INTRODUCTION
Hello for Information Systems Technology, Kingdom of Saudi Arabia and its affiliates (collectively, “Company”, “we” or “us”) are engaged in the business of providing web-based solutions to facilitate connections between customers that seek specific services and service professionals or providers that offer these services. This Policy outlines our practices in relation to the collection, storage, usage, processing, and disclosure of personal data that you have consented to share with us when you access, use, or otherwise interact with our Site available at [https://thehelloapp.com/] or mobile application (collectively, “Platform”) or avail products or services that HelloApp offers you on or through the Platform (collectively, the “Services”). In this Policy, the services offered to you by service providers on or through the Platform are referred to as “Professional Services”.
At HelloApp, we are committed to protecting your personal data and respecting your privacy. In order to provide you with access to the Services or the Professional Services, we have to collect and otherwise process certain data about you. This privacy policy (“Policy” or “Privacy Policy”) explains how we process and use personal data about you.
By using the Services, you confirm that you have read and agree to be bound by this Policy and consent to the processing activities described under this Policy.
Please refer to the sections below to understand how the terms of this Policy apply to you.
PART 1: BACKGROUND AND KEY INFORMATION
a. How this Policy applies:
This Policy applies to individuals or users who access or use the Services or otherwise avail the Professional Services. For the avoidance of doubt, references to “you” across this Policy are to an end user that uses the Platform.
By using the Platform, you consent to the collection, storage, usage, and disclosure of your personal data, as described in and collected by us in accordance with this Policy.
b. Review and Updates:
We regularly review and update our Privacy Policy, and we request you to regularly review this Policy. It is important that the personal data we hold about you is accurate and current. You should let us know if your personal data changes during your relationship with us.
c. Third-Party Services:
The Platform may include links to third-party websites, plug-ins, services, and applications (“Third-Party Services”). Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We neither control nor endorse these Third-Party Services and are not responsible for their privacy statements. When you leave the Platform or access third-party links through the Platform, we encourage you to read the privacy policy of such third-party service providers.
PART 2: PERSONAL DATA THAT WE COLLECT
We collect different types of personal data about you. This includes but is not limited to:
Contact Data such as your mailing or home address, location, email addresses, and mobile numbers;
Identity and Profile Data such as your name, username or similar identifiers, date of birth, photographs, profile picture, and gender;
Marketing and Communications Data such as information posted in service requests, offers, wants, feedback, comments, pictures, and discussions in our blog and chat boxes, responses to user surveys and polls, your preferences in receiving marketing communications from us and our third parties, and your communication preferences. We also collect your chat and call records when you communicate with service providers through the Platform, subject to your explicit consent;
Technical Data which includes your IP address, browser type, internet service provider, details of operating system, access time, page views, device ID, device type, frequency of visiting our site and use of the Platform, site and mobile application activity, clicks, date and time stamps, location data, and other technology on the devices that you use to access the Platform;
Transaction Data such as details of the Services or Professional Services you have availed, a limited portion of your credit or debit card details for tracking transactions that are provided to us by payment processors, and UPI IDs for processing payments;
Usage Data which includes information about how you use the Services and Professional Services, your activity on the Platform, booking history, user taps and clicks, user interests, time spent on the Platform, details about user journey on the mobile application, and page views.
We also collect, use, and share aggregated data such as statistical or demographic data for any purpose. Aggregated data could be derived from your personal data but is not considered personal data under law as it does not directly or indirectly reveal your identity. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Policy.
Where we need to collect personal data by law or under the terms of a contract (such as the Terms) and you fail to provide that data when requested, we may not be able to fulfil the contract (for example, to provide you with the Services). In this case, we may have to cancel or limit your access to the Services. Failure to provide necessary personal data when required under legal or contractual obligations may result in the termination of services or penalties as specified by applicable law.
PART 3: HOW DO WE COLLECT PERSONAL DATA?
