Privacy Notice

Introduction

Omar Kassem Alesayi Marketing Company (OKAM), together with its affiliates and subsidiaries, is committed to protecting your personal data in accordance with applicable laws in the Kingdom of Saudi Arabia, including the Personal Data Protection Law (“KSA PDPL”) and its Implementing Regulations.

This Privacy Notice explains how we collect, use, share, retain, and transfer your personal data when you interact with our website or engage with us in recruitment activities. It also outlines your rights in relation to your personal data. This Notice should be read together with our Cookie Policy.

About OKAM

Omar Kassem Alesayi Marketing Company (OKAM), established in 1979 as a joint venture between the Omar Kassem Alesayi Group and HSA Group (Frimex Investment), is a leading FMCG marketing and distribution company in Saudi Arabia. Specializing in the import and distribution of high-quality branded food products across multiple categories.

What Personal Data Do We Collect?

Personal data refers to any information about an individual from which that person can be identified.

Website Visitors: OKAM may collect the following types of personal data, directly or indirectly, when you interact with our website or contact us:

• Personal identifiers: such as your email, phone number, job position, first name, last name, or any other personal data you submit through our website.
• Location information: such as location data provided by a mobile device or other device interacting with our website, or linked to your IP address, where permitted by law.
• Essential browser data and trackers: such as your IP address and other website tracking information through “essential cookies.”
• Optional browser data and trackers: such as IP address, browser/device type and version, operating system, referral source, visit duration, pages viewed, and website navigation paths through “optional cookies.”

Applicants and Candidates: For Recruitment Activities, OKAM may collect:

• Recruitment information: including personal identifiers (name, date of birth, nationality), contact information (address, email, phone), and professional information (CVs, educational history, work experience, skills and references).
• Digital platform interactions: such as name, address, and contact number.

Categories of Personal Data

Legal Basis for Processing

• Legal Obligation: To comply with Saudi laws, including PDPL and other regulatory bodies.
• Contractual Necessity: To fulfill our contractual obligations.
• Legitimate Interests: To improve our operations, ensure safety, and provide efficient customer service.
• Consent: For specific purposes such as marketing communications or sharing information with third parties (where required).
• Vital or Public Interests: To protect safety or comply with public authority requests.

How We Collect Your Personal Data

Information you give us — directly from you when you request or purchase products, services or information from us; register with us; call our service number; or otherwise interact with us. Also when you submit information by filling in online forms or corresponding with us.

Information collected automatically — indirectly via certain technologies, such as cookies, APIs, when you visit our websites and applications, or through analytics tools.

Personal Data Usage

At OKAM, we process personal data collected through our website based on lawful grounds, including your consent, contractual obligations, and legitimate interests.

• With your consent: to respond to inquiries, provide customer service, send marketing communications and handle recruitment activities.
• Contractual obligations: to manage accounts, requests, and recruitment steps.
• Legitimate interests: to protect our business and website, deliver relevant content, ensure security, improve services, engage on social media, detect fraud, and evaluate recruitment processes.

You can withdraw consent at any time; however, declining to provide personal data may limit the services we can offer.

Who We Share Your Personal Data With?

• Financial Institutions: For payment and salary.
• Insurance Companies: For insurance management.
• Service Providers: IT hosting, CRM, logistics, and marketing partners under strict confidentiality agreements.
• Regulatory or Government Authorities: Upon lawful request or when required for licensing, taxation, or compliance.
• Legal and Professional Advisors: For compliance, audit, or dispute resolution.
• Law Enforcement: When required for accident investigation or fraud prevention.
• With Your Consent: For any additional sharing beyond the above cases.

All third parties are required to handle your data in compliance with applicable privacy and security standards.

Security and Retention

We will retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law. When personal data is no longer required, we securely dispose of or anonymize it. We apply appropriate security measures; however, no system is completely secure.

Disclosures of Your Personal Data

We may disclose your personal data to: affiliates and subsidiaries; service providers; third-party platforms (when you direct us); and authorities when required by law.

How We Keep Your Data Secure

OKAM implements advanced administrative, technical, and physical safeguards, including:

• Data encryption and access controls.
• Regular vulnerability assessments and monitoring.
• Secure storage within Saudi Arabia (or approved regions with equivalent protection).
• Employee training on data protection and privacy.
• Strict confidentiality obligations for all service providers.

International Data Transfers

If your personal data needs to be shared outside the Kingdom, it will only be done in accordance with PDPL requirements. We ensure that any such transfer is made to countries with adequate data protection laws or through approved contractual safeguards ensuring equivalent privacy protection.

Your Rights

• Right to Be Informed: about how your data is collected and used.
• Right to Access: your personal data.
• Right to Request a Copy: of your personal data.
• Right to Correct: inaccurate or incomplete data.
• Right to Delete: your personal data when no longer required or unlawfully processed.
• Right to Withdraw Consent: at any time.
• Right to File a Complaint: with the Saudi Data and Artificial Intelligence Authority (SDAIA) if you believe your rights have been violated.

We will process all valid requests within 30 days, extendable once with notification if additional time is required.

Protection of Minors and Legally Incompetent Persons

Our services are intended for adults and legally competent individuals. If we process data of minors, it must be provided or approved by a parent or legal guardian.

Third Party Links

We are not responsible for third-party websites. Please review their privacy notices.

Your Responsibilities

You are responsible for ensuring the accuracy of the information you provide and for informing us promptly of any changes. If you share personal data of other individuals, you must ensure that they are aware of this Privacy Notice.

Social Media and Public Platforms

We advise you not to share sensitive or personal information on our social media pages (Instagram, X, YouTube, etc.), as these platforms are publicly accessible.

Updates to This Privacy Notice

We may update this Privacy Notice from time to time to reflect regulatory or operational changes. Updated versions will be published on our website, and your continued use of our services will constitute acceptance of any revisions.

Last updated: February 2026

Contact Us

If you have any questions, requests, or concerns regarding this Privacy Notice or your data rights, please contact our Data Protection Officer (DPO) at: _TechnovalDPO@technoval.com