This Privacy Policy (“Policy”) explains how NAVER Arabia Regional Headquarter(“we”, “us”, or “our”) collects, uses, processes, and protects Personal Data in connection with the use of our corporate website. In this Policy, “you” means the relevant Data Subject. This Policy is intended to inform Data Subjects of their rights and our Personal Data processing practices in accordance with the Saudi Personal Data Protection Law and its Implementing Regulations.

​

1. Entity Name and Activity

NAVER Arabia Regional Headquarter operates our corporate website to provide users with various information and receive and manage partnership inquiries from business partners and interested parties in the Kingdom of Saudi Arabia and the wider region. We operate various communication channels to protect Data Subjects' Personal Data and respond promptly to related inquiries. If you have any questions or comments about this Policy or the processing of your Personal Data, please contact our dedicated department using the contact details below:

​

Contact Details​

Involved Department/Team: RHQ Management

Address: 4F, Spring Towers B, 4124 Prince Muhammed Ibn Salman Ibn Abdulaziz Street, Ar Rabie Distict, Riyadh

Phone Number: 0118046618

E-mail: dl_naver_arabia_rhq@navercorp.com

Unified National Number: 7043636567

Website: https://naverarabiarhq.com/

​

2. Legal Basis for Collection and Processing of Personal Data

Prioritizing the rights and interests of Data Subjects, we collect and process Personal Data only where a valid legal basis applies under the Saudi Personal Data Protection Law issued pursuant to Royal Decree No. (M/19) dated 09/02/1443H, as amended from time to time (“PDPL”) and its Implementing Regulations. The applicable legal basis depends on the specific purpose of processing and may include one or more of the following:

​

• Consent: Where the Data Subject consents in accordance with the PDPL and its Implementing Regulations. Where Explicit Consent is required, we will obtain Explicit Consent as defined in the PDPL and the Implementing Regulations. You can withdraw your consent at any time without affecting processing operations carried out based on other legal bases. To withdraw consent, you can contact RHQ Management at dl_naver_arabia_rhq@navercorp.com (or the appointed DPO once confirmed).

• Fulfillment of a Contractual Obligation: Where collection and processing is necessary for the performance of a contract to which the Data Subject is a party.

• Protection of Vital Interests: Where processing is necessary to prevent harm to the Data Subject or to protect their vital, life-saving interests.

• Achieving Public Interest: Where collection and processing is necessary to protect public health, public safety, or the life and health of individuals.

• Compliance with a Legal or Regulatory Obligation: Where collection and processing is necessary for compliance with a legal or regulatory obligation imposed on the Controller under applicable laws, regulations, or orders issued by competent authorities.

• Achieving Legitimate Interests: Where collection and processing is necessary to achieve our legitimate interests (provided that it does not prejudice the rights and interests of the Data Subject, and no Sensitive Data is to be processed).

​

3. Personal Data to Be Collected, Methods, and Purposes

Your Personal Data shall be processed securely and solely for the purposes that have been notified to you and on the legal basis identified in this Policy. Except where a legal exception applies pursuant to Article 10 of the PDPL, your Personal Data shall not be further processed in a manner that is incompatible with the original purpose of collection. The categories of Personal Data collected, the methods of collection, and the purposes of processing are set out below.

​

① Data to Be Collected Directly from the Data Subject

When you submit an inquiry through our website, we collect the following information: 1) Mandatory: your first and last name and contact number. Failure to provide this data will not allow you to submit your inquiry. 2) Optional: company email address, company name, sector, country, and the content of your inquiry. You may submit your inquiry without providing this data.

​

② Data Collected Automatically

When you access or use our website, we may automatically collect certain information about your device and usage, including IP address, browser type, operating system, referring URLs, access times, and pages viewed, and we may use cookies and similar technologies to operate and improve our website, analyze usage, and enhance user experience; you may manage your cookie preferences through your browser settings.