We use different methods to collect personal data from and about you, including through:
Direct Interactions: You provide us with your personal data when you interact with us. This includes personal data you provide when you:
▪ Create an account or profile with us;
▪ Use our Services or carry out other activities in connection with the Services;
▪ Enter a promotion, user poll, or online surveys;
▪ Request marketing communications to be sent to you; or
▪ Report a problem with the Platform and/or our Services, give us feedback, or contact us.
The processing of this data is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract. Your consent will be obtained where required.
Automated technologies or interactions: Each time you visit the Platform or use the Services, we will automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, web beacons, pixel tags, server logs, and other similar technologies. We may also receive Technical Data about you if you visit other websites or apps that employ our cookies. We will inform you about the specific cookies used and obtain your consent where required. You have the right to withdraw consent at any time.
Third parties or publicly available sources: We will receive personal data about you from various third parties:
Technical data from analytics providers such as Facebook and advertising networks;
Identity and profile-related Data and Contact Data from service providers, publicly available sources, etc.; and
Personal data about you from our affiliate entities.
We will rely on legal grounds other than consent (such as legitimate interests) to process this data where applicable, ensuring that the processing complies with your data protection rights.
You have the right to access, correct, delete, or restrict processing of your personal data under the General Data Protection Regulation (GDPR). Please contact us using the details provided in our Privacy Policy if you wish to exercise these rights.
PART 4: HOW DO WE USE YOUR PERSONAL DATA?
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data where we need to provide you with the Services, enable you to use the Professional Services, or where we need to comply with a legal obligation. We will process your personal data based on the following legal bases:
To perform the contract we are about to enter into or have entered into with you;
For the purposes of our legitimate interests in providing and improving the Services to you;
To enable the provision of Professional Services to you;
To monitor trends and personalize your experience;
To improve the functionality of our Services based on the information and feedback we receive from you;
To improve customer service, to effectively respond to your Service requests and support needs;
To track transactions and process payments;
To send periodic notifications, to manage our relationship with you, including to notify you of changes to the Services, send you information and updates pertaining to the Services you have availed, and to receive occasional company news and updates related to us or the Services;
To assist with the facilitation of the Professional Services offered to you, including to send you information and updates about the Professional Services you have availed;
To market and advertise the Services to you;
To comply with legal obligations;
To administer and protect our business and the Services, including for troubleshooting, data analysis, system testing, and performing internal operations;
To improve our business and delivery models;
To perform our obligations that arise out of the arrangement we are about to enter or have entered with you;
To enforce our Terms; and
To respond to court orders, establish or exercise our legal rights, or defend ourselves against legal claims.
By using our Services and creating an account on the Platform, you consent to us contacting you via email, phone, or otherwise to provide the Services and inform you about all the features of the Services.
You agree and acknowledge that any and all information pertaining to you, whether or not you directly provide it to us (via the Services or otherwise), including but not limited to personal correspondence such as emails, instructions from you, etc., may be collected, compiled, and shared by us in order to render the Services to you. This may include but not be limited to service providers who provide or seek to provide you with Professional Services, vendors, social media companies, third-party service providers, storage providers, data analytics providers, consultants, lawyers, and auditors. We may also share this information with other entities in the HelloApp group in connection with the above-mentioned purposes based on our legitimate interests.
You agree and acknowledge that we may share data without your consent when it is required by law or by any court or government agency or authority to disclose such information. Such disclosures are made in good faith and belief that it is reasonably necessary to do so for enforcing this Policy or the Terms or in order to comply with any applicable laws and regulations.
PART 5: DISCLOSURES OF YOUR PERSONAL DATA
We may share your personal data with third parties set out below for the purposes set out in Section 5, provided we have a lawful basis for such processing, such as your consent or a legitimate interest that does not override your data protection interests:
Service providers to enable them to provide you with Professional Services;
Internal third parties which are other companies within the HelloApp group of companies.
External third parties such as:
Trusted third parties such as our associate partners and service providers that provide services for us or on our behalf. This includes hosting and operating our Platform, providing marketing assistance, conducting our business, processing payments and transaction-related processes, transmitting content, and providing our Services to you;
Analytic service providers and advertising networks that conduct web analytics for us to help us improve the Platform. These analytics providers may use cookies and other technologies to perform their services, with your explicit consent where required by applicable law;
Other registered users on our Platform upon your request or where you explicitly consent to such disclosure; and
Regulators and other bodies as legally required.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions and in compliance with the GDPR.
