Privacy Policy

1. Personal Data We May Collect

We collect only data that is reasonably required to provide, operate, secure and improve ATHR services.

• Identity and contact details: name, mobile number and other contact information you provide.
• Donation and collection details: donation type, item descriptions, notes, pickup area/address, preferred collection details and request status.
• Location data: pickup location or GPS coordinates when you choose to provide or permit location access.
• Photos and evidence: images you voluntarily upload for a collection request, collection evidence or operational confirmation.
• Communications: messages and information exchanged through ATHR forms, WhatsApp, guided chatbot or human support channels.
• Account and operational data: information necessary for authorized staff and driver accounts, assignments, attendance/duty status, vehicle information and operational activity.
• Driver location data: GPS/location information while an authorized driver is on duty or using location-enabled operational features.
• Technical information: device/browser information, security logs, timestamps and basic usage information that may be generated by the website, app or hosting infrastructure.
• Consent and communication preferences: records of permissions or preferences you provide for contact, updates or optional communications.

2. Why We Use Personal Data

• To receive, create, schedule and manage donation collection requests.
• To contact you about your request, clarify details and coordinate collection.
• To locate, assign and support drivers and collection teams.
• To provide request history, status updates, confirmations and customer support.
• To operate WhatsApp, chatbot and human-support workflows requested by users.
• To maintain operational records, service quality, safety, fraud prevention and system security.
• To measure and improve service performance using aggregated or appropriately minimized operational information.
• To comply with legal, regulatory, audit or legitimate reporting requirements where applicable.
• To send optional updates or communications only where an appropriate permission or lawful basis exists, with an ability to opt out where applicable.

3. Legal Basis and Consent

Depending on the service and circumstances, ATHR processes personal data based on your consent where required, the steps necessary to provide a service you requested, compliance with applicable legal obligations, or another lawful basis permitted under applicable Saudi law.

Where processing depends on your consent, you may withdraw that consent, subject to applicable legal requirements and any processing that remains necessary for lawful purposes.

4. Location Data and Driver Tracking

• Donor/user location is collected only when you provide an address/location or grant device location permission.
• Location is used to support collection planning, routing, service-area validation and operational coordination.
• Driver location may be processed during duty/operational use to support assignment, routing, arrival tracking, safety and route history.
• ATHR does not sell location data or use it for third-party advertising.
• You can control device-level location permissions through your device settings; disabling location may limit location-dependent features.

5. WhatsApp, Chatbot and Other Communications

If you communicate with ATHR through WhatsApp, chatbot or another external communication service, the information you send may be processed by ATHR to respond to you, create or manage a collection request, maintain conversation history, and provide support.

Third-party platforms that you choose to use, such as WhatsApp, may independently process information under their own terms and privacy policies. ATHR does not control those independent privacy practices.

6. When We May Share Personal Data

We do not sell or rent personal data. We may disclose only the information reasonably necessary for the following purposes:

• Authorized ATHR staff, operators and drivers who need information to perform their assigned duties.
• A driver assigned to a request may receive necessary contact, pickup-location and request information to complete the collection.
• Authorized partner organizations where information is necessary for service fulfillment, compliance, reporting or approved operational purposes.
• Hosting, cloud, communications, mapping, authentication, security or other service providers that support ATHR operations and are expected to handle data for the relevant service purpose.
• Government, regulatory, law-enforcement or other competent authorities where disclosure is required or permitted by applicable law.
• Professional advisers or auditors where reasonably necessary and subject to appropriate confidentiality obligations.

7. Data Security

ATHR applies reasonable administrative, technical and organizational safeguards designed to protect personal data against unauthorized access, alteration, loss, misuse or disclosure. Access to operational information is limited according to authorized roles and responsibilities where supported by the platform.

No internet, mobile or electronic storage system can be guaranteed to be completely secure. We therefore avoid making an absolute guarantee of security, but we take reasonable measures appropriate to the nature of the service and data involved.

8. Data Retention and Deletion

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, to maintain legitimate operational records, resolve requests or disputes, meet applicable legal or regulatory requirements, and protect the security and integrity of the service.

When data is no longer required and there is no lawful reason to retain it, ATHR will take reasonable steps to delete, destroy or anonymize it as appropriate.

You may submit a data-deletion request using the ATHR data-deletion page or the contact details below. Some information may need to be retained where required by law, for audit/security purposes, or to establish, exercise or defend legal rights.

9. Your Personal Data Rights

Subject to applicable Saudi law and any lawful restrictions or exceptions, you may have the right to:

• Be informed about the legal basis and purpose for collecting and processing your personal data.
• Access personal data held about you.
• Request a readable and clear copy of your personal data where applicable.
• Request correction, completion or updating of inaccurate or incomplete personal data.
• Request destruction/deletion of personal data where the applicable requirements are met.
• Withdraw consent where consent is the basis for processing and withdrawal is legally permitted.
• Raise a privacy concern or complaint through ATHR and, where applicable, with the competent Saudi authority.

10. Children’s Privacy

ATHR’s donation and collection services are intended to be used by adults or under appropriate adult/guardian supervision. We do not knowingly solicit personal data directly from children for independent use of the service. If you believe a child has provided personal data without appropriate authorization, please contact us so we can review the matter.

11. International Processing and Service Providers

Some technology or service providers supporting ATHR may process or host information using infrastructure located outside the Kingdom of Saudi Arabia. Where cross-border processing applies, ATHR will seek to handle such processing in accordance with applicable Saudi requirements and appropriate safeguards.

12. Changes to This Policy

We may update this Privacy Policy when our services, legal requirements or data practices change. The latest version will be published on this page with an updated date. Material changes may also be communicated through the website, app or another appropriate channel where necessary.