Last updated: August 15, 2021

Please read these terms and conditions carefully before using Our Service.

Interpretation and Definitions
Interpretation
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions
For the purposes of these Terms and Conditions:

Affiliate means an entity that controls, is controlled by or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.

Country refers to: Saudi Arabia

Company (referred to as either “the Company”, “We”, “Us” or “Our” in this Agreement) refers to Tharwah Human Resources, Aban Center, 7534 King Abdulaziz Road, Al Ghadeer, Riyadh 13311.

Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.

Service refers to the Website.

Terms and Conditions (also referred as “Terms”) mean these Terms and Conditions that form the entire agreement between You and the Company regarding the use of the Service. This Terms and Conditions agreement has been created with the help of the Terms and Conditions Generator.

Third-party Social Media Service means any services or content (including data, information, products or services) provided by a third-party that may be displayed, included or made available by the Service.

Website refers to Tharwah Human Resources, accessible from https://www.tharwah.net/

You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Acknowledgment
These are the Terms and Conditions governing the use of this Service and the agreement that operates between You and the Company. These Terms and Conditions set out the rights and obligations of all users regarding the use of the Service.

Your access to and use of the Service is conditioned on Your acceptance of and compliance with these Terms and Conditions. These Terms and Conditions apply to all visitors, users and others who access or use the Service.

By accessing or using the Service You agree to be bound by these Terms and Conditions. If You disagree with any part of these Terms and Conditions then You may not access the Service.

You represent that you are over the age of 18. The Company does not permit those under 18 to use the Service.

Your access to and use of the Service is also conditioned on Your acceptance of and compliance with the Privacy Policy of the Company. Our Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your personal information when You use the Application or the Website and tells You about Your privacy rights and how the law protects You. Please read Our Privacy Policy carefully before using Our Service.

Links to Other Websites
Our Service may contain links to third-party web sites or services that are not owned or controlled by the Company.

The Company has no control over, and assumes no responsibility for, the content, privacy policies, or practices of any third party web sites or services. You further acknowledge and agree that the Company shall not be responsible or liable, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with the use of or reliance on any such content, goods or services available on or through any such web sites or services.

We strongly advise You to read the terms and conditions and privacy policies of any third-party web sites or services that You visit.

Termination
We may terminate or suspend Your access immediately, without prior notice or liability, for any reason whatsoever, including without limitation if You breach these Terms and Conditions.

Upon termination, Your right to use the Service will cease immediately.

Limitation of Liability
Notwithstanding any damages that You might incur, the entire liability of the Company and any of its suppliers under any provision of this Terms and Your exclusive remedy for all of the foregoing shall be limited to the amount actually paid by You through the Service or 100 USD if You haven’t purchased anything through the Service.

To the maximum extent permitted by applicable law, in no event shall the Company or its suppliers be liable for any special, incidental, indirect, or consequential damages whatsoever (including, but not limited to, damages for loss of profits, loss of data or other information, for business interruption, for personal injury, loss of privacy arising out of or in any way related to the use of or inability to use the Service, third-party software and/or third-party hardware used with the Service, or otherwise in connection with any provision of this Terms), even if the Company or any supplier has been advised of the possibility of such damages and even if the remedy fails of its essential purpose.

Some states do not allow the exclusion of implied warranties or limitation of liability for incidental or consequential damages, which means that some of the above limitations may not apply. In these states, each party’s liability will be limited to the greatest extent permitted by law.

“AS IS” and “AS AVAILABLE” Disclaimer
The Service is provided to You “AS IS” and “AS AVAILABLE” and with all faults and defects without warranty of any kind. To the maximum extent permitted under applicable law, the Company, on its own behalf and on behalf of its Affiliates and its and their respective licensors and service providers, expressly disclaims all warranties, whether express, implied, statutory or otherwise, with respect to the Service, including all implied warranties of merchantability, fitness for a particular purpose, title and non-infringement, and warranties that may arise out of course of dealing, course of performance, usage or trade practice. Without limitation to the foregoing, the Company provides no warranty or undertaking, and makes no representation of any kind that the Service will meet Your requirements, achieve any intended results, be compatible or work with any other software, applications, systems or services, operate without interruption, meet any performance or reliability standards or be error free or that any errors or defects can or will be corrected.

Without limiting the foregoing, neither the Company nor any of the company’s provider makes any representation or warranty of any kind, express or implied: (i) as to the operation or availability of the Service, or the information, content, and materials or products included thereon; (ii) that the Service will be uninterrupted or error-free; (iii) as to the accuracy, reliability, or currency of any information or content provided through the Service; or (iv) that the Service, its servers, the content, or e-mails sent from or on behalf of the Company are free of viruses, scripts, trojan horses, worms, malware, timebombs or other harmful components.