​

Use of Cookies

Our website uses cookies and similar technologies. A cookie is a file placed on your device when you visit a website. The cookies used on our website are limited to strictly necessary technical cookies — specifically, basic access log information comprising time of access, IP address, and browser information. These cookies are used solely for the following purposes:

• to ensure the proper functioning, security, and stability of the website;

• to monitor server activity and manage network connections; and

• to analyze aggregate and anonymized usage patterns for the purpose of improving the performance and user experience of the website.

Our website does not use advertising cookies, behavioural tracking cookies, or any cookies that track you across third-party websites. We do not share cookie-collected data with third parties for their own independent purposes.

​

Legal Basis

The automatic collection of the above data, including through cookies, is carried out on the basis of our legitimate interests in operating, securing, and improving our corporate website, where such interests do not prejudice the rights and interests of Data Subjects and do not involve the processing of Sensitive Data.

​

Managing Your Cookie Preferences

You may manage, restrict, or disable cookies through your browser settings at any time. Please note that restricting or disabling cookies may affect the performance and functionality of certain features of the website. For guidance on managing cookies, please refer to the help or settings section of your browser.

​

4. Personal Data Disclosure

We may disclose Personal Data to third parties only where necessary to review and respond to your inquiries, or as permitted or required under applicable laws and regulations. In all cases, only the minimum amount of Personal Data necessary to achieve the relevant purpose is shared.

The specific details and bases for disclosing Personal Data to third parties are as follows.

​

• NAVER group companies : Your first and last name, contact number, inquiries, and where applicable, additional information such as company email, company name, sector, and country

​

We may disclose your first and last name, contact number, company email, company name, sector, country, and inquiries to our group companies — including but not limited to NAVER Corporation, NAVER Cloud Corporation, NAVER LABS which are based in the Republic of Korea, as well as NAVER Innovation, which is located in the Kingdom of Saudi Arabia, on an as-needed (occasional) basis, and NAVER Innovation, for the purpose of reviewing and responding to your inquiry. In addition, NAVER Cloud Corporation processes personal data on behalf of NAVER Arabia Regional Headquarters for the operation and maintenance of the corporate website.

​

5. Transfer and Disclosure of Personal Data Outside the Kingdom

We may transfer or disclose your Personal Data outside the Kingdom of Saudi Arabia where necessary to review and respond to your inquiries, or for operational processes essential to our activities (including centralized processing), and only in accordance with the applicable conditions and requirements prescribed by the PDPL and the Regulation on Personal Data Transfer Outside the Kingdom. Where required, we will assess the level of protection in the recipient country or organization and implement appropriate safeguards (such as standard contractual clauses or binding common rules) and security measures to ensure an adequate level of protection for Personal Data. We will also limit such transfer or disclosure to the minimum amount of Personal Data necessary to achieve the relevant purpose.

Specifically, the contents and bases for transferring or disclosing Personal Data outside the Kingdom are as follows.

6. Personal Data Storage, Retention Period, and Destruction

· Personal Data Storage

our Personal Data is securely processed and stored on servers operated by NAVER Cloud Corporation, a cloud computing service provider, located in the Republic of Korea until your inquiry has been fully processed. All Personal Data is protected and strictly managed using appropriate technical and organizational security measures, including encryption of data in transit and at rest, access controls limited to authorised personnel, pseudonymization where applicable, and regular security assessments. The level of security applied is commensurate with the sensitivity and volume of Personal Data processed.

· Personal Data Destruction

We will destroy the Personal Data without delay after the purpose is achieved or after storing it for the retention period stated in [3. Personal Data to Be Collected, Methods, and Purposes] in the following manner.]

1) Electronic file format: Permanently deleted so that access to or recovery of the data is not possible by any technical means.

2) Printed and written format: Physically destroyed by shredding or incineration so that the information cannot be identified or reconstructed.

