Privacy Policy
1. Introduction
Effective Date: July 27, 2025Metal Testing Gemological Laboratories (MTGL) is committed to protecting the privacy and security of your personal data in accordance with the laws and regulations of the Kingdom of Saudi Arabia, particularly the Personal Data Protection Law (PDPL) issued by Royal Decree No. M/19, and other relevant electronic and online regulations. This Privacy Policy outlines how MTGL collects, uses, stores, protects, and discloses your personal data when you interact with our services, website, or physical laboratory.
By using MTGL's services or website, you explicitly consent to the collection and processing of your personal data as described in this Privacy Policy. If you do not agree with the terms of this policy, please refrain from using our services or website.
2. Definitions
Personal Data: Any data, regardless of its form, that directly or indirectly identifies a specific individual, or makes them identifiable.Processing: Any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
Data Subject: The identified or identifiable natural person to whom the personal data relates.
Controller: MTGL, which determines the purposes and means of the processing of personal data.
Competent Authority: The Saudi Data & AI Authority (SDAIA), responsible for overseeing data protection in the Kingdom of Saudi Arabia.
3. Information We Collect
We collect personal data to provide our gemological and metal testing services, improve your experience, and comply with legal obligations. The types of personal data we may collect include:Contact Information: Name, address, email address, phone number, and other similar contact details.
Identification Information: National ID/Iqama details, passport information (where required for specific services or legal compliance).
Transaction Information: Details related to services you request, payment information, and transaction history.
Gemstone/Metal Information: Details about the items submitted for testing, including their nature, origin (if provided), and any other relevant information necessary for the testing and certification process. Please note that this data primarily pertains to the item itself, but may be linked to your personal data as the owner/submitter.
Usage Data: Information about how you access and use our website, such as your IP address, browser type, operating system, pages viewed, and access times. This helps us improve our website and services.
Communication Data: Records of your correspondence and communications with us (e.g., emails, chat logs).
4. How We Collect Your Information
We collect personal data through various means, including:Directly from You: When you submit items for testing, create an account on our website, fill out forms, communicate with us via phone, email, or in person.
Automated Technologies: Through cookies and similar tracking technologies when you visit our website (for more details, see our Cookie Policy, if applicable).
From Third Parties: In limited circumstances, and in accordance with applicable laws, we may receive information about you from third-party service providers or partners, where necessary for service delivery or legal compliance.
5. How We Use Your Information
MTGL processes your personal data only for lawful, specific, and legitimate purposes. We use your information for the following purposes:To Provide Services: To process your requests for gemological and metal testing services, issue reports and certificates, and fulfill our contractual obligations.
Communication: To communicate with you regarding your service requests, provide updates, and respond to your inquiries.
Service Improvement: To analyze usage patterns, improve our services, website, and customer experience.
Billing and Payments: To process payments for services rendered.
Legal Compliance: To comply with applicable laws, regulations, and governmental requests within the Kingdom of Saudi Arabia, including those related to anti-money laundering and consumer protection.
Security: To maintain the security and integrity of our systems and protect against fraud or unauthorized access.
Marketing (with consent): To send you promotional materials, newsletters, or information about our services that may be of interest to you, but only if you have provided your explicit consent to receive such communications. You will always have the option to opt-out.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for legal, accounting, or reporting requirements. Once your personal data is no longer required for these purposes, we will securely destroy it in accordance with MTGL's data retention policies and Saudi Arabian regulations.7. Disclosure of Your Personal Data
MTGL respects your privacy and will not sell, rent, or lease your personal data to third parties for their direct marketing purposes without your explicit consent. We may disclose your personal data in the following situations and strictly in accordance with Saudi Arabian laws:With Your Consent: We may disclose your personal data for any other purpose with your explicit consent.
Service Providers: We may share your data with trusted third-party service providers who assist us in operating our business and providing our services (e.g., payment processors, IT support, shipping companies). These providers are bound by strict confidentiality agreements and are only permitted to use your data for the purposes of providing services to MTGL.
Legal Obligations: When required by law, regulation, judicial order, or governmental authority, including the Competent Authority (SDAIA), to comply with a legal obligation, prevent fraud, protect our rights or property, or ensure the safety of our users or the public.
Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will ensure that the acquiring entity adheres to this Privacy Policy or provides a new policy that offers equivalent protection.
8. Data Security
MTGL implements robust administrative, technical, and physical security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. We regularly review and update our security practices to ensure the highest level of protection, in compliance with the National Cybersecurity Authority's regulations and other relevant national standards.9. Your Rights as a Data Subject
In accordance with the Personal Data Protection Law (PDPL) in Saudi Arabia, you have the following rights regarding your personal data held by MTGL:Right to Be Informed: You have the right to be informed about the legal basis and purpose of the collection and processing of your personal data. This Privacy Policy serves to fulfill this right.
Right of Access: You have the right to request access to your personal data held by MTGL and obtain a copy thereof in a clear and accessible format.
Right to Request Correction: You have the right to request the correction or updating of inaccurate or incomplete personal data we hold about you.
Right to Request Deletion: You have the right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent and there is no other legal basis for processing.
Right to Withdraw Consent: You have the right to withdraw your consent to the processing of your personal data at any time, unless there are legal grounds that require otherwise. Please note that withdrawing consent may affect your ability to access certain services.
Right to Lodge a Complaint: You have the right to lodge a complaint with the Competent Authority (SDAIA) if you believe your data protection rights have been violated.
To exercise any of these rights, please contact us using the details provided in Section 10 of this policy. We will respond to your request in accordance with applicable laws and regulations.
10. International Data Transfers
If MTGL transfers personal data outside the Kingdom of Saudi Arabia, we will ensure that such transfers comply with the Regulations on Personal Data Transfers outside the Kingdom and other relevant Saudi Arabian laws, ensuring an adequate level of protection for your personal data.11. Changes to This Privacy Policy
MTGL may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post any updates on this page with a revised "Effective Date." We encourage you to review this policy periodically to stay informed about how we are protecting your personal data. Where appropriate and feasible, we will notify you of significant changes.12. Contact Us
If you have any questions, comments, or requests regarding this Privacy Policy or our data practices, or if you wish to exercise your data subject rights, please contact us at:Metal Testing Gemological Laboratories (MTGL)
RHFA7358, Alolaya, King Fahad District, Riyadh, Saudi Arabia
Email: [email protected]
Phone: +966-555200683
Website: www.mtgl.com.sa