LEGAL
Legal & Compliance
How Nova collects, protects and processes data — and the terms that govern use of the platform.
Privacy Policy
Nova Platform · KSANo matching sections.
01 Introduction
Nova Platform is committed to safeguarding the privacy of its users and protecting their Personal Data. The Platform undertakes to maintain the confidentiality of such data and to process it in accordance with the applicable laws and regulations of the Kingdom of Saudi Arabia. This Privacy Policy ("Policy") sets out the terms governing the processing of the User's Personal Data, whether provided directly by the User or collected through the Website, and explains the User's rights in relation to such Personal Data as guaranteed under the applicable laws and regulations.
02 Personal Data to Be Collected
Nova Platform may collect the following categories of Personal Data, depending on the nature of its interactions with the User:
Including, but not limited to, the User’s name, date of birth, national identification number, residency number, and passport number.
Including, but not limited to, the User’s national address, mobile phone number, and email address.
Including, but not limited to, the User’s employer, job title, employee number, and educational information.
Including, but not limited to, IP addresses, device identifiers, and Cookies.
Any other Personal Data necessary to fulfill the purpose for which the Personal Data is collected, provide services, process requests, or for any other related purposes.
03 Methods of Collecting Personal Data and Purposes of Collection
Personal Data may be collected directly from the User through the completion of electronic forms, filling in blank fields, selecting options, and other methods through which the User provides Nova Platform with Personal Data.
Personal Data may be collected indirectly through the User’s employer in accordance with the applicable laws and regulations, and through cookies when visiting the Website.
The purpose of collecting Personal Data is to use it for conducting and managing the psychometric assessment process, preparing analytical reports to support the User or the employer in making professional or developmental decisions through the tools and products made available by Nova Platform, as well as to improve the User experience and enhance and develop measurement tools by using Personal Data after anonymization.
The email address and contact number shared by the User with Nova Platform upon registration or while using Nova Platform may be used to manage the User’s account, provide services, and communicate with the User regarding their requests, inquiries, or technical support matters. They may also be used to send notifications related to services, updates, offers, and marketing and promotional communications, in accordance with legitimate purposes and the applicable laws and regulations. The User may unsubscribe from marketing or promotional communications at any time through the designated link provided in electronic messages, through the account settings, or by contacting Nova Platform. Such unsubscribing shall not affect service-related communications associated with the User’s account or requests.
Nova Platform may collect the User’s Personal Data in accordance with the applicable laws and regulations. The legal basis for collecting Personal Data is the consent of the Personal Data Subject. Nova Platform may collect the User’s Personal Data from publicly available sources and may also collect Personal Data to achieve legitimate interests, without prejudice to the rights and interests of the User, in accordance with the applicable laws and regulations.
04 Disclosure of Personal Data
Nova Platform does not disclose the User’s Personal Data except in the cases permitted under applicable laws and regulations for the disclosure of Personal Data, as set out below:
Where the User’s explicit consent has been obtained for the purposes of providing services, including the disclosure of Personal Data to third-party service providers.
Where Personal Data is collected from a publicly available source.
Where Personal Data is disclosed upon the request of a public authority for purposes related to public interest, security, compliance with another law, or meeting judicial requirements.
Where Personal Data is disclosed for the purposes of protecting public health or public safety or safeguarding an individual or specific individuals and their health.
Where Personal Data is disclosed in a manner that does not allow the identification of the Personal Data Subject or any other individual.
Where non-sensitive Personal Data is disclosed to pursue a legitimate interest of Nova Platform, without prejudice to the rights and interests of the User.
Nova Platform does not transfer the User’s Personal Data outside the Kingdom of Saudi Arabia except in accordance with the applicable regulatory requirements and after implementing adequate safeguards for the protection of such data, where required.
05 Storage, Retention, and Disposal of Personal Data
Personal Data is stored within the Kingdom of Saudi Arabia on the Company’s servers at its headquarters in a secure manner. The Company is committed to implementing appropriate security measures, including encryption of data during the sharing or storage of Personal Data, access controls based on assigned permissions, electronic audit logs, periodic security testing, and internal access management policies.
Nova Platform retains Personal Data for as long as necessary to fulfill the purpose for which it was collected, unless a longer retention period is required to comply with the applicable laws and regulations. All copies relating to Personal Data shall be destroyed after the purpose of collection has been fulfilled or in accordance with the applicable laws and regulations, using secure methods and techniques, such as data overwriting, secure erasure (SE), data removal, or shredding and destruction.
06 Rights of Personal Data Subjects
The User has the following rights in relation to their Personal Data:
The Personal Data Subject has the right to know the methods of collecting Personal Data, the legal basis for collecting and processing Personal Data, and the purpose of collecting Personal Data.
The Personal Data Subject has the right to access their Personal Data and review the Personal Data available with Nova Platform.
The Personal Data Subject has the right to obtain a copy of the Personal Data available with Nova Platform in a readable and clear format.
The Data Subject has the right to request the correction, completion, or updating of the Personal Data available with Nova Platform.
The Data Subject has the right to request the destruction of Personal Data, without prejudice to the applicable regulatory requirements.
The Data Subject has the right to withdraw their consent to the processing of their Personal Data at any time, unless there are legal grounds that require otherwise.
Nova Platform reviews and processes all requests submitted by Data Subjects within a period not exceeding (30) days from the date of receiving the request. The User has the right to submit a complaint to the Saudi Data and Artificial Intelligence Authority in accordance with Clause (7).
Except as provided for under applicable laws and regulations, the Data Subject shall not be required to pay any fees for exercising these rights.
07 Address of the Saudi Data and Artificial Intelligence Authority
Kingdom of Saudi Arabia – RiyadhWebsite: (sdaia.gov.sa) (dgp.sdaia.gov.sa)
08 Cookies
Nova Platform uses Cookies and similar tracking technologies to automatically collect certain technical information, including the Internet Protocol (IP) address, browser type, and operating system, for the purposes of operating the website, improving performance and user experience, maintaining preferences, analyzing usage, and developing services. The User’s prior consent to the use of Cookies is obtained through an interactive options window that enables the User to manage their Cookie-related preferences and consents.
09 General Terms
This Policy shall be governed by the applicable laws and regulations in force in the Kingdom of Saudi Arabia. In the event of any dispute arising out of or in connection with this Policy, the competent courts in the city of Riyadh shall have jurisdiction.
In the event of any ambiguity, uncertainty, or lack of clarity in any provision or clause of this Policy, the Company shall have the sole authority to interpret such provision or clause, in accordance with the applicable laws and regulations in the Kingdom of Saudi Arabia.
If any provision set out in this Policy is deemed invalid or unenforceable, such invalidity or unenforceability shall not affect the remaining provisions. If any part of a provision of this Policy is deemed invalid, such part or provision shall remain enforceable to the extent that it does not include the invalidated portion.
10 Consent Statement
I acknowledge that I have reviewed the Privacy Policy and accepted all provisions contained therein relating to the collection and processing of Personal Data in accordance with the applicable laws and regulations. I consent to the Privacy Policy and to the collection and processing of my Personal Data for the purposes specified therein.