WhiteHelmet Privacy Policy
Effective Date: March 6, 2025
Last Updated: March 6, 2025
1. Introduction
WhiteHelmet (“we,” “us,” or “our”) is committed to protecting your personal data in compliance with the Saudi Personal Data Protection Law (PDPL). This Privacy Policy explains how we collect, use, store, and protect your information when you use our services.
By using WhiteHelmet’s services, you consent to the collection and use of your data as outlined in this policy.
2. Information We Collect
We collect and process the following types of personal data:
- Identity Data – Name, company name, job title.
- Contact Data – Email address, phone number.
- Account Data – Username, authentication credentials (if not using SSO).
- Technical Data – IP address, browser type, device information, and log data.
We do not collect or process sensitive personal data unless explicitly required and with your consent.
3. How We Use Your Data
WhiteHelmet processes your personal data for the following purposes:
- To provide and improve our services.
- To verify your identity and manage your account.
- To respond to inquiries and provide customer support.
- To comply with legal and regulatory obligations.
We will never sell, rent, or share your personal data for marketing purposes without your consent.
4. Data Storage and Security
- All personal data is stored within Saudi Arabia in compliance with PDPL data localization requirements.
- We implement encryption, access controls, and security monitoring to protect your data.
- Personal data is retained only as long as necessary to fulfill the intended purpose or comply with legal obligations.
5. Your Rights Under PDPL
As a WhiteHelmet customer, you have the following rights:
- Access Your Data – Request a copy of the personal data we hold.
- Correction – Request updates or corrections to inaccurate data.
- Deletion – Request deletion of your personal data when no longer necessary.
- Withdraw Consent – Revoke your consent for processing (where applicable).
To exercise any of these rights, contact us at support@whitehelmet.sa.
6. Sharing Your Data (Minimal Data Disclosure)
We limit the sharing of personal data to what is strictly necessary for providing our services. Your data may be shared with:
A. Third-Party Service Providers (Minimal Data Sharing)
We work with trusted third-party providers to enhance our services. The data shared is minimal and non-critical, necessary only for functionality. These providers include:
- Autodesk (SSO Integration & BIM 360 Services) – If you choose to log in via Autodesk SSO, your authentication is handled directly by Autodesk, and we do not store your Autodesk password.
- Insta360 (Reality Capture Processing) – Only non-personal technical data may be processed for enhanced imaging.
- Cloud Service Providers – For secure storage and system operations (located within Saudi Arabia).
All third-party providers are contractually required to protect your data and comply with PDPL.
B. Legal and Regulatory Requirements
We may disclose data to comply with Saudi regulatory authorities if legally required.
C. Business Transfers
If WhiteHelmet is involved in a merger, acquisition, or asset sale, your data may be transferred, but you will be notified in advance.
7. Data Breach Notification
In the event of a data breach, WhiteHelmet will:
- Notify affected users as soon as possible.
- Report the incident to the client’s Security Operations Center (SOC) organization as per contractual obligations.
- Take necessary steps to mitigate any risks.
8. Changes to This Privacy Policy
We may update this policy periodically. Any significant changes will be communicated via email or our website.
9. Contact Us
If you have any questions about this Privacy Policy, contact us at:
WhiteHelmet
📧 support@whitehelmet.sa