Some jurisdictions do not allow the exclusion of certain types of warranties or limitations on applicable statutory rights of a consumer, so some or all of the above exclusions and limitations may not apply to You. But in such a case the exclusions and limitations set forth in this section shall be applied to the greatest extent enforceable under applicable law.

Governing Law
The laws of the Country, excluding its conflicts of law rules, shall govern this Terms and Your use of the Service. Your use of the Application may also be subject to other local, state, national, or international laws.

Disputes Resolution
If You have any concern or dispute about the Service, You agree to first try to resolve the dispute informally by contacting the Company.

Severability and Waiver
Severability
If any provision of these Terms is held to be unenforceable or invalid, such provision will be changed and interpreted to accomplish the objectives of such provision to the greatest extent possible under applicable law and the remaining provisions will continue in full force and effect.

Waiver
Except as provided herein, the failure to exercise a right or to require performance of an obligation under this Terms shall not effect a party’s ability to exercise such right or require such performance at any time thereafter nor shall be the waiver of a breach constitute a waiver of any subsequent breach.

Translation Interpretation
These Terms and Conditions may have been translated if We have made them available to You on our Service. You agree that the original English text shall prevail in the case of a dispute.

Changes to These Terms and Conditions
We reserve the right, at Our sole discretion, to modify or replace these Terms at any time. If a revision is material We will make reasonable efforts to provide at least 30 days’ notice prior to any new terms taking effect. What constitutes a material change will be determined at Our sole discretion.

By continuing to access or use Our Service after those revisions become effective, You agree to be bound by the revised terms. If You do not agree to the new terms, in whole or in part, please stop using the website and the Service.

Contact Us
If you have any questions about these Terms and Conditions, You can contact us:

By email: info@tharwah.net

By phone number: 966509909551

Privacy Policy — Public Extended Version (PDPL-Compliant)

Entity: Tharwah Human Capital Company (“Tharwah”/“we”)
Effective Date: 21 September 2025
Last Updated: 21 September 2025

This is a publication-ready version — detailed and clear. We kept a friendly tone and plain explanations, while adding details needed by compliance and audit teams, in line with Saudi Arabia’s PDPL, its implementing regulations, and SDAIA guidance.

Introduction, Scope, and Our Commitment

We wrote this policy so you can simply understand what happens to your personal data when you deal with Tharwah—what we collect, why, how we protect it, and what rights you can exercise.

This policy applies to all our channels and services operated inside or outside the Kingdom of Saudi Arabia when we act as the controller. We are committed to PDPL principles: necessity and proportionality, transparency, accuracy, storage limitation, security, and accountability. This is how we work—from feature design, to choosing a provider, to onboarding a new employee. We review and improve our practices regularly and document them to demonstrate compliance.

What Data We Collect and Why (Purposes & Legal Bases)

When you contact us or use our services, we may need some of your information, but we always ask internally: do we really need it? If yes, we collect only the minimum necessary.

Typically: name and contact details (email and mobile), and address if needed; professional information (employer and job title) when you interact with us as a company or apply for a job; and, during service delivery, transaction records such as orders, contracts, invoicing, and payments—only what the process requires.

Technically, general usage data (IP address, device/browser type, session identifiers, cookies and similar technologies) may pass through our systems to keep the website running smoothly and improve performance without collecting unnecessary detail.

Sometimes more sensitive data (e.g., biometric/health data) may be involved. We only process it under strict controls with a clear legal basis, after risk assessment, with restricted access and additional measures such as encryption and rigorous oversight.

Sources are: you directly via forms/messages; your representative; licensed third parties providing necessary data (e.g., identity verification or payment processing); or publicly available sources within legal limits.

Why we process: to provide services and perform contracts; communicate about your requests and updates; comply with legal and supervisory obligations (accounting, taxes, anti-fraud); improve quality and user experience via general, non-intrusive analytics; and direct marketing with your consent with an easy opt-out.

Each purpose has a legal basis: explicit consent (withdrawable), performance of a contract you requested, legal obligation/public interest, legitimate interest (balanced against your rights), or reliance on publicly available data within its limits.

If a new purpose is incompatible with the original, we pause, inform you, and seek your consent when required—no exceptions.

How We Handle Your Data (Security, Cookies, Design, and Retention)

Protection by design: we ask what data is necessary, whether it can be tokenized or anonymized, and who really needs access. We implement least-privilege access controls, MFA at sensitive points, audit logs, encryption in transit (TLS) and at rest where needed, proactive monitoring and alerts, and regular security testing.