​

Notwithstanding any specified retention periods, the Company may retain Personal Data for longer periods where required under applicable laws and regulations or where necessary for the establishment, exercise, or defense of legal rights or claims. Any such retention shall be limited to the minimum data necessary for those purposes and in accordance with applicable laws and regulations.

​

7. Personal Data Subjects Rights

Protecting your privacy is our priority. In accordance with the PDPL and its Implementing Regulations, we inform you of your rights as a Data Subject and how to exercise them. We will respond to your requests to exercise your rights promptly and transparently.

​

• Right to Be Informed

You have the right to be informed of the legal basis and the purpose for the collection and processing of your Personal Data, the retention period (or the criteria used to determine it), and the entities to which the Personal Data will be disclosed or transferred (including outside the Kingdom). Your Personal Data will not be further processed in a manner incompatible with the purpose of collection except as required or permitted under the PDPL. You may obtain the relevant details by reviewing this Privacy Policy or by contacting us using the contact information provided in [1. Entity Name and Activity].

• Right of Access to Your Personal Data

You have the right to request access to your Personal Data by contacting us using the contact information provided in [1. Entity Name and Activity].

• Right to Request Access to Your Personal Data (Provision)

You have the right to request your information in a readable and clear format consistent with the records, and to receive it as an electronic file or paper document by contacting us using the contact information provided in [1. Entity Name and Activity].

• Right to Request Correction of Your Personal Data

You have the right to request correction of your Personal Data if it is incorrect, complete any incomplete or insufficient information, and update it to the latest status.

You may request correction of your Personal Data if it is incorrect by contacting us using the contact information provided in [1. Entity Name and Activity].

We will review and update your Personal Data within 30 days of receiving your request and will notify you of the outcome via the contact details you provided in your inquiry.

• Right to Request Destruction of Your Personal Data

You have the right to request the destruction (erasure) of your Personal Data when it is no longer necessary because the purpose of collection has been achieved. You may request destruction of your Personal Data by contacting us using the contact information provided in [1. Entity Name and Activity].

• Right to Withdraw Your Consent for Processing Your Personal Data

You have the right to withdraw your consent for Personal Data processing at any time, unless we are permitted or required to process the Personal Data under another legal basis. You can withdraw consent by submitting a request by contacting us using the contact information provided in [1. Entity Name and Activity]. We will cease the relevant consent-based processing without undue delay after receiving your request. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal or any processing carried out under another applicable legal basis. Where applicable, we will take reasonable steps to notify recipients to whom the Personal Data was disclosed based on consent and request deletion or destruction without undue delay.

• Right to file a complaint to the Competent Authority

You have the right to submit any complaint related to the application of the provisions of the Law to the Competent Authority.

• Right to claim compensation

You have the right to claim compensation for material or moral damage arising from any violation stipulated in the Law and its Implementing Regulations.

​

Unless otherwise stipulated by the law, you will not be required to pay any fees in return for exercising these rights. You will receive a response within 30 days of submitting a request.

However, if the matter is complex and requests are numerous, the processing period may be extended by up to an additional 30 days, in which case we will notify you in advance.

​

8. Complaint or Objection Filing Mechanism

If you have any concerns regarding the protection of your Personal Data, or if you believe we are not complying with the relevant laws, you can file a complaint using the contact details provided in [1. Entity Name and Activity] .

​

If you are not satisfied with how we process your complaint, or if we fail to respond within 30 days (with prior notice if an extension is needed), you may file a complaint or request an investigation to the Competent Authority below.

​

• Entity: Saudi Data and Artificial Intelligence Authority (SDAIA), Riyadh, Kingdom of Saudi Arabia

• Website URL: sdaia.gov.sa

• Complaint Portal: National Data Governance Platform (DGP)

• Website URL: dgp.sdaia.gov.sa

​

9. Date of Last Update (Update Record)

This Privacy Policy was last updated on June 11, 2026.

You can review the detailed update history by selecting the desired version from the top right corner.