Privacy notice

The Islamic University of Madinah welcomes you to its website. This Privacy Notice aims to help you understand why personal data is requested when using the University’s services, and to inform you of your responsibilities and rights toward such data.

By accessing the Islamic University of Madinah website or using the services of its portal, you acknowledge and agree to this Privacy Notice.

The University confirms the protection of beneficiaries’ data from loss, misuse, change, or unauthorized access by applying the necessary administrative controls and technical measures in accordance with relevant laws, regulations, and policies, and in line with the standards and recommendations issued by the National Data Management Office.

The laws of the Kingdom of Saudi Arabia shall apply exclusively to all matters related to disputes that may arise from the use of this portal. The courts of the Kingdom of Saudi Arabia shall have exclusive jurisdiction to consider such disputes.

The University collects the necessary personal data depending on the service the beneficiary wishes to use or obtain.

• Account data.
• Contact data.
• Technical data.
• Financial data.
• Educational data.
• Marital status data.
• Other data required to provide the requested service.

The Islamic University of Madinah collects and processes certain personal data directly or indirectly through various methods.

Direct methods include:

• Registering through the official channels of the Islamic University of Madinah.
• Using the admission portal, mobile applications, or the various products and services provided by the University.
• Communicating with the University through customer service channels visually, in writing, or by audio.
• Questionnaires and electronic forms.

Indirect methods include:

• Data provided by third parties.
• Cookies and similar technologies.

The collection and processing of personal data is necessary to perform services that achieve public interest. The purposes include:

• Raising the level of service performance and development.
• Improving beneficiaries’ experience.
• Ensuring the continuity of service delivery with the required quality.
• Monitoring and detecting violations of the terms of use of the University’s electronic portal.
• Solving and addressing inquiries and complaints submitted by beneficiaries.
• Authenticating users’ identity when registering in University services.
• Meeting public and private legal and regulatory requirements.

In accordance with the Data Sharing Policy issued by the National Data Management Office, the University will only share personal data with non-government entities if they are authorized to perform specific government services or after obtaining the user’s consent.

The University may share necessary personal data with government agencies for specific purposes based on a legal basis or a justified practical need aimed at achieving public interest.

When sharing personal data, the University ensures that sharing takes place through a secure and reliable environment and in accordance with relevant laws, regulations, and policies. Additional safeguards may include signing a data sharing agreement with other parties under specific terms and conditions compatible with data sharing principles.

In accordance with applicable regulations, personal data will be stored and processed securely within the geographical borders of the Kingdom of Saudi Arabia to maintain national digital sovereignty. Data will not be transferred or processed outside the Kingdom except in cases permitted by applicable regulations.

The Islamic University confirms that personal data security is one of its top priorities. Access to personal data is limited to authorized persons who need to view it for service-related purposes.

The University implements technical and organizational measures, including:

1. Limiting personal data collection to what is needed and applying minimum privilege.
2. Obtaining the data subject’s implicit or explicit consent where required.
3. Training data protection employees on the importance of data protection.
4. Restricting disclosure of personal data to third parties except as permitted and required.
5. Complying with policies and regulations issued by the National Data Management Office.
6. Applying appropriate data protection measures, such as encryption.
7. Taking all possible measures when dealing with third parties to maintain personal data security.

All rights are guaranteed under the Personal Data Protection Law issued by Royal Decree No. M/19 dated 9/2/1443 AH, subject to the exceptions and exemptions set by the competent authorities in the Kingdom of Saudi Arabia and the policies issued by the National Data Management Office.

This Privacy Notice applies only to the Islamic University of Madinah portal and its related domain services. If you visit another website through a link on the University’s website, you should review the privacy notice of that website to understand its information security and privacy practices.

Please note that this Privacy Notice may be amended and updated periodically. Updates will be published on this page, and users are encouraged to check regularly for any changes to the Islamic University of Madinah Privacy Notice.

If you have any inquiry, complaint, or request regarding your rights in relation to the processing of your personal data, or about what is stated in this Privacy Notice, you may contact the Data Management Office at the Islamic University of Madinah.