Privacy Policy

1. Introduction

Abdul Latif Jameel Transportation Company Limited is committed to respecting your privacy and protecting your personal data.

  • We will be transparent about the personal data we collect about you and how we use it.
  • We will process your personal data only for clear and lawful purposes connected with our website, communications, logistics services, and related business operations.
  • We will only process your personal data where we have a legal basis to do so under applicable privacy laws, including the Personal Data Protection Law of Saudi Arabia and its Implementing Regulations.
  • We will apply appropriate organizational, technical, and administrative measures to protect your personal data.
  • We will respect your data protection rights and provide channels for you to contact us about your personal data.

You can access our full Privacy Policy below to help you to understand how we use your personal data. In it, we explain the types of personal data we collect, how we collect and process it, what we may process it for and who we may share it with.

2. Full Privacy Notice

2-1 Controller of Personal Data

Any personal data processed in connection with this Privacy Notice is controlled by Abdul Latif Jameel Transportation Company Limited, a limited company registered in Jeddah under commercial registration number 4030238060, with its registered office at Al-Safa District, P.O. Box 248, Jeddah 21411, Kingdom of Saudi Arabia (“ALJ Logistics”, “Company”, “we”, “our” or “us”). which is considered the “data controller” of your personal data under the Personal Data Protection Law and its Implementing Regulations.

2-2 Processor of Personal Data

In certain circumstances, ALJ Logistics may act as a Processor on behalf of its customers. This may occur where a customer provides shipment, delivery, or recipient information to us for the limited purpose of arranging or completing the delivery of goods to the intended recipient. In such cases, we process the relevant personal data on behalf of the customer, in accordance with the customer’s instructions and only for the agreed logistics service purpose.

To contact our Data Protection Officer, please send a request using the contact details specified at the end of this Privacy Policy. For questions, requests or complaints relating to this Privacy Notice or our processing of your personal data, you may contact us using the contact details provided at the end of this Privacy Notice.

2-3 What Do We Do?

ALJ Logistics is a logistics and transportation services provider. Our operations include domestic and international logistics, express delivery, freight forwarding, customs-clearance support, warehousing,  shipment visibility, initiative-taking reporting, market coverage reporting and related logistics support services.

Our logistics services support customers, guests, business partners, and consignees in moving goods within Saudi Arabia and through international logistics networks, including cross-border services and services connected with entry points into the Kingdom of Saudi Arabia.

2-4 What Do We Mean by Personal Data?

Personal data means any data, regardless of its source or form, which may lead to identifying you specifically, or that may directly or indirectly make it possible to identify you. This may include your name, contact details, identification details, addresses, online identifiers, records, images, or any other data of a personal nature.

2-5 What Do We Mean by Sensitive Personal Data?

Sensitive personal data means personal data revealing racial or ethnic origin, religious, intellectual or political belief, data relating to security or criminal convictions and offences, biometric or genetic data for the purpose of identifying a person, health data, and data indicating that one or both of an individual’s parents are unknown.

2-6 When Does This Privacy Notice Apply?

This Privacy Notice applies to personal data that we collect, use, disclose, store, or otherwise process in connection with our website, communications, logistics services, and related business operations. This includes when you:

  • Visit or use the ALJ Logistics website or any online forms made available through it.
  • Submit an enquiry or request information about ALJ Logistics services.
  • Communicate with us by email, telephone, website form, social media, or other business contact channel.
  • Register to receive updates or informational communications, where such options are made available.
  • Participate in customer surveys, feedback activities, or other service-improvement communications.
  • Engage with us as a customer, prospective customer, business partner, supplier, carrier, consignee, authorized representative, or other logistics-service contact.
  • Use or receive services connected with domestic or international transportation, freight forwarding, customs clearance, warehousing, fulfilment, e-commerce logistics, last-mile delivery, reverse logistics, tracking, shipment visibility, or reporting.

2-7 How We Collect Personal Data and What Types of Personal Data We Collect

2-7.1 Direct Collection

We collect personal data that you provide directly when you interact with us through our website, email, social media, enquiry forms, surveys, or other service channels.

Data Element Data Category Purpose of Collection
Name, job title, department, business contact details (Email and Phone) Business contact information To understand the nature of your enquiry, route your request to the relevant team and provide requested information, manage correspondence, and maintain business records.

We will inform you at the time of collection of your personal data whenever the provision of such personal data to us is mandatory to allow us to achieve the purposes described below. Otherwise, the provision of the personal data is optional. If you do not provide the personal data, we require this may affect our ability to provide services to you.

