Privacy Policy

1. Introduction

The Ministry of Industry and Mineral Resources (referred to as "the Ministry", "MIM", "we", "our") is responsible for regulating and developing the industrial and mining sectors in the Kingdom of Saudi Arabia. It aims to achieve sustainable development in line with Vision 2030. its duties include setting policies and regulation, encouraging investment, and supporting innovation. The Ministry provides services such as licensing, providing technical support, data, and organizing events, targeting investors, entrepreneurs, academia and professionals in both sectors. The Ministry is committed to safeguarding users’ data and information, maintaining their confidentiality and privacy, and using them only to deliver the required services in accordance with the applicable terms and conditions in the Kingdom of Saudi Arabia.

2. Definitions

2.1. Personal Data / Personally Identifiable Information (PII)

Personal Data refers to any information that can directly or indirectly identify you, such as your name, national identity number, contact details, license numbers, personal property details, bank account and credit card numbers, still or moving images of an individual, and other identifiers of a personal nature.

2.2. Data Processing

Any actions on personally identifiable information, including but not limited to (collecting, recording, storing, indexing, modifying, sharing or destroying).

2.3. Data Subject

The individual whose personal data is collected, processed or stored.

3. What personal data do we collect?

The Ministry may collect the following types of personal data, depending on the nature of the user's interaction. Type of personal data and examples of it:

3.1. Identification information

Name, date of birth, Saudi ID number, and passport number.

3.2. Contact information

Address, email address, and phone number.

3.3. Business-related information

Company name, registration details, ownership information, or permit/license details.

3.4. Employment and education information

Job title, employer, educational history, or military service records.

3.5. Device information

IP addresses, device identifiers, cookies, and technical characteristics.

3.6. Interaction data

Communications, complaints, and feedback.

3.7. Other data

Information necessary to process orders, monitor compliance, or meet legal obligations,such as environmental or safety data.

4. What is the purpose of data collection?

Fulfilling legal and national regulatory obligations
Providing Ministry services, for example - to process applications for licenses, permits or other services.
Communication and Customer Support - To respond to inquiries, comments, or requests
Improving services and user experience

5. How does MIM collect your personal data?

We collect personal data through the following methods:

5.1. Directly from you

When you submit applications, forms, inquiries, or communicate with us by phone, email, or our online platforms.

5.2. From other sources

From government agencies, regulatory bodies, and private organizations in accordance with the requirements of applicable laws and regulations.

5.3. Automatically

Through our website and digital services, using cookies and similar technologies to collect technical information such as IP addresses, browser types, and usage patterns.

6. What is the legal basis for data collection and processing?

We collect and process your personal data based on your consent and in accordance with the principles outlined in the Personal Data Protection Law, issued by Royal Decree No. (M/19) dated 02/09/1443 AH, and amended by Royal Decree No. (M/148) dated 05/09/1444 AH. You may withdraw your consent to the collection and processing of your personal data at any time, unless another legal basis for processing applies. To do so, please contact us at: info@mim.gov.sa

7. What measures does MIM take to secure your data?

In our commitment to safeguarding your data, MIM employs robust security measures, including xyz encryption, strict access controls to limit data access to authorized personnel, comprehensive employee training, and regular privacy and security assessments to ensure resilience against unauthorized access, loss, or disclosure. MIM adheres to the regulations set by the National Cybersecurity Authority (NCA) and other relevant standards to ensure the confidentiality, integrity, and availability of your data. Additionally, we incorporate privacy by design principles into our systems and processes to protect your personal data by default.

8. How does MIM handle data sharing and transfer?

The Ministry may share your personal data with third parties that assist in its operations, subject to strict confidentiality agreements and adherence to data protection standards. Additionally, your data may be disclosed to government or judicial authorities when required by law or legal justification.

9. What are your rights regarding the processing of your personal data?

9.1. Right to Be Informed

You have the right to be informed about the legal basis and purpose of the collection of your personal data.

9.2. Right to Access

You have the right to access your personal data held by MIM, in accordance with the rules and procedures set out in the applicable regulations, without prejudice to the provisions of Article (9) of the Personal Data Protection Law.

9.3. Right to Obtain

You have the right to request a copy of your personal data held by MIM in a readable and clear format, subject to the controls and procedures specified by the regulations.

9.4. Right to Rectification

You have the right to request correction, completion, or updating of your personal data held by MIM.

9.5. Right to Erasure

You have the right to request the destruction of your personal data held by MIM when such data is no longer needed, without prejudice to the provisions of Article (18) of the Personal Data Protection Law.

9.6. Right to Withdraw Consent

You have the right to withdraw your consent for the processing of your personal data at any time, unless there are legitimate grounds for processing that override this.

10. How to file a complaint or objection?

You can submit your complaint through one of the following communication channels:

Email address

info@mim.gov.sa

Phone number

199001

11. How long is your data retained?

MIM retains your personal data only for as long as necessary to fulfil the purposes for which it was collected (such as providing you with services) or as required by law. Retention periods may vary depending on the type of data and applicable legal or regulatory obligations. Once the retention period expires, your data will be securely deleted or anonymized to protect your privacy.

12. Policy Updates

The Ministry reserves the right to update or amend this Privacy Policy at any time. Any changes will take effect immediately upon being posted on this website. Users are encouraged to review this policy periodically to stay informed of any updates.

13. Contact Us

Email

info@mim.gov.sa - Sunday to Thursday - 8:00 AM to 4:00 PM

Telephonic call

199001 - Sunday to Thursday - 8:00 AM to 4:00 PM

Virtual Visit

Communicate directly via video call - 08:00 AM to 04:00 PM

Partner Communication Account

Via X platform - We serve you 24 hours a day

14. Contact MIM’s Data Management Office (DMO)

You can contact MIM as a data controller of your personal data via our Data Management Office. The data privacy (/protection) officer is a part of our data management office.

E-mail

dmo@mim.gov.sa - Sunday to Thursday - 08:00 AM to 04:00 PM

Letter

Clearly marked for the attention of the Data Management Office, via this Address: Ministry of Industry and Mineral resources, King Fahd Street, Al-Muhammadiyah District, 12363 Riyadh