1. INTRODUCTION
   Welcome to Mausool (“Mausool”, “we” or “us”), a licensed digital logistics platform facilitating seamless transportation services between Suppliers and Fleet Companies in compliance with the laws and regulations of the Kingdom of Saudi Arabia. Mausool is committed to protecting the privacy and security of data shared by users engaging with our platform.
   
   This Privacy Policy outlines how Mausool collects, processes, stores, and safeguards personal and transactional data in compliance with the Saudi Personal Data Protection Law issued under Royal Decree No. M/19 dated 9/2/1443H (September 16, 2021) and any subsequent amendments thereto (PDPL) and other relevant regulations.
   
   By accessing or using the Mausool platform, individuals or entities engaging with Mausool’s services (“Users“) acknowledge and agree to be bound by this Privacy Policy and Mausool’s Terms of Service.

2. DEFINITIONS
   Account: A unique identifier assigned to a User for accessing Mausool’s services.
   Biometric Data: Unique biological characteristics used for identification, such as fingerprints or facial recognition.
   Personal Data Breach: Breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data.
   Fleet Companies: Logistics service providers fulfilling transportation requests made by Suppliers.
   Personal Data: Any data, regardless of its source or form, that may lead to identifying an individual specifically, or that may directly or indirectly make it possible to identify an individual, including name, personal identification number, addresses, contact numbers, license numbers, records, personal assets, bank and credit card numbers, photos and videos of an individual, and any other data of personal nature.
   Processing: Any operation carried out on Personal Data by any means, whether manual or automated, including collecting, recording, saving, indexing, organizing, formatting, storing, modifying, updating, consolidating, retrieving, using, disclosing, transmitting, publishing, sharing, linking, blocking, erasing and destroying data.
   Suppliers: Businesses or entities that request logistics and transportation services through Mausool.
   Third-Party Services: External service providers integrated with Mausool to facilitate transaction processing, analytics, or compliance.

3. LEGAL BASIS FOR PROCESSING DATA
   Mausool processes personal data based on the following legal grounds, in compliance with Article 5 of PDPL:

• User Consent: Explicit permission obtained for data collection and processing.
• Contractual Necessity: Data required to provide services under the Terms of Service.
• Legal Obligations: Compliance with regulatory requirements and legal mandates.
• Legitimate Business Interests: To enhance platform security, improve user experience, and conduct analytics.

• DATA COLLECTION & PROCESSING
  TYPES OF DATA COLLECTED
  Mausool collects the following types of personal and transactional data:
• Business Contact Information: Name, business entity details, phone number, email address.
• Account & Transaction Information: Platform activity, service history, financial transactions.
• Technical & Usage Data: Device identifiers, IP addresses, session logs.
• Payment & Billing Information: Bank account details, invoicing records, payment status.
• Location Data: GPS tracking for logistics coordination.
• Communication Data: Messages, support logs, and dispute resolution records.

• PURPOSE OF DATA PROCESSING: 
  Mausool processes data based on explicit user consent, contractual necessity, legal obligations, and legitimate business interests following legal grounds as under:

• Service Execution: Managing order requests, processing payments, and ensuring fulfillment.
• Compliance & Security: Preventing fraud, ensuring regulatory adherence, and protecting platform integrity.
• Analytics & Optimization: Improving user experience, analyzing market trends, and enhancing platform efficiency.
• Legal Obligations: Complying with PDPL, responding to legal inquiries, and resolving disputes.

• DATA COLLECTION METHODS
  Mausool collects personal data through various means, including:

• Direct interactions: Users provide data when creating accounts or using the platform.
• Automated technologies: Cookies, tracking tools, and system logs.
• Third-party sources: Data obtained from affiliates, service providers, and regulatory bodies.