2-7.2 Indirect Collection

We may also collect personal data indirectly when you use our website, interact with Abdul Latif Jameel businesses, or where information is provided to us by customers, business partners, suppliers, logistics partners, service providers, or other authorized parties for the purposes described in this Privacy Notice.

Data Element Data Category Purpose of Collection
Cookies and similar technologies Online identifiers To distinguish users, support website functionality, enhance user experience, measure performance, and support analytics in accordance with our Cookie Policy.
Name, email address, Phone number, postal address Identification and contact information To Provide Logistic services

2-8 What Do We Use Your Personal Data for and What Is Our Legal Basis?

We will only process your personal data where we have a legal basis to do so. The legal basis will depend on the reason we collected and need to use your personal data.

2-8.1 Performance of a Contract or Taking Steps at Your Request

Where applicable, we may process your personal data where it is necessary to perform a contract with you, manage a business relationship, provide the requested service, or take steps at your request before entering into a contract. This may include processing personal data to:

  • Respond to enquiries or requests submitted through the ALJ Logistics website or other contact channels.
  • Provide information about ALJ Logistics services that you request.
  • manage customer, supplier, business partner, consignee, or authorized representative relationships.
  • Support domestic and international logistics, freight forwarding, customs-clearance support, warehousing, fulfilment, e-commerce logistics, last-mile delivery, reverse logistics, shipment visibility, and reporting.
  • Communicate service updates, delivery-related information, tracking or consignment information where relevant; and

2-8.2 Legitimate Interests

We may process your personal data where it is necessary for our legitimate interests, provided that your interests, rights, and freedoms do not override those interests:

  • Review, develop and improve our website, services, and customer experience.
  • Keep internal records and conduct business administration.
  • Administer and secure our website and IT environment, including troubleshooting, testing, analytics, and fraud-prevention activities.
  • Analyse customer surveys, feedback, and service interactions where consent is not required.
  • Protect the rights, property, and safety of ALJ Logistics, customers, partners, and others.
  • Manage legal claims, disputes, audit requirements, and internal governance; and
  • Support business continuity, corporate transactions, restructuring, asset transfers, or similar business activities where relevant and lawful.

2-8.3 Compliance with Legal Obligations

We may process or disclose personal data where this is necessary to comply with legal obligations applicable to ALJ Logistics. This may include processing or disclosure to:

  • Comply with applicable laws, regulations, court orders, regulatory requests, or lawful government requirements.
  • Maintain records required by law, including records relating to commercial, accounting, tax, customs, logistics, dispute, or regulatory obligations.
  • Cooperate with competent authorities, customs authorities, regulators, law-enforcement bodies, or courts where legally required; and
  • Meet legal obligations relating to personal data protection and information security.

2-8.4   Vital Interest

We may process your personal data where it is necessary to protect your vital interests or the vital interests of another person. This basis would only be relied upon in limited circumstances, such as where processing is necessary to protect life, health, or physical safety.

2-8.5 Consent

We rely on your consent where you have freely given a clear indication that you agree to the processing of your personal data for a specific purpose.

We may rely on consent:

  • Where you opt in to receive updates or marketing communications from or website through contact us page
  • Where non-essential cookies or similar technologies are used and consent is required.
  • In case we use your data for any automated decision-making, we will obtain your consent.

You have the right to withdraw your consent at any time for ALJ Logistic to process your personal information. You can exercise this right by contacting ALJ Logistic DPO (aljedpo@alj.com)

2-9 How Long Do We Keep Personal Data?

We will retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy. Your information will be retained for a period of 10 years to ensure effective support, operational continuity, and compliance across all business functions. This period also enables us to manage or respond to any complaints, queries, or concerns relating to your account or application, including meeting any applicable statutory requirements.

If you stop interacting with us, we will remove or anonymize your information after the passing of the statutory requirements. On the expiry of the applicable data retention periods, we will delete it securely, or in some cases anonymize it.

If you wish to know more about our retention policy and retention periods that apply to your personal data, please send a request using the contact details specified at the end of this Privacy Policy.

2-10 Who Do We Share Your Personal Data With?

Database support partner– Personal data is disclosed regularly to ensure secure storage, maintenance, and performance of our data systems.

We also share your personal data with any Affiliate companies, for purposes including but not limited to facilitating business operations services and marketing (where you have provided your consent to do so).

(Note: Affiliate refers to any individual, corporation, partnership, limited liability company, or other legal entity that directly or indirectly controls, is controlled by, or is under common control with a party to an agreement. For the purposes of this definition, “control” means the ownership of at least fifty percent (50%) of the voting equity, membership, or other ownership interests of such entity, or the ability to otherwise direct its management and policies, whether through ownership, contract, or other means. This also includes any other entity that falls under shared ownership, shares any partial management, or has the same ultimate ownership as a party to the agreement between entities.)

