The Small and Medium Enterprises General Authority “Monsha’at” was established in 2016 by the Cabinet Resolution NO. (301) on the date of 11\7\1437H. It operates as an independent legal authority with financial and administrative autonomy and is organizationally affiliated with the Ministry of Commerce.
The Small and Medium Enterprises General Authority "Monsha’at" recognizes the importance of your privacy and data protection and places the confidentiality of the data of its users and visitors at the top of its priorities. Therefore, we are committed to preserving the confidentiality and privacy of sensitive data and protecting the rights of all users. We have prepared this notice specifically to clarify the following:
Term 1: Consent to the Privacy Notice
Your consent to the Privacy Notice means your agreement to the privacy controls and conditions that apply to all services, programs, and initiatives provided by "Monsha’at" on its official website or affiliated official websites, including any ongoing modifications according to the needs and nature of the work.
Term 2: The Data That Will be Collected
Name
ID Number
Mobile Number
Transaction Data
Enterprise’s Information
Transaction data refers to data that describes any event that occurs during communication with "Monsha’at", for example: the time of entry to the website and the pages you visited.
Term 3: Way of Collecting Data
1. Collecting the personal data provided by the data subject through website registration.
2. Collecting your personal data indirectly through cookies gathered during your visit to the website.
3. Collecting any information, you provide through your browser, or when contacting us via phone, email, or social media, whether through the “Monsha’at” website or its official affiliated platforms.
4. Collecting and using all data received from other entities that serve enterprises and entrepreneurs, including but not limited to:
• Ministry of Commerce
• Ministry of Human Resources and Social Development
• Ministry of Municipal and Rural Affairs
• Ministry of Investment
• Ministry of Finance
• Small and Medium Enterprises Bank
• Zakat, Tax and Customs Authority
• General Organization for Social Insurance
• Human Resources Development Fund
• SPL
• Saudi Exports
• Bayan for Credit Bureau
• Chambers of Commerce
• Saudi Business Center
• Business Accelerators and Incubators
• Startup Company Studios
• Other government and private entities that support or provide services to enterprises or entrepreneurs.
"Monsha’at" is committed to the key principles and general rules for the protection of personal data with regard to your personal data, as well as the key principles and general rules for data sharing related to your personal data, your enterprise, and your transactions.
Term 4: Use of personal data and purpose of collection
Your personal data is collected, used, and processed for regulatory, improvement, and development purposes, including but not limited to:
• Fulfilling the required information for applying to services, programs, and initiatives offered by “Monsha’at” through its official website and affiliated platforms.
• Conducting surveys, interviews, and gathering opinions.
• Sending invitations to participate in workshops, training sessions, and conferences.
• Marketing investment opportunities or services, programs, and initiatives that support enterprises.
• Resolving and addressing inquiries or complaints you may have and enhancing the user experience across all government communication channels.
• Meeting regulatory or legal requirements.
• Analyzing data and issuing internal reports to meet operational needs, such as statistical reports.
• Serving, understanding, studying, and developing the small and medium enterprises sector.
Term 5: Storage and Destruction of Personal Data
The data will be stored within the Kingdom of Saudi Arabia on the servers of the Small and Medium Enterprises General Authority “Monsha’at”. It will be securely destroyed once the purpose for which it was collected has been fulfilled, in a manner that prevents any further access. Monsha’at may retain the data after the original purpose has ended, provided that all identifiers that could lead to the specific data subject have been removed.
Term 6: Legal Basis for Collecting and Processing Personal Data
The Authority relies on three legal bases for collecting and processing personal data: the data subject’s consent, the fulfillment of contractual or legal obligations, and the pursuit of legitimate public interests in accordance with applicable regulations.
Term 7: Rights of the Data Subject
First: The Right to Know: The data subject has the right to know how we collect their data, the legal basis for collecting and processing it, how it is processed, stored, and destroyed, and with whom it will be shared. Full details are available in this Privacy Policy, or by contacting us through the channels provided in Term 11.