5. DATA USE AND PURPOSE
   Mausool processes and uses your Personal Data for the following purposes:

• Identity verification and account management.
• Service provision and logistics coordination.
• Regulatory compliance and dispute resolution.
• User experience enhancement.
• Transaction processing and fraud prevention.
• Service-related notifications and platform updates.
• Marketing communications (with user consent).
• Comply with legal obligations and regulatory requirements.
• Security monitoring and risk mitigation.
  
  Mausool may collect and process information related to User interactions, including messages, instructions, and feedback. This data may be compiled and shared with trusted service providers, analytics firms, auditors, legal advisors, and affiliated entities to facilitate service improvements and compliance requirements.
  
  Mausool may disclose Personal Data without prior consent when required by law, regulatory authorities, or court orders in good faith to comply with legal obligations or protect Mausool’s legal interests.

6. DATA SHARING & THIRD-PARTY DISCLOSURES
   Mausool does not sell Personal Data. Mausool may share data with:

• Payment processors and financial institutions for transaction verification.
• Regulatory authorities to comply with legal obligations.
• Affiliates and service providers to facilitate operations, logistics, and platform maintenance.
• Analytics providers to improve user experience and platform performance.
  
  All third-party service providers are required to implement strict confidentiality and data security measures. In certain cases, Personal Data may be disclosed without explicit user consent if required by law, legal proceedings, or to protect Mausool’s rights and enforce policies.

7. TRANSFERS OF PERSONAL DATA
   In compliance with PDPL, Mausool ensures that Personal Data transferred outside Saudi Arabia is protected by:

• Government-approved cross-border transfer mechanisms.
• Adequate protection assessment for international jurisdictions.
• Data processing agreements ensuring compliance with PDPL requirements.
  
  By submitting Personal Data, Users agree to such transfers, storage, and processing in compliance with applicable data protection laws. Mausool ensures that all cross-border data transfers are conducted in accordance with relevant legal and contractual safeguards.

8. DATA SECURITY MEASURES
   Mausool implements industry-standard security measures, including:

• Data Encryption ensuring data protection during transmission and storage.
• Access Controls restricting Data access to authorized personnel only.
• Multi-Factor Authentication (MFZ) for account security.
• Incident Response Plan to manage data breaches in accordance with the law.
  
  

9. USER RIGHTS UNDER PDPL
   Users have the rights to:

• Access and review personal data held by Mausool.
• Correct inaccurate or incomplete data.
• Request deletion or restriction of processing under specific conditions.
• Object to processing, including direct marketing.
• Request data portability to another service provider.
  
  Requests should be submitted to Mausool’s Compliance Team along with identity verification.

10. DATA RETENTION POLICY
    Mausool retains Personal Data only as long as necessary for:
    1. Legal compliance and regulatory requirements.
    2. Resolving disputes and enforcing agreements.
    3. Security and operational continuity.
    
    Upon expiry of the retention period, Personal Data is securely deleted or anonymized.

11. BUSINESS CONTINUITY & DATA TRANSFER IN CORPORATE TRANSACTIONS
    In the event of a merger, acquisition, restructuring, or sale of assets, user data may be transferred to the successor entity while maintaining the same privacy protections.

12. DISPUTE RESOLUTION & GOVERNING LAW
    Privacy-related disputes shall be resolved through the following process:
    Internal Complaint Handling: Users may submit concerns to Mausool’s Compliance Team.
    Mediation: If internal resolution is unsuccessful, disputes proceed to mediation.
    Legal Action: Any unresolved disputes shall be adjudicated under Saudi Arabian law.

13. AMENDMENTS & POLICY UPDATES
    Mausool reserves the right to update this Privacy Policy to reflect regulatory changes or operational needs. Users will be notified of significant updates via email or platform notifications. Continued use of the platform constitutes acceptance of the revised policy.

14. CONTACT INFORMATION
    If you have any questions about this Privacy Policy, how we process Personal Data, or wish to exercise your rights, you may contact us at:
    Mausool Compliance Team Email: info@mausool.com
    Phone: +966501856924

This Privacy Policy was last updated on 10/02/2025 and is governed by the laws of the Kingdom of Saudi Arabia.