We do not share your personal data with any external entities for purposes referred to under this Privacy Policy. We do not sell personal data to third parties, and we only allow our third parties, sister, and affiliate companies to send you marketing information where we have your consent to do so.

2-11 Do We Transfer Your Personal Data Outside Saudi Arabia?

When we share your personal data with the entities mentioned above, it may imply transfers of your personal data outside KSA, namely to Western Europe for database support services.

We seek to ensure such transfers satisfy the conditions set out under the applicable privacy laws. We have limited the transfer to the minimum personal data needed and implemented sufficient guarantees for preserving the confidentiality of the personal data transferred so that the standards of the protection of your personal data are not less than the standards set forth in the applicable privacy laws.

2-12 What Are Your Legal Rights in Relation to Your Personal Data?

Under the applicable privacy laws, you have certain rights in relation to your personal data. Responses to exercise your rights will be provided within 30 days (or such other period under applicable law). You can exercise your rights by contacting via email at (aljedpo@alj.com). If your request is particularly complicated, we may extend the deadline for responding by a further 30 days (or such other period permitted under applicable law), but we will let you know if this is the case. We will manage all requests in accordance with applicable law. However, depending on the right you wish to exercise, and the nature of the personal data involved, there may be legal reasons why we cannot grant your request. Further explanation of those rights and the exceptions to them are set out below.

Details of how to exercise your rights are set out in the section below “How can you exercise your legal rights and change how we use your data.”

Your rights include the following:

  • Right of access to your personal data
  • Right to request access
  • Right to be informed about our processing of your data
  • Right to obtain personal data in a readable and clear format
  • Right to request correction, completing or updating of personal data
  • Right to request the destruction/erasure of personal data
  • Right to withdraw Consent

 

In any case, you also have the right to lodge a complaint with the competent data protection authority in accordance with applicable law if you consider that the processing of your personal data carried out by us infringes the applicable privacy laws.

2-13 How Can You Exercise Your Rights or Change How We Use Your Data?

To exercise any of your rights mentioned above, or if you have any questions or complaints about our use of your personal data, please send a request using the contact details specified at the end of this Privacy Policy. We may ask for some additional information to confirm your identity, which will only be used to process your request.

In your request, please try to make clear which right(s) you would like to enforce and provide any details which may help us answer to your request. Where you fully or partially lack legal capacity (for example you are a child under 18) your legal guardian may be required by applicable law to exercise your rights on your behalf.

2-14 Security of Your Personal Data

To protect against the loss, misuse, and alteration of the information under our control, we have in place appropriate physical, electronic, and managerial procedures. For example, our servers are accessible only by authorized personnel and your information is shared with respective personnel on need-to-know basis to complete the transaction and to provide the services requested by you. We also employ data encryption, anonymization, and coding methods to ensure that your personal data remains secure during storage and transmission. The level of security measures applied is adjusted based on the sensitivity and volume of the personal data we collect. Although we will endeavour to safeguard the confidentiality of your personal data, transmissions made by means of the Internet cannot be made secure.

To make sure your access to our services is secure, you should not share your log in details with anyone else. When you finish using our services, you should log out if others may be able to access your computer or device. This is especially important if you are using a publicly accessible computer. Be aware that there is an Internet fraud practice known as ‘phishing’ which is the illegal gathering of personal data by deception. Unsolicited emails are sent to individuals from lists illegally gathered by a third party, and recipients are asked to enter or reconfirm bank or password details into a cloned or illegal copy website.

3. How Will We Inform You of Changes to This Privacy Notice?

If we change this Privacy Policy, we will let you know about the changes by publishing the updated version on our website. If such change to the Privacy Policy requires your consent, you will have a choice to consent as to whether we may use your personal data in this different manner.

We are committed to protecting and respecting your privacy and will continue to do so in any future changes we make to this Privacy Policy

The Privacy Policy was last updated on –   June 2026.

4. How to Get in Touch with Us and Your Right to Complain

4-1 How to Contact ALJ Logistics

If you want to exercise any of your rights, or if you have any questions about this policy or our use of your personal data, please contact the Data Protection Officer.

The Data Protection Officer for ALJ Logistic can be contacted via email at (aljedpo@alj.com)

4-2 How to get in touch with SDAIA.

If you are not satisfied with how we manage your complaint, or if we fail to respond within 30 days, you have the right to file a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA). Email – Info@sdaia.gov.sa.