Privacy Policy

Prepared by   T2 Business Research and Development Company

Privacy Policy

Clause 1: Privacy and Confidentiality of Information

T2 Business Research and Development Company ("T2") values your concerns regarding the privacy of your data. This Privacy Policy ("Policy") has been prepared to help you understand the types of data we collect when you visit our website ("Platform"). It aims to clarify how we collect and use your personal data, in accordance with the applicable personal data protection regulations and the Communications, Space, and Technology Commission (CST) in Saudi Arabia.

In our commitment to safeguarding user data and information, T2 ensures the confidentiality and privacy of such data, using it solely to deliver the requested services ("Services") in compliance with the prevailing terms and conditions in Saudi Arabia.

By agreeing to this Policy, you consent to providing us with complete and accurate information that may be required for facilitating future "communication" and enabling access to part or all of the "Services" authorized by the CST under applicable licenses, permissions, and regulations. Unless otherwise notified, you agree to receive promotional and marketing materials, important account information, or updates about services, products, or applications in compliance with applicable laws.

By accessing or using this website, its services, or by providing information to the company through any of its channels, you agree to the terms outlined in this Privacy Policy.

Clause 2: Data Collection and Purpose

1. Data Required for Registration : Personal details such as name, email address, phone number, date of birth, nationality, and gender.
2. Photos and audio recordings (Biometric Information):
   Photos/face images and audio recordings of specific phrases agreed upon with the client are used only for verifying the employee's identity during check-in and check-out, and to enhance the user experience within the application.
   • Face and voice data is stored on Availo servers located in Saudi Arabia.
   • Face/Voice data is not shared with any third parties.
   • Availo implements strict security measures to protect stored face data, including encryption and access controls.
   • Once the account deleted/disactivate, face images are securely deleted from our servers.
3. Data for Service Usage : Usage details such as cookies and other browsing data collected through websites or mobile applications.
4. Data Exchanged During Communication : Information shared during customer support interactions or feedback sessions.

Clause 3: Purpose of Collecting Personal Data

To ensure optimal service delivery, we collect and use your personal data for the following purposes:

• Enhancing, developing, or marketing our products and services.
• Supporting and maintaining our operations and systems to ensure service quality and continuity.
• Understanding customer needs, assessing eligibility for products and services, and recommending suitable offerings.
• Informing users about new products and services.
• Addressing user inquiries, suggestions, or complaints.

Clause 4: Methods of Data Collection

1. Data provided during registration on the platform.
2. Data gathered through cookies while browsing the website.

T2 uses approved data anonymization and encryption technologies to ensure a high level of protection and minimize unauthorized access risks, in accordance with the National Cybersecurity Authority (NCA) guidelines.

Clause 5: Storage and Deletion of Personal Data

• Personal data is stored on servers located within Saudi Arabia, secured by state-of-the-art technologies compliant with the National Cybersecurity Authority's policies and international standards. When no longer needed, data is securely destroyed in accordance with T2's policies and relevant regulations, ensuring it cannot be retrieved.
• T2 does not store, share, or transfer face data to any third parties.

Clause 6: Legal Basis for Data Collection and Processing

• Contractual: To fulfill service obligations.
• Legitimate Interest:  For activities such as marketing, fraud prevention, and ensuring network security.
• Consent:  Processing based on user consent, particularly for marketing communications, which can be withdrawn at any time.
• Legal Compliance:  To meet governmental requirements, including national security and public health protection.
• Public Interest:  Processing required by public authorities or for public benefit purposes, such as awareness campaigns by government entities.

Data collection and processing occur based on the voluntary consent of the data owner, which may be withdrawn at any time, barring other legal bases. For withdrawal, users may contact T2's technical support mentioned in clause number 9.

T2 strictly does not transfer personal data outside the Kingdom of Saudi Arabia. All data processing activities are conducted within the Kingdom in compliance with local laws and regulations.

Clause 7: Rights of Data Owners

• Right to Be Informed:

 To understand data collection methods, processing purposes, and storage protocols.

• Right to Access:

 Request a free copy of personal data within 30 working days by contacting the email provided in Clause 9.

• Right to Rectification:

Request corrections to inaccurate or incomplete data, reviewed within 30 working days.

• Right to Deletion:

Request deletion of personal data unless subject to legal or contractual retention requirements.

• Right to Withdraw Consent:

Withdraw consent for data processing unless overriding legitimate purposes exist.

Certain requests, such as deletion or withdrawal, may be restricted due to legal or regulatory obligations.
T2 is committed to responding to all personal data rights requests within 30 business days from the date of receipt, in compliance with applicable laws.

Clause 8: Sharing/Disclosing Personal Data

Personal data will not be shared without prior consent or legal justification, except in specific circumstances such as:

• Security purposes.
• Legal compliance.
• Meeting judicial requirements.
• Protecting public health or safety.
• Protecting an individual's life or health.

In such cases, data sharing adheres to Saudi Arabia's Personal Data Protection Law.

Clause 9: Exercising Data Owner Rights

To request access, rectification, or deletion of personal data, please contact:

• Email: support@t2.sa
• Phone: +920033339

Clause 10: Complaints and Inquiries

For complaints or inquiries related to this Policy or personal data handling, contact:

• Email: support@t2.sa
• Phone: +920033339

Clause 11: Privacy Policy Updates

T2 adopts strict and approved internal policies to ensure the protection of personal data, subject to regular audits by regulatory authorities to ensure full compliance.

To ensure continued service quality and user protection, this Policy may be updated as necessary. Updates will reflect legal changes and will be available here. We recommend periodic reviews.

Last updated: April 16, 2025