HR Meetup: Corporate Well-Being Between Measurement and Impact — The Challenges of HR Leaders
HR Meetup: Corporate Well-Being Between Measurement and Impact — The Challenges of HR Leaders
Privacy policy
WalaPlus Privacy Policy
Date: November 2, 2025
Privacy Policy
WalaPlus is committed to protecting the privacy and security of our customers’ personal data and to complying with the Saudi Personal Data Protection Law (PDPL) and its Executive Regulations.
This policy explains how we collect, process, use, store, and securely delete personal data, as well as the rights of data subjects and how those rights may be exercised.
Data We Collect
We collect certain personal data necessary to deliver our services, including:
Basic Identification Data: Name, gender, date of birth
Contact Data: Email address, phone number
Professional Data: Company name
Financial / Transactional Data: Payment details when using paid services
Technical Data: Device type, operating system, IP address, and cookies
Usage Data: User activity within the platform/app, redemption and discount history, vouchers and coupons used
Optional – Fitness / Activity Data: With your explicit consent, we may collect general fitness data from Apple Health, Google Fit, or Huawei Health to convert steps into points within the WalaLife program.
Methods of Data Collection
Personal data may be collected through the following means:Directly from the user during registration or while using the services.
Automatically through the website or applications (cookies, analytics).
From the user’s employer to provide the service to its employees (and up to five family members).
Legal Basis for Processing (under PDPL)Contractual necessity / Service delivery
To process registration data, operate accounts, calculate points, and process payments.
Legal or regulatory obligation: For retention or disclosure where required by law.
Explicit consent: For optional purposes (e.g., marketing communications or fitness data), which may be withdrawn at any time.
Purpose of Data Collection and Processing
Personal data is collected and processed for the following purposes:Operating and providing WalaPlus services (rewards, discounts, and vouchers).
Managing accounts, notifications, and customer service.
Enhancing user experience and developing products.
Complying with legal and regulatory requirements.
Protecting transactions and preventing fraud.
Sending promotional offers and relevant services.
Any other purpose for which explicit consent is obtained.
Data Storage and Protection
Personal data is stored securely on servers located within the Kingdom of Saudi Arabia.
We apply technical and organizational controls to protect data from unauthorized access, use, alteration, or destruction.
Access to data is limited to authorized employees only, following the Least Privilege Principle.
Retention Period and Secure Disposal
Personal data is retained only for as long as necessary to achieve the purposes for which it was collected, and no longer than permitted by law or contract.
Once the purpose or legal retention period ends, data will be permanently and securely destroyed using technical methods that prevent recovery.
You may request data deletion once the legal or contractual purpose no longer applies; such requests will be processed in accordance with PDPL requirements.
Data Sharing with Third Parties
Data may be shared with authorized service providers (e.g., hosting or payment service providers) to support service delivery, ensuring full compliance with data protection requirements.
Data will not be shared for marketing or secondary use without the data subject’s explicit consent.
Data will not be transferred outside Saudi Arabia unless permitted under the PDPL and applicable regulations.
Data Subject Rights
Under the PDPL, data subjects have the following rights:
Right to be informed of how their data is processed.
Right to access and obtain a copy of their personal data.
Right to rectification and update of personal data.
Right to erasure when the legal or contractual purpose no longer applies.
Right to withdraw consent for processing.
Right to object to processing or use of data for direct marketing.
Right to lodge a complaint with the competent authority (SDAIA).
Contact Information
For inquiries or to exercise any of your data protection rights, you may contact us at: 📧 DPO@walaplus.com
Policy Updates
This policy may be amended from time to time to comply with legal or operational requirements or to clarify processing practices.
Any updates will be published on our official website with the effective date clearly indicated.
WalaPlus is committed to protecting the privacy and security of our customers’ personal data and to complying with the Saudi Personal Data Protection Law (PDPL) and its Executive Regulations.
This policy explains how we collect, process, use, store, and securely delete personal data, as well as the rights of data subjects and how those rights may be exercised.
Data We Collect
We collect certain personal data necessary to deliver our services, including:
Basic Identification Data: Name, gender, date of birth
Contact Data: Email address, phone number
Professional Data: Company name
Financial / Transactional Data: Payment details when using paid services
Technical Data: Device type, operating system, IP address, and cookies
Usage Data: User activity within the platform/app, redemption and discount history, vouchers and coupons used
Optional – Fitness / Activity Data: With your explicit consent, we may collect general fitness data from Apple Health, Google Fit, or Huawei Health to convert steps into points within the WalaLife program.
Methods of Data Collection
Personal data may be collected through the following means:Directly from the user during registration or while using the services.
Automatically through the website or applications (cookies, analytics).
From the user’s employer to provide the service to its employees (and up to five family members).
Legal Basis for Processing (under PDPL)Contractual necessity / Service delivery
To process registration data, operate accounts, calculate points, and process payments.
Legal or regulatory obligation: For retention or disclosure where required by law.
Explicit consent: For optional purposes (e.g., marketing communications or fitness data), which may be withdrawn at any time.
Purpose of Data Collection and Processing
Personal data is collected and processed for the following purposes:Operating and providing WalaPlus services (rewards, discounts, and vouchers).
Managing accounts, notifications, and customer service.
Enhancing user experience and developing products.
Complying with legal and regulatory requirements.
Protecting transactions and preventing fraud.
Sending promotional offers and relevant services.
Any other purpose for which explicit consent is obtained.
Data Storage and Protection
Personal data is stored securely on servers located within the Kingdom of Saudi Arabia.
We apply technical and organizational controls to protect data from unauthorized access, use, alteration, or destruction.
Access to data is limited to authorized employees only, following the Least Privilege Principle.
Retention Period and Secure Disposal
Personal data is retained only for as long as necessary to achieve the purposes for which it was collected, and no longer than permitted by law or contract.
Once the purpose or legal retention period ends, data will be permanently and securely destroyed using technical methods that prevent recovery.
You may request data deletion once the legal or contractual purpose no longer applies; such requests will be processed in accordance with PDPL requirements.
Data Sharing with Third Parties
Data may be shared with authorized service providers (e.g., hosting or payment service providers) to support service delivery, ensuring full compliance with data protection requirements.
Data will not be shared for marketing or secondary use without the data subject’s explicit consent.
Data will not be transferred outside Saudi Arabia unless permitted under the PDPL and applicable regulations.
Data Subject Rights
Under the PDPL, data subjects have the following rights:
Right to be informed of how their data is processed.
Right to access and obtain a copy of their personal data.
Right to rectification and update of personal data.
Right to erasure when the legal or contractual purpose no longer applies.
Right to withdraw consent for processing.
Right to object to processing or use of data for direct marketing.
Right to lodge a complaint with the competent authority (SDAIA).
Contact Information
For inquiries or to exercise any of your data protection rights, you may contact us at: 📧 DPO@walaplus.com
Policy Updates
This policy may be amended from time to time to comply with legal or operational requirements or to clarify processing practices.
Any updates will be published on our official website with the effective date clearly indicated.