PKF Al Bassam Chartered Accountants is a professional services firm incorporated in the Kingdom of Saudi Arabia, (“PKF Al Bassam Chartered Accountants”, “we”, “us”, “our”).

We are committed to protecting your privacy and handling your information in an open and transparent manner.
This policy describes how PKF Al Bassam Chartered Accountants collects, processes, uses, and discloses personal information as a data controller, when you contact us, or interact with our website as a potential or active client or job applicant.
PKF Al Bassam Chartered Accountants acts as a data processor, when handling client data under a contract or on behalf of our clients to provide professional services.

2. WHAT DOES THIS POLICY COVER?

We are committed to adopting the highest standards when it comes to how we collect, use, and protect your personal information, and have accordingly developed this privacy policy (the “Policy”), which:
 • Establishes the types of personal information we collect.
 • Explains how and why we collect and use your personal information.
 • Explains when and why we may share personal information with other organizations.
 • Describes how we protect the personal information we collect; and
 • Explains the rights you have about your personal information.

This Policy applies if you use our services (referred to in this Policy as “our Services”). Using our Services means:
 • Using our website; or
 • Business partner, client, job applicant, employee

3. PERSONAL INFORMATION WE COLLECT

We obtain personal information about you only if you choose to provide it, such as contact information to register for certain services. In some cases, you may have previously provided your personal information to PKF Al Bassam Chartered Accountants (if, for example, you are a former employee).

By registering and/or submitting personal information to PKF Al Bassam Chartered Accountants, you are also agreeing to the use of this information in accordance with this Policy. Your personal information is not used for other purposes, unless we obtain your permission, or unless otherwise required or permitted by applicable law or professional standards. For example, if you use ‘Contact Us’ on our web site and provide information we will use this information to contact you for the requested service. If you send us a resume to apply online for a position, we may use the information that you provide to match you with available job opportunities with PKF Al Bassam Chartered Accountants member firms.

We do not use cookies or similar technologies on our website.

Sensitive Personal Information

PKF Al Bassam Chartered Accountants generally collects only the personal information required to fulfill your request. If additional information is required, you will be notified of this at the point of collection. PKF Al Bassam Chartered Accountants only collects "sensitive" personal information (i.e. personal information regarding a person's race, ethnicity, political beliefs, trade union membership, religious or similar beliefs, physical or mental health, sexual life or criminal record) if you voluntarily provide it to us, and only where it is required for a specific purpose and is permitted to be collected by applicable law or professional standards.

Please do not provide sensitive personal information to PKF Al Bassam Chartered Accountants, unless you consent to our use of that information for its legitimate business purposes and consent to the transfer and storage of the information to and in PKF Al Bassam Chartered Accountants databases. If you question the necessity of providing sensitive information for any particular purpose, please contact us at dpo.sa@pkf.com.

 

3.1. How We Use Personal Data

PKF Al Bassam Chartered Accountants use personal data only for legitimate purposes to provide and improve our services, including:
 • Delivering contracted services, processing requests, and managing projects.
 • Sending important service updates and invoices, (with consent).
 • Responding to inquiries, providing customer and client support, and resolving issues.
 • Complying with legal and regulatory requirements, including tax and financial reporting.

 

3.2. Legal Basis for Processing Personal Data

PKF Al Bassam Chartered Accountants rely on one or more of the following legal grounds to process the personal data:
 • Contractual Necessity: When personal data is essential to fulfill our contractual obligations to you.

 • Legitimate Interests: Where we have a legitimate business interest to process your data for service delivery,
  communication, or website operation, balanced against your privacy rights.

 • Legal Compliance: When we are required by law to collect and process your data.

 • Consent: In specific cases, we may ask for your explicit consent to process your data for a particular purpose,
  such as marketing. You can withdraw your consent at any time.

 

3.3. Data Sharing and Disclosure

PKF Al Bassam Chartered Accountants may share personal data with third-party service providers who assist us in delivering our services . These providers are contractually obligated to uphold strict data security measures and process your data only for the intended purpose. PKF Al Bassam Chartered Accountants will not sell or lease your data to third parties for marketing purposes without your consent. PKF Al Bassam Chartered Accountants may also disclose data if required by law, in response to a court order, or to protect the rights and safety of ourselves or others.

Data Retention

PKF Al Bassam Chartered Accountants retain personal data only for as long as necessary to fulfill the purposes for which it was collected, legal obligations, or legitimate business needs. We follow a documented data retention policy that outlines secure disposal practices for archiving or deleting your data when it's no longer required.

 

3.4. Data Protection

PKF Al Bassam Chartered Accountants has implemented comprehensive technical and organizational security measures to protect the personal data from unauthorized access, disclosure, alteration, or destruction, controls including but not limited to:
 • Education and training to relevant staff to ensure they are aware of our privacy obligations when handling personal data
 • Administrative and technical controls to restrict access to personal information on a ‘need to know’ basis
 • Technological security measures, including fire walls, encryption and anti-virus software
 • Physical security measures, such as staff security passes to access our premises
 • Breach procedures, and security incident management

 

3.5. Data Protection Rights

Under the PDPL, Data Subjects have certain rights regarding their personal data. These rights include:

 • Right to Access: Data Subjects can request a copy of their personal data held by the firm.

 • Right to Rectification: Data Subjects can request correction or rectification of inaccurate personal data.

 • Right to Erasure: Data Subjects have the right to request the erasure of their personal data under specific circumstances.

 • Right to Restriction: Data Subjects can request to restrict the processing of their personal data under certain conditions.

 • Right to Object: Data Subjects have the right to object to the processing of their personal data for specific purposes,
 such as direct marketing.

 • Right to Data Portability: Data Subjects have the right to request a transfer of your personal data to another controller
  in a structured and machine-readable form.

To exercise any of your rights, or if you have any other questions or complaint about our use of your personal data, please email dpo.sa@pkf.com. You may also use these contact details if you wish to make a complaint to us relating to your privacy.

4. INCIDENT MANAGEMENT AND BREACH NOTIFICATION

PKF Al Bassam Chartered Accountants has established procedures for detecting, responding to, and managing data breaches and security incidents in incident response procedure. Incident response and breach notification processes are regularly reviewed and tested to ensure their effectiveness.

5. TRAINING AND AWARENES

PKF Al Bassam Chartered Accountants provides ongoing data protection training and awareness programs to employees to ensure they understand their responsibilities and the importance of protecting personal information. Training programs cover topics such as data protection principles, handling personal information securely, and identifying and reporting data protection incidents.

6. CONTACT INFORMATION

For inquiries or concerns regarding our data protection practices, to exercise data subject rights, or to report data protection incidents, please contact the Data Protection Officer and email at dpo.sa@pkf.com

7. CHANGES TO THIS POLICY

We may modify or amend this privacy statement from time to time.

To let you know when we make changes to this privacy statement, we will amend the revision date at the top of this page. The new modified or amended privacy statement will apply from that revision date. Therefore, we encourage you to periodically review this statement to be informed about how we are protecting your information.