Privacy Policy
1. Information We Collect
We collect information you give us directly, and a small amount of information collected automatically when you use our website.
Information you give us
- Your name, email address, and phone number
- Your resume / CV and the details you include in a job or program application
- Workshop, program, and conference registration details
- Your email address and language preference when you subscribe to our newsletter
- Payment details when you pay for a program, card payments are handled by Moyasar, and we never see or store your full card number
- Messages you send us through contact forms or by email
Information collected automatically
- Usage and device data through Google Analytics (pages viewed, browser type, approximate location)
- Error and performance diagnostics through Sentry when something goes wrong
- Session cookies that keep you signed in and remember your language and cookie choice
2. How We Use Your Information
- To run our programs, processing registrations, applications, and workshop bookings
- To communicate with you, confirmations, reminders, program updates, and newsletters you opted into
- To operate and improve the website using analytics
- To keep our services secure and prevent fraud or abuse
- To meet legal obligations and resolve disputes when necessary
We do not sell or rent your personal data, and we never share it for third-party marketing.
3. How We Share Your Information
We share data only with the service providers that help us run Nawa, and only the data they need to do their job:
- Moyasar, processing card payments for paid programs
- Google Drive (Google Workspace), secure storage of resumes and application files
- Brevo and Resend, sending transactional and newsletter emails
- Google Analytics, understanding how the website is used
- Sentry, error monitoring and performance diagnostics
Each provider processes your data under its own privacy terms. We may also disclose data when required by law or to protect our rights.
4. Cookies & Tracking
We use a small number of cookies and similar technologies:
- Essential session cookies (sign-in, language, and your cookie-consent choice)
- A language cookie (nawa_lang, one year) that remembers whether you use the site in Arabic or English, so pages open in your language. It holds only "ar" or "en" and is not used for tracking.
- Google Analytics cookies to understand how the site is used
- Sentry for error and performance diagnostics
When you first visit, we ask for your consent to analytics. You can change your choice or disable cookies in your browser at any time, though some features may stop working correctly if you do.
5. Data Retention
- Resume and application files stored on Google Drive are kept for as long as needed to evaluate your application and for a reasonable period afterwards, unless you ask us to delete them sooner
- Program and workshop registration records are kept while your relationship with Nawa is active and as required for legal and accounting purposes
- Newsletter opt-in records are kept until you unsubscribe
- Analytics and error data are retained according to the default retention periods of Google Analytics and Sentry
6. International Data Transfers
Some of our service providers, including Moyasar, Google, Brevo, Resend, and Sentry, process data on servers located outside Saudi Arabia. Where this happens, we rely on those providers' safeguards to protect your data to a standard consistent with the Saudi Personal Data Protection Law.
7. Your Rights
Under the Saudi Personal Data Protection Law (PDPL), you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your personal data
- Withdraw consent for communications or analytics at any time
- Object to certain processing and lodge a complaint with the competent authority in Saudi Arabia
To exercise any of these rights, email us at info@nawa.sa. We aim to respond within 30 days.
8. Data Security
We protect your data with encrypted connections (TLS), access controls that limit who on our team can see personal data, and reputable providers for storage and payments. No system is perfectly secure. If you believe your data may be at risk, contact us immediately at info@nawa.sa.
9. Governing Law
This policy and our handling of your personal data are governed by the Personal Data Protection Law of the Kingdom of Saudi Arabia (PDPL) and its implementing regulations.
10. Changes & Contact
We may update this policy as our services or the law change. We will post the new version here with an updated date and, for material changes, notify registered users by email. Questions about this policy or your data? Email info@nawa.sa.