This privacy policy aims to explain how First Mills Company will collect, use, and disclose your personal data in accordance with relevant laws and regulations, specifically the Personal Data Protection Law issued by Royal Decree No. (M/19) dated 09/02/1443H corresponding to 16/9/2021, Amended by Royal Decree No. (M/148) dated 09/05/1444 H corresponding to 03/27/2023.

For applying this policy, the following terms and phrases, wherever they appear in this policy, shall have the meanings indicated opposite each of them. The terms and phrases retain their meanings whether mentioned in singular or plural form.

  • Account: A unique account created by you or for you to access the website or parts of it.
  • Company: Refers to First Mills Company (“First Mills”), Jeddah, Saudi Arabia (referred to as “the company”, “we”, or “our” for the purposes of this policy).
  • Cookies: Small text files that websites store on your computer, mobile phone, or tablet when you visit our website. They contain information about your browsing records on the website and other uses.
  • Country: Kingdom of Saudi Arabia.
  • Device: Any device capable of accessing the internet such as a computer, mobile phone, or tablet.
  • Personal Data: All data, regardless of source / form, that can lead to identifying an individual specifically or make it possible to identify them directly or indirectly. This includes name, personal identification number, addresses, contact numbers, license numbers, personal records, bank account numbers, credit card numbers, static or moving images of the individual, and other personal data.
  • Website: the company’s website.
  • Service Provider: Any natural/ legal person who processes personal data for the benefit of the company or on its behalf. This includes third parties /employees appointed by the company to operate the website or business, provide services, act on behalf of the company, provide services related to the website, business, assist the company in analyzing website data.
  • Social Media Services: Refers to any site or communication tool that allows the user to log in or create an account for the purpose of using the service.
  • Usage Data: Data collected automatically, either generated using the website or from the website’s infrastructure (such as the duration of a page visit).
  • You: Refers to the individual or user of the website, the company, or any other legal entity accessing or using the website on behalf of the individual, as applicable.

2.1 Information We Collect

We collect information about you in three ways: directly from your input, from third parties, and through automated technologies.

2.1.1 Data You Provide to Us

When you use the website, we may collect information about you (“personal data”). This includes information you provided or was provided on your behalf, such as:

  • Contact data, such as your name, email address, postal address, social media, region, postal code, city, contact number, and any other personal data specified in the applicable laws and regulations of the country.
  • When applying for a job, we will collect employment history, nationality, date of birth, and other relevant information to enable us to conduct a screening process for the applicant.
  • Account login credentials, such as username and password, password hints, and similar security information.
  • Other registration and profile information, such as job title, education, professional background, qualifications, and photo.
  • Comments and feedback, and other information you provide to us, including search queries and questions you submit.
  • Interests and preferred communication methods, including preferred language.

The company may allow you from time to time to create an account for the purpose of using social media services provided by third parties. If you decide to register, or allow us to access external social media, we may collect personal data that you have already shared on social media sites, such as name, email address, and other activities associated with the account. You also have the option to share additional information with the company through the external social media service provider. If you choose to provide information and personal data during the registration process, you give the company permission to use, share, and store this information and personal data in accordance with this privacy policy.

The server may automatically collect information about how you and your device interact with the service, including:

  • Computer and Device Information, this includes IP address, browser type and version, operating system, and other applications installed on your device, as well as mobile operating system, device identifier, technical identifiers, error reports, and performance data.
  • Usage Data, this includes features you used, settings you chose, URL, date and time, referring and exit pages, search terms used, and pages visited or searched for in the service.
  • Educational Services, this includes course units and test questions you view, answer, or complete.
  • Location Services, we may collect information about the region, city, or village where the device is located to provide content tailored to your geographic location.

Additionally, when you access the website through your mobile device, we may automatically collect certain information, including but not limited to, the type of mobile device used, mobile device identifier, IP address, mobile operating system, browser type, unique device identifiers, and other diagnostic data.

Depending on how you interact with us, we may use your personal data for the following purposes:

  • Job Application: To process your job application.
  • Managing Your Requests: To manage your electronic requests.
  • Business Purposes: For business communications, billing or purchase orders, product tracking, order processing, payment or receipt of payments for goods and/or services, marketing activities, product purchases, inventory, equipment, supplier due diligence, customer checks, licensing agreements, non-disclosure agreements, etc.
  • Providing and Managing Our Website and Business.
  • Legal Compliance: To comply with our legal obligations, resolve disputes, and enforce our agreements or as permitted by law.
  • Communicating with You: To contact you via email, phone, SMS, or other traditional or electronic means, such as mobile app notifications regarding updates or informational communications related to contracted jobs, products, or services, including security updates when necessary or required.
  • Providing News and Offers: To provide you with news, special offers, and general information about products or services or other offers we provide that are similar to those you have already purchased or inquired about unless you have opted not to receive such information.
  • Business Operations: To evaluate or conduct a merger, liquidation, restructuring, reorganization, dissolution, or other sale or transfer of some or all our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, where personal data held by us about our service users is among the transferred assets.
  • Other Uses: The use of your data for other purposes, such as data analysis, determining the effectiveness of our promotions.

