Privacy Policy, Data Confidentiality & IP Protection
At iVitaGlobal, we uphold the highest standards of data privacy and pharmaceutical formulation confidentiality under SDAIA and SFDA regulations.
1. Introduction & Scope
Scope & General Principles
This policy governs all digital services, digital catalog systems, contract manufacturing solutions, regulatory dossier submissions, and WhatsApp procurement workflows managed by iVitaGlobal.iVitaGlobal.
Drafted under Saudi Personal Data Protection Law (Royal Decree M/19 and amendments M/148) supervised by SDAIA.
2. Categories of Data Collected
Categories of Personal & Commercial Data Collected
We collect solely necessary information to fulfill supply orders, ensure pharmaceutical regulatory compliance, and operate cold-chain logistics:
- Identity & Contact Data:Full name, job title, company/pharmacy name, phone number, WhatsApp contact, and corporate email.
- Commercial Facility & Licensing Data (B2B):Commercial Registration, VAT ID, and pharmacy operating licenses issued by MoH or SFDA.
- Order & Logistics Data:Ordered SKUs, quantities, carton packaging configurations, authorized warehouse addresses, and cold-chain delivery schedules.
- Technical & Analytical Data:IP address, browser type, catalog pages visited, and product preferences to optimize supply efficiency.
3. Formulation Confidentiality & Intellectual Property (IP)
Confidentiality, Formula Protection & Non-Disclosure Agreements (NDA)
Confidentiality of advanced delivery systems (ODF, Cap-in-Cap, Liposomal) forms the bedrock of our contract manufacturing partnerships:
All dossiers, stability studies, and proprietary formulation sheets are bound by legally enforceable non-disclosure agreements.
- Exclusive IP Rights:Formulations engineered for client private brands remain the sole intellectual property of the client upon contract execution.
- Dossier Encryption:All artworks, dossiers, and specs are encrypted with AES-256 with restricted access for authorized regulatory consultants.
- Pre-Engagement NDA:Partners may execute a legally certified Mutual NDA before disclosing technical specifications.
4. Legal Bases & Processing Purposes
Legal Basis & Processing Purposes
نعالج بياناتك وفقاً للأسس النظامية المنصوص عليها في المادة (5) و (6) من نظام حماية البيانات الشخصية:
- Contract Execution & Supply Fulfillment:Processing purchase orders, confirming wholesale discounts, and generating official tax invoices.
- Statutory & Regulatory Compliance:Fulfilling ZATCA e-invoicing compliance and validating official commercial registrations.
- Cold-Chain Logistics Management:Coordinating delivery data with approved cold-chain logistics providers to safeguard temperature stability.
- Legitimate Interests & Advisory:Responding via WhatsApp, providing updated catalogs, and notifying partners of batch availability.
5. Third-Party Sharing & Regulatory Disclosure
Regulatory Disclosure & Authorized Third Parties
iVitaGlobal never sells or monetizes partner data. Disclosure is strictly confined to:
- Government Regulatory Agencies:Submitting technical registration dossiers to SFDA and MoHAP for clearance.
- Judicial & Regulatory Bodies:Under mandatory legal warrants or official judicial requests in KSA.
- Approved Operating Partners:Cold-chain freight companies and certified domestic cloud infrastructure providers.
6. Data Storage, Retention & Cyber Defense
Storage Location, Retention Period & Cybersecurity Controls
نطبق ضوابط الأمن السيبراني الأساسية (ECC) الصادرة عن الهيئة الوطنية للأمن السيبراني (NCA):
- Data Residency:Data is hosted in sovereign, highly secure data centers located inside Saudi Arabia.
- Encryption & Safeguards:End-to-end encryption in transit and at rest using TLS 1.3 and AES-256 standards.
- Retention Period:Invoices and transaction logs are preserved for 5 years per ZATCA mandates, then permanently purged.
7. Cookie & Local Storage Policy
Cookies & Local Storage Usage
يستخدم موقعنا تقنيات تخزين محلية وملفات تعريف ارتباط محددة لتحسين تجربة التصفح وحفظ اختياراتك:
- Strictly Necessary Cookies:Enables the interactive quotation drawer to persist selections in local storage.
- Preference Cookies:Remembers language preferences and unit/carton view modes.
- Analytics Cookies:Measures catalog traffic and high-demand formulations to enhance manufacturing scheduling.
يمكنك تعطيل أو مسح ملفات تعريف الارتباط في أي وقت من خلال إعدادات متصفحك دون التأثير على تصفح المعلومات العامة في الموقع.
8. Data Subject Rights (PDPL)
Your Rights Under the Saudi Personal Data Protection Law (PDPL)
يمنحك نظام حماية البيانات الشخصية حقوقاً كاملة ومباشرة، ويسرنا تيسير ممارستها في أي وقت:
- Right to be Informed:Understand the purpose and lawful basis of processing.
- Right of Access:Request a readable copy of your stored commercial profile.
- Right to Rectification:Correct inaccurate data or update company details.
- Right to Erasure:Request permanent deletion when data is no longer legally required.
- Right to Withdraw Consent:Opt out of marketing notifications and wholesale alerts at any time.
We commit to fulfilling data subject requests within30 daysfrom receipt date, subject to statutory extensions for complex requests.
9. Data Protection Officer (DPO)
Data Protection Officer Contact Information
إذا كانت لديك أي استفسارات تتعلق بهذه السياسة، أو ترغب في ممارسة حقوقك المقررة نظامياً، يمكنك التواصل مع وحدة حماية البيانات والامتثال القانوني لدى iVitaGlobal:
| Oversight Authority: | Compliance & DPO Office — iVitaGlobal |
|---|---|
| Dedicated Email: | info@ivitaglobal.com/info@ivitaglobal.com |
| Legal Affairs WhatsApp: | +966 50 000 0000 |
| Official Address: | King Fahd Road, Al Olaya, Riyadh, Saudi Arabia |
| Operating Hours: | Sunday to Thursday: 9:00 AM – 5:00 PM (Makkah Time) |
يحق لك أيضاً تقديم شكوى إلى الجهة المختصة بالمملكة (الهيئة السعودية للبيانات والذكاء الاصطناعي – سدايا) في حال عدم التوصل إلى حل مرضي لمطالبتك.
Would you like to execute a Mutual Non-Disclosure Agreement (NDA)?
نرحب بكافة الشركاء والعلامات التجارية الراغبة في تصنيع مكملاتهم الخاصة. نوفر مسودات NDA رسمية ومصدقة لضمان حماية فكرتك وتركيبتك قبل بدء النقاشات الفنية.