Cookies: used to operate the site (sign-in, session security), remember preferences (language, display), and for general performance measurement. Analytics are aggregated and non-intrusive. Marketing cookies run only with your consent and can be withdrawn with one click. Refusing non-essential cookies will not block access to core services.

Retention: we keep data for the shortest time necessary to achieve the purpose or meet legal/contractual obligations, then delete or de-identify it. Example guidance: support tickets up to 24 months; security logs up to 12 months; contracting/billing documents per applicable regulations. We may extend retention for disputes or legal obligations only as necessary and document decisions for periodic review.

Automated decisions: we do not allow algorithms to make decisions that materially affect you without human oversight. Where automated processing may have a significant impact, we provide human review, a right to object, and plain-language explanations of the general logic.

Children and those lacking capacity: we do not target them with our services. If we inadvertently receive a child’s data, we secure and delete it unless the law requires otherwise, applying special care when relying on a guardian’s consent.

Sharing with Others, International Transfers, and Service Providers

We do not sell your data. Delivering modern services involves specialized parties: cloud hosting, payment gateways, email/notification tools, and advanced support. Before engaging any party, we conduct compliance and security assessments and sign a Data Processing Agreement specifying purpose, data nature, processing/storage locations, sub-processors (if any), security instructions, audit rights, confidentiality, and return/destruction mechanisms. We review performance and compliance periodically and reserve the right to terminate on breach.

We may also share data with official/regulatory bodies when required by law, after verifying the legality and scope of the request. International transfers outside the Kingdom occur only when necessary and with appropriate safeguards: adequacy of the destination, approved safeguards (binding contractual clauses, binding corporate rules, trusted certifications), additional security (encryption and restricted access), and, for recurring/sensitive cases, a transfer risk assessment.

Your Rights and How to Exercise Them — Step by Step

Your basic rights: access to your data and a copy in a reasonable format; correction of errors or completion of missing data; destruction in the cases provided by law; withdraw consent where it is the basis; object to or request restriction of certain processing where applicable; and submit a complaint to the competent authority. We encourage you to start with us for faster resolution.

How to exercise: email privacy@tharwah.net and simply state what you need (e.g., “I want a copy of my account data,” “Please correct my phone number,” “Delete my records from Service X”). We will acknowledge receipt, provide a tracking number, and agree on a secure channel for any ID verification. We handle requests seriously and within reasonable timeframes; if complex or multiple requests arrive, we will let you know early if we need an extension and why. No need to use legal terms—describe your need in your own words and we will map it to the correct legal framework.

Marketing emails always include a working “unsubscribe” link, and you can email us to be removed from all lists. If you doubt a message that resembles ours but isn’t from us, forward it for verification and guidance—security is a shared responsibility.

Retention Period

We retain data for the shortest period necessary to achieve the purposes or as required by law. When no longer needed, we delete or de-identify it irreversibly. We may retain for longer where there is a legal obligation or ongoing dispute, and securely destroy the data once the reason ends.

Your Rights under the PDPL

You have the following rights (with proper identity verification):

• Access/obtain a copy of your data.

• Rectify/update inaccurate or incomplete data.

• Destroy/delete data in the cases provided by law.

• Withdraw consent where consent is the legal basis.

• Object to/restrict certain processing where applicable.

• Complain to the competent authority—while we prefer you contact us first for a quick, amicable solution.

How to exercise your rights? Email privacy@tharwah.net with your request. We aim to respond within 30 days (additional time may be needed with notice in complex cases or where multiple requests are received).

Security Incidents, Changes, and How to Contact Us

We prepare for the worst so it does not happen—and if it does, we minimize its impact. Our incident response plan covers rapid containment, root-cause analysis, mitigation (patching, key rotation, strengthening controls), and structured notification: notifying the competent authority where appropriate, and affected individuals without undue delay when their rights may be impacted—with clear guidance (e.g., change password or enable MFA). After each incident, we review, learn, and update our procedures to prevent recurrence.

This policy may change when laws or our ways of working change. We will update the “Last Updated” date above and highlight any material changes through appropriate channels before they take effect where required. If any sentence is unclear, or you want a print-ready copy or a different language, let us know.

Contact:
Data Protection Section — Tharwah
Email: privacy@tharwah.net
Address: Riyadh, Kingdom of Saudi Arabia (Attn: Data Protection Officer)

In closing: privacy is not just a document you sign, but an experience you live with us confidently. If you feel we can explain something more simply or protect something better, contact us—we are here for you.