & Terms
Effective Date: 5th of October, 2025
This Privacy Policy explains how Standard of Implementation (SOI) (“we,” “our,” or “us”) collects, uses, shares, and safeguards your personal information when you interact with our services, website, registration forms, and events. By submitting your information or using our platform, you consent to the practices described below.
1. SOI as Data Controller
SOI is the data controller responsible for determining the purposes and methods of processing your personal data, in line with the Saudi Personal Data Protection Law (PDPL) and other applicable regulations.
2. Information We Collect
We may collect and process the following data:
- Name, email, and phone number
- Occupation, title, institution, and specialization
- Event registration and participation history
- Uploaded documents or workshop proposals
- Technical data such as IP address, browser metadata, and timestamps
3. How We Use Your Data
We use your personal data to:
- Register and manage your participation in SOI events and workshops
- Communicate event updates, confirmations, and logistical details
- Share promotional or sponsored educational content
- Analyze trends, improve our services, and support reporting
- Prepare anonymized analytics or market insights
Legal Basis: Our processing of personal data is based on your consent, contractual necessity for event participation, and legitimate interests such as service improvement and analytics.
4. Marketing Communications
By agreeing to these terms, you consent to receive communications from SOI via:
- SMS
- WhatsApp or other digital platforms
You may opt out at any time by clicking “unsubscribe” in any message or contacting us directly.
5. Data Sharing and Monetization
By submitting your information and agreeing to this policy, you acknowledge and consent that:
- SOI may share your personal data with selected sponsors, partners, and affiliated institutions for promotional or collaborative purposes.
- Aggregated or anonymized data may be used to develop reports or analytics.
- SOI may monetize access to data-driven insights, trends, and educational performance metrics.
- We will never sell identifiable personal data without your consent. All use and sharing are done in accordance with the PDPL.
6. Third-Party Services & Cloud Tools
We may rely on secure third-party platforms or cloud services for storing, processing, or analyzing your data. These services are selected for their compliance with industry standards and data security protocols.
7. Data Retention
SOI retains personal data only as long as necessary for the intended purposes or as legally required. Retention periods include:
- Event and participation records: up to 5 years
- Financial and contractual data: up to 5 years (regulatory compliance)
- Marketing communications: up to 5 years or until opt-out
- Workshop proposals and feedback forms: up to 3 years
These timeframes support reporting, insights, regulatory audits, and educational impact evaluation.
8. Children’s Privacy
SOI’s services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe such data has been submitted, contact us for immediate deletion.
9. Terms of Use
By accessing our website or registering for an event, you agree to:
- Use our content and systems lawfully and in good faith
- Refrain from unauthorized copying, scraping, or misuse of materials
- Adhere to SOI’s event rules and communications guidelines
- Accept that all legal matters fall under the jurisdiction of the Kingdom of Saudi Arabia
10. Cross-Border Data Transfers
Some data may be securely processed or stored outside Saudi Arabia. All international transfers comply with the PDPL and relevant SDAIA guidelines.
11. Your Rights Under PDPL
You have the right to:
- Access your personal data
- Correct inaccurate or outdated information
- Withdraw consent or request deletion (unless retention is legally required)
To exercise these rights, please contact us at contact@soi.sa and include sufficient details to verify your identity and request.
12. Data Security
SOI implements appropriate administrative, technical, and physical safeguards to protect your information from unauthorized access, loss, or misuse.
13. Data Breach Protocol
In the event of a breach, SOI will:
- Assess risk and impact
- Notify SDAIA as required
- Inform affected individuals when appropriate
- Activate mitigation and response procedures
14. Policy Updates
We may update this Privacy Policy at any time. Changes will be posted on this page with an updated effective date. Continued use of our services constitutes acceptance of the revised terms.
15. Contact Information
For questions, access requests, or concerns about your data:
- Email: contact@soi.sa