PART 6: YOUR RIGHTS IN RELATION TO YOUR PERSONAL DATA
a. Right of Access and Rectification: You have the right to access your personal data that we hold and to request rectification of inaccurate data or to have incomplete data completed. You are entitled to request this information free of charge. We are committed to enabling you to review, update, and correct your personal data held by us.
b. Right to Object to Direct Marketing: You have the right at any time to object to the processing of your personal data for direct marketing purposes, which includes profiling to the extent that it is related to such direct marketing. If you object, your personal data will no longer be processed for these purposes.
PART 7: TRANSFERS OF YOUR PERSONAL DATA
In accordance with the General Data Protection Regulation (GDPR) and local privacy laws, we ensure lawful handling of personal data during storage and transfers. As part of your use of the Services, the information and personal data you provide may be transferred to and stored at a destination outside the country in which you are based. This will only occur where it is compliant with the GDPR and where appropriate safeguards as required by the GDPR are in place. Such transfers may occur if our servers are from time to time located in a different country or if one of our vendors, partners, or service providers is based in a different country.
By submitting your information and personal data to us, you agree to the transfer, storage, and processing of such information and personal data in the manner described above. You acknowledge that such transfers are necessary for the performance of our contract with you and/or for the provision of services you have requested. Additionally, you have the right to withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. Your data will be treated securely and in accordance with the GDPR.
PART 8: DATA SECURITY
We implement appropriate security measures and privacy-protective features on our Platform, including encryption, password protection, call masking, and physical security measures to ensure the protection of your personal data against unauthorized access, alteration, disclosure, and destruction in accordance with the GDPR and other relevant legislation.
You are responsible for maintaining the confidentiality of your Account login details that enable your access to the Services. It is crucial that you keep your login details secret and do not share them with anyone. We will not be liable for any unauthorized access to your information or any loss, theft, or compromise of your login details. Likewise, we are not responsible for any activity on your account resulting from unauthorized access or disclosure of your login details. In the event your login details have been compromised in any manner whatsoever, you should promptly notify us so that we can facilitate a password reset and take necessary steps to secure your account in compliance with the GDPR requirements.
PART 9: DATA RETENTION
You agree and acknowledge that your personal data will continue to be stored and retained by us for as long as necessary to fulfil our stated purpose(s) for which the data was collected and for a reasonable period thereafter as required to comply with our legal obligations, resolve disputes, and enforce our agreements as permitted under the GDPR.
In some circumstances, we may anonymize your personal data (ensuring it can no longer identify you) for research or statistical purposes. In such cases, we may use this anonymized information indefinitely without further notice to you, as this usage does not fall under the scope of the GDPR.
PART 10: BUSINESS TRANSITIONS
You are aware that in the event we go through a business transition, such as a merger, acquisition by another organization, or sale of all or a portion of our assets, your personal data might be among the assets transferred, without the need for your prior approval.
PART 11: USER GENERATED CONTENT
We invite you to post content on our Platform, including your comments, feedback, pictures, or any other information that you would like to be made available on our Platform. Please note that such content will be available to all visitors to our Platform and may become public. We cannot prevent such information from being used in a manner that is contrary to this Policy, applicable laws, or your personal privacy, and we disclaim all liability (express or implied) in this regard. Further, you agree to comply with all applicable laws in relation to the content uploaded or otherwise shared by you on our Platform. You understand and acknowledge that you will be solely responsible for any information published by you on our Platform that violates applicable laws.
PART 12: UPDATES TO THIS POLICY
We may occasionally update this Policy. Use of our services after an update constitutes consent to the updated Policy to the extent permitted by law.
We encourage users to periodically review this notice for the latest information on our privacy practices.
PART 13: DATA PROTECTION OFFICER
If you have any questions about this Policy, how we process or handle your personal data, or otherwise, you may reach out to us, with your queries, grievances, feedback, and comments at [email protected]