Compliance with Personal Data Protection Law (PDPL) in Saudi Arabia

Privacy Policy, Data Confidentiality & IP Protection

At iVitaGlobal, we uphold the highest standards of data privacy and pharmaceutical formulation confidentiality under SDAIA and SFDA regulations.

Last Updated: October 2026 Regulatory Oversight: SDAIA & SFDA Enforceable B2B Mutual NDA Agreements

1. Introduction & Scope

Scope & General Principles

This policy governs all digital services, digital catalog systems, contract manufacturing solutions, regulatory dossier submissions, and WhatsApp procurement workflows managed by iVitaGlobal.iVitaGlobal.

Drafted under Saudi Personal Data Protection Law (Royal Decree M/19 and amendments M/148) supervised by SDAIA.

Corporate Commitment:We ensure all data processing rests on lawful bases, proportionate and limited strictly to authorized commercial objectives.

2. Categories of Data Collected

Categories of Personal & Commercial Data Collected

We collect solely necessary information to fulfill supply orders, ensure pharmaceutical regulatory compliance, and operate cold-chain logistics:

  • Identity & Contact Data:Full name, job title, company/pharmacy name, phone number, WhatsApp contact, and corporate email.
  • Commercial Facility & Licensing Data (B2B):Commercial Registration, VAT ID, and pharmacy operating licenses issued by MoH or SFDA.
  • Order & Logistics Data:Ordered SKUs, quantities, carton packaging configurations, authorized warehouse addresses, and cold-chain delivery schedules.
  • Technical & Analytical Data:IP address, browser type, catalog pages visited, and product preferences to optimize supply efficiency.

3. Formulation Confidentiality & Intellectual Property (IP)

Confidentiality, Formula Protection & Non-Disclosure Agreements (NDA)

Confidentiality of advanced delivery systems (ODF, Cap-in-Cap, Liposomal) forms the bedrock of our contract manufacturing partnerships:

Strict NDA Guarantee:
All dossiers, stability studies, and proprietary formulation sheets are bound by legally enforceable non-disclosure agreements.
  • Exclusive IP Rights:Formulations engineered for client private brands remain the sole intellectual property of the client upon contract execution.
  • Dossier Encryption:All artworks, dossiers, and specs are encrypted with AES-256 with restricted access for authorized regulatory consultants.
  • Pre-Engagement NDA:Partners may execute a legally certified Mutual NDA before disclosing technical specifications.

4. Legal Bases & Processing Purposes

Legal Basis & Processing Purposes

نعالج بياناتك وفقاً للأسس النظامية المنصوص عليها في المادة (5) و (6) من نظام حماية البيانات الشخصية:

  • Contract Execution & Supply Fulfillment:Processing purchase orders, confirming wholesale discounts, and generating official tax invoices.
  • Statutory & Regulatory Compliance:Fulfilling ZATCA e-invoicing compliance and validating official commercial registrations.
  • Cold-Chain Logistics Management:Coordinating delivery data with approved cold-chain logistics providers to safeguard temperature stability.
  • Legitimate Interests & Advisory:Responding via WhatsApp, providing updated catalogs, and notifying partners of batch availability.

5. Third-Party Sharing & Regulatory Disclosure

Regulatory Disclosure & Authorized Third Parties

iVitaGlobal never sells or monetizes partner data. Disclosure is strictly confined to:

  • Government Regulatory Agencies:Submitting technical registration dossiers to SFDA and MoHAP for clearance.
  • Judicial & Regulatory Bodies:Under mandatory legal warrants or official judicial requests in KSA.
  • Approved Operating Partners:Cold-chain freight companies and certified domestic cloud infrastructure providers.

6. Data Storage, Retention & Cyber Defense

Storage Location, Retention Period & Cybersecurity Controls

نطبق ضوابط الأمن السيبراني الأساسية (ECC) الصادرة عن الهيئة الوطنية للأمن السيبراني (NCA):

  • Data Residency:Data is hosted in sovereign, highly secure data centers located inside Saudi Arabia.
  • Encryption & Safeguards:End-to-end encryption in transit and at rest using TLS 1.3 and AES-256 standards.
  • Retention Period:Invoices and transaction logs are preserved for 5 years per ZATCA mandates, then permanently purged.

7. Cookie & Local Storage Policy

Cookies & Local Storage Usage

يستخدم موقعنا تقنيات تخزين محلية وملفات تعريف ارتباط محددة لتحسين تجربة التصفح وحفظ اختياراتك:

  • Strictly Necessary Cookies:Enables the interactive quotation drawer to persist selections in local storage.
  • Preference Cookies:Remembers language preferences and unit/carton view modes.
  • Analytics Cookies:Measures catalog traffic and high-demand formulations to enhance manufacturing scheduling.

يمكنك تعطيل أو مسح ملفات تعريف الارتباط في أي وقت من خلال إعدادات متصفحك دون التأثير على تصفح المعلومات العامة في الموقع.

8. Data Subject Rights (PDPL)

Your Rights Under the Saudi Personal Data Protection Law (PDPL)

يمنحك نظام حماية البيانات الشخصية حقوقاً كاملة ومباشرة، ويسرنا تيسير ممارستها في أي وقت:

  • Right to be Informed:Understand the purpose and lawful basis of processing.
  • Right of Access:Request a readable copy of your stored commercial profile.
  • Right to Rectification:Correct inaccurate data or update company details.
  • Right to Erasure:Request permanent deletion when data is no longer legally required.
  • Right to Withdraw Consent:Opt out of marketing notifications and wholesale alerts at any time.

We commit to fulfilling data subject requests within30 daysfrom receipt date, subject to statutory extensions for complex requests.

9. Data Protection Officer (DPO)

Data Protection Officer Contact Information

إذا كانت لديك أي استفسارات تتعلق بهذه السياسة، أو ترغب في ممارسة حقوقك المقررة نظامياً، يمكنك التواصل مع وحدة حماية البيانات والامتثال القانوني لدى iVitaGlobal:

Oversight Authority:Compliance & DPO Office — iVitaGlobal
Dedicated Email: info@ivitaglobal.com/info@ivitaglobal.com
Legal Affairs WhatsApp: +966 50 000 0000
Official Address:King Fahd Road, Al Olaya, Riyadh, Saudi Arabia
Operating Hours:Sunday to Thursday: 9:00 AM – 5:00 PM (Makkah Time)

يحق لك أيضاً تقديم شكوى إلى الجهة المختصة بالمملكة (الهيئة السعودية للبيانات والذكاء الاصطناعي – سدايا) في حال عدم التوصل إلى حل مرضي لمطالبتك.

Would you like to execute a Mutual Non-Disclosure Agreement (NDA)?

نرحب بكافة الشركاء والعلامات التجارية الراغبة في تصنيع مكملاتهم الخاصة. نوفر مسودات NDA رسمية ومصدقة لضمان حماية فكرتك وتركيبتك قبل بدء النقاشات الفنية.

Request Mutual NDA via WhatsApp
📋

Contact Us

Leave your details and our team will get back to you shortly.

Current Inquiry

Product added successfully