Second: The Right to Access Personal Data: The data subject has the right to request a copy of their personal data by contacting the email address provided in Term 11. The data will be provided free of charge within [seven working days] via email.
Third: Right to Rectification of Personal Data: The data subject has the right to request the correction of their personal data if they believe it is inaccurate, incorrect, or incomplete. This can be done by contacting the email address provided in Term 11. The data will be reviewed and updated within [seven working days], and the data subject will be notified via email once the update is complete.
Fourth: Right to Erasure of Personal Data: The data subject has the right to request the erasure of their personal data under certain circumstances, unless there is a legal provision specifying a retention period or contractual requirements necessitating its preservation.
Fifth: Right to Withdraw Consent to Data Processing: The data subject may withdraw their consent to the processing of their personal data at any time, unless there are legitimate purposes that require otherwise.
For more details on the processing of your personal data and how to exercise your rights, you can refer to the Personal Data Protection Policy issued by the National Data Management Office.
Term 8: Sharing / Exchanging Personal Data
The following data related to your establishment will be published publicly as open data to support and facilitate access for entrepreneurs, investors, and researchers to your establishment, in addition to promoting the concept of transparency for the end user:
• Enterprise Name
• Commercial Registration Number
• Registration Status
• Commercial Entity Type
• Registration Issue Date
• Registration Expiry Date
• Enterprise Size according to the unified “Monsha’at” classification
• Enterprise Phone Number
• Enterprise Activity
• Enterprise Address
• Region
• City
• P.O. Box
• Postal Code
• Website
Other data not listed above (such as number of employees, revenue amount) will not be shared with non-governmental entities or the public, except in the form of statistical and aggregated data only, without referring specifically to your establishment’s data (e.g., number of Saudi employees in the retail sector in Riyadh).
None of these data will be exchanged, circulated, published, or sold to any party other than government entities without your prior consent, and access to the information will only be granted to qualified personnel providing government services.
Term 9: External Links
Links to other websites are provided on the "Monsha’at" site in consideration of user needs. However, "Monsha’at" is not responsible for any content on those external websites, nor for any person’s use of them, their proper functioning, or any issues that may arise from their use. The user is fully responsible for all actions taken while using any websites accessed through these links on this site.
Term 10: Exercising the Rights of the Data Subject
The data subject has the right to request access to, correction of, or deletion of their personal data by contacting us via email at: PDP@monshaat.gov.sa
Term 11: Personal Data Protection Officer
Name: Data Management Office at "Monsha’at"
Email: PDP@monshaat.gov.sa
Term 12: Complaints and Inquiries
If you have any questions regarding the Privacy Notice, need assistance, or wish to file a complaint, please contact us via:
Phone: 8003018888
Email: Info@monshaat.gov.sa
Expected Response Time:
Social media platforms: Within 24 hours
Call Center: Saturday to Thursday, 8:00 AM to 10:00 PM
Term 13: Changes to the Privacy Notice
The Privacy Notice was last updated on February 5, 2025.
The Authority reserves the right to make amendments to the Privacy Notice from time to time without prior notice. Your continued use of the website following such changes constitutes acceptance of the updated notice. Therefore, please review the Privacy Notice periodically to stay informed of the latest version.
General Provisions
• The Authority is committed to the provisions of the National Data Governance Policy regarding data sharing and protection of personal data issued by the Saudi Data and Artificial Intelligence Authority (SDAIA).
• The laws of the Kingdom of Saudi Arabia alone shall be the applicable laws in all matters related to disputes that may arise from the use of this website.
• The courts of the Kingdom of Saudi Arabia shall have exclusive jurisdiction to hear and adjudicate such disputes.
Personal Data Protection Regulations
National data governance policy
Fundamental principles of personal data protection
.svg.png){kind=logo}
Comments
Add comment