• At Riyadh University of Arts, we are committed to protecting your personal data and ensuring that privacy remains fundamental to our operations and practices. We also comply with all applicable data-privacy laws and regulations, including the Personal Data Protection Law of the Kingdom of Saudi Arabia.
• Our Privacy Policy applies to all products and services we offer through this website. It explains how we collect, use, and protect your personal information in connection with your use of this site and any related products or services in a clear and straightforward language. Please note that we collect personal data strictly in accordance with the laws and regulations in force in Saudi Arabia, including the Personal Data Protection Law, as described in this policy.
• By accessing or continuing to use any of our products, services, or this website, you agree to the terms of this Privacy Policy. If you do not agree, please refrain from accessing or using this website or any of the products and services provided.

• “Personal data” refers to any information that can identify you as an individual. This may include your name, contact details, account information, or any other data that can be linked to you personally.
• To deliver our services, we may collect the following types of personal data:
  - Identifiers: Name.
  - Contact information: Mobile number and email address.
  - Financial data: Payment information, fees, or financial transactions related to university services or activities.
  - Technical information: IP address, browser type, operating system, device identifiers, and usage logs while
interacting with the University’s digital platforms.
• - Academic information: Student ID, academic record, grades, programmes of study, attendance, and
participation records.
  - Usage data: Browsing patterns, user preferences, and interaction behaviour on the website or applications.
  - Marketing and communication data: Preferences for receiving notifications, newsletters, or information about
the University’s academic and cultural activities.

We collect your personal data through the following methods:

• Direct interactions: You may provide personal data by filling out a registration form.
• Automated technologies: As you interact with our website or apps, we may automatically collect technical data about your devices, browsing activity, and patterns of digital use.
• Third parties or public sources: We may collect personal data from trusted third parties or publicly available sources, in compliance with applicable Saudi laws and regulations.

We collect your personal data for purposes such as:

• Participating in marketing and awareness campaigns related to the University’s academic and cultural activities.
• Providing effective and immediate support to students, faculty, and staff, and responding to inquiries or issues.
• Analyzing user data to improve our digital platforms, enhance user experience, and develop new features 
and services.
• Managing academic and administrative operations, including admissions, registration, performance tracking, and educational service delivery.
• Preparing internal reports and studies to support academic and research development and improve 
program quality.

Riyadh University of Arts ensures that your data is processed only for the purposes for which it was collected. Processing may be manual or automated, using advanced systems and tools to deliver the highest quality of service and experience in every interaction with the University.

We collect and process your personal data under the following legal base:

• Consent: When you explicitly agree to the collection and use of your personal data.
• Legitimate interest: When processing your data serves our legitimate interests without infringing on your rights under applicable laws.
• Public interest: When data processing is required by public authorities or necessary to serve the public interest.

We may share your personal data with trusted partners or service providers for specific purposes, including:

• Legal compliance: We may share your personal data to comply with laws, regulations, or official requests from governmental or security authorities.
• Research and analysis: We may share aggregated and anonymized data with third parties for research or statistical purposes.
• Service provision and improvement: We may share your personal data with authorised third-party service providers assisting in operating or enhancing our services. Such parties are bound by contractual obligations to protect your data and use it only for the stated purposes.

If your personal data needs to be transferred outside Saudi Arabia, we ensure that appropriate data-protection standards are in place and that transfers comply with applicable laws. This includes relying on adequacy decisions or standard contractual clauses. For more information on how your data is protected during international transfers, please contact us through the details below.

All information you provide to us is stored on our secure servers. To protect your data at rest and in transit we have put in place state-of-the-art security measures, including appropriate administrative, technical, physical, and organizational controls to safeguard and keep your personal date confidential. This includes:

• Access controls ensuring only authorised personnel can view your data.

Encryption of data during storage and transmission.
• Regular security assessments and audits.
• Staff training on data-protection best practices.

We continually monitor and enhance our security measures to reduce risks and prevent unauthorised access, disclosure, alteration, or destruction of data.

However, you are solely responsible for ensuring that the data you submit through the website is complete, correct, and accurate.

In order for us to help you protect your personal information, we recommend the following:

• Contact us immediately if you think someone has obtained your password, usage code, secret number, or any other confidential information.
• Do not provide or share any confidential or personal information over the phone or the Internet unless it is provided by the regulatory party.
• Use a secure browser when completing transactions over the Internet, close unused applications on the network, and ensure that your antivirus program is always up to date.

We retain your personal data only as required by law and for the specific purpose outlined in this notice. We will retain and use your information as necessary to comply with our legal obligations (for example, if we need to retain your data to comply with applicable laws), resolve disputes, and enforce our agreements and policies as instructed by regulatory authorities. We keep your information in line with our data retention policy. We will not keep your personal data for longer than is necessary for the purpose for which it was collected. This means that your personal data will be destroyed or erased from our systems when it is no longer required, as per our approved data disposal methods. We take appropriate steps to ensure that we process and keep your personal data based on the following:

• For the duration for which the personal data is used to provide you with a service.
• As required under law, a contract, or about our statutory obligations.
• Only for as long as is necessary for the purpose for which it was collected, is processed, or for longer if required under any contract, by applicable law, or for statistical purposes (if anonymization is performed), subject to appropriate safeguards.

You have the following rights regarding your personal data:

• Right to be Informed: You have the right to be informed about the collection and usage of your personal data, including why and how we collect your personal data, the purposes for processing your data, and who it will be shared with.
• Right to Access Your Personal Data:Request access to the personal data we hold about you.
• Right to Request Access to Personal Data in a Readable Format (Data Portability):Request access to your personal data in a readable and clear format that is retained with us, if technically possible, through your preferred channel.
• Right to Rectify Your Personal Data:Request the correction of inaccurate or incomplete data.
• Right to Erase Your Personal Data:Request deletion of your data under certain circumstances.
• Right to Withdraw Consent:You can withdraw your consent to the processing of your personal data at any time unless there are legal/business reasons that require otherwise. This right entitles you to request that we no longer process your personal data.

Please note that some or all of the above rights may be subject to certain exceptions and exemptions specified by the relevant laws and regulations and will be evaluated on a case-by-case basis to ensure compliance with those exceptions.
In the event that you submit a request to exercise one of these rights, you will receive an initial response from the date of receipt of the request by contacting us via the following information:
Email: info@rua.edu.sa
Toll-free number: +966 800 118 9999

Providing data to us is optional, and when you wish to provide data, it is collected using digital forms or applications, in which the personal data that you are asked to provide is clarified by marking the mandatory fields with an asterisk (*) or an alert message.

As for the non-mandatory data, you can choose not to provide it to us.

Our website may contain links to external sites for user convenience. Riyadh University of Arts is not responsible for the content, performance, or data-handling practices of these external websites. We recommend reviewing their privacy policies before sharing personal information.

If you have questions or complaints about this Privacy Policy or the handling of your personal data, please contact the University’s Data Management Office at info@rua.edu.sa

If your concern is not resolved within one month, you have the right to escalate it to the Saudi Data and Artificial Intelligence Authority (SDAIA) via:

- Website: sdaia.gov.sa


- National Data Governance Platform: dgp.sdaia.gov.sa

We reserve the right to modify this Privacy Notice from time to time. Changes and amendments to this Privacy Notice will take effect immediately upon posting on this website. Users are encouraged to periodically review this notice to stay fully informed of any updates.