We may disclose your personal information in (for example) the following cases:

  • With Service Providers: We may share your personal data with service providers to monitor and analyze the use of our services, and to communicate with you.
  • For Business Operations: We may share your personal data during negotiations for any merger, sale of company assets, financing, or acquisition of all or part of our business by another company.
  • With Affiliates: We may share your information with our affiliates, ensuring that they respect this privacy policy.
  • With Business Partners: We may share your personal data with business partners to offer you certain products, services, or promotional offers.
  • With Other Users: If you interact with other users or register through a third-party social media service, your contacts on the third-party social media service may see your name, profile, pictures, and description of your activity. Similarly, other users will be able to view descriptions of your activity, communicate with you, and view your profile.
  • With Your Consent: We may disclose your personal data for any other purposes not mentioned above after obtaining your consent. We may also disclose your personal data if we believe in good faith that such disclosure is necessary in the following cases:
    • To comply with any applicable law, regulation, legal process, or other legal obligation.
    • To detect, prevent, and address security issues, fraud, or technical problems.
    • To protect our rights, property, safety, or the safety of our users, employees, or others.

We have requested your permission to share your personal data, and you have agreed to.

We store and process your personal data in various jurisdictions, including within Saudi Arabia. Your personal data may be shared and processed by us or our affiliates outside the country where the personal data was collected. The laws governing the processing of this information, including when it is classified as “personal data,” in these countries may be less stringent than the laws in your country. It may also be processed by employees working outside your country. We will take all reasonably necessary steps required by applicable data protection laws to ensure that your information is handled securely and in accordance with this policy and applicable law.

We retain your personal data before making it anonymous or destroying it as long as necessary to provide the service and complete the transactions you requested, or for other essential purposes such as complying with our legal obligations, maintaining business and financial records, resolving disputes, maintaining security, detecting and preventing fraud and abuse, and enforcing our agreements. Additionally, we will retain data used for internal analysis purposes. Data used generally will be retained for a short period, except when used to enhance security or improve the functionality of our service, or when we are legally obligated to retain this data for longer periods.

Subject to applicable laws and regulations, your personal data will be destroyed or anonymized once the purpose for which it was collected is no longer applicable. We will destroy it in accordance with our internal policy or anonymize it. If you wish for early destruction, please contact us via the email: [email protected]

We are committed to ensuring that your information is secure. To prevent unauthorized access or disclosure, we have put in place appropriate physical, electronic, and administrative procedures to safeguard and secure the information we collect online.

As the owner of personal data specified in the Personal Data Protection Law, you have the following rights according to Article 4 of the Personal Data Protection Law:

  • Right to Know: This includes being informed of the legal or practical justification for collecting your personal data, the purpose of collection, and ensuring that your data is not processed later in a manner inconsistent with the purpose of collection or in situations not specified in Article 10 of the law.
  • Right to Access: This includes accessing your personal data available with us as a controller, viewing it, obtaining a clear copy of it that matches the content of the records without any material cost - as determined by the regulations - and without prejudice to Article 9 of the Personal Data Protection Law.
  • Right to Request Correction: This includes requesting the correction, completion, or updating of your personal data available with us.
  • Right to Request Destruction: This includes requesting the destruction of your personal data available with us that is no longer needed, without prejudice to Article 18 of the law.
  • Other Rights: Other rights specified in the law, as clarified by the regulations and Article (20)

You may object to the processing of your personal data when collected and used for legitimate reasons. For this purpose, you can contact us in writing at the email address provided. Please note that the inability to process your data may, for example, hinder your access to the website.

We may update the privacy policy from time to time. Any changes will be posted on this page with an updated review date. You are advised to review this privacy policy periodically for any changes. Changes to this privacy policy are effective when posted on this page. If you have any questions, comments, complaints, or wish to exercise your rights as a data owner regarding our privacy policy and the processing of your personal data through our websites, you can contact our information security directly via email [email protected] and/or through the Contact Us page. We will respond to your request in accordance with applicable laws. To protect your privacy and security, we may ask you to verify your identity.

If you have any questions about these privacy-related, please contact us at: [email protected]