Privacy & Policy
01. THIS PRIVACY POLICY IS LEGALLY BINDING
Your use of the Service signifies that you unconditionally agree and accept to be legally bound by this Privacy Policy, which forms part of the FinTax Terms and Conditions. No other policies or conditions in any document, writing, or communication by you to Marahel shall apply unless explicitly agreed upon in writing by Marahel.
02. CHANGES TO THIS PRIVACY POLICY
Marahel reserves the right to alter this Privacy Policy at any time. Such changes will be effective and legally binding on you when posted on our website or when we use reasonable efforts to notify you by other means. Please review this Privacy Policy periodically. Your continued use of the Service after changes signifies your acceptance of the updated Privacy Policy.
03. INFORMATION WE COLLECT
Marahel may collect and process the following personal data from you when you use the Service:
i.
Full name.
ii. Email address.
iii. Phone number.
You may also choose to enter additional data (such as your National ID/Iqama/CR number) manually while using the Service for customer support and account management purposes.
Marahel does not collect cookies or analytics data unless explicitly stated and consented to by you.
04. PURPOSE OF COLLECTION AND LEGAL BASIS
Your data may be collected and used for the following purposes:
i.
To provide customer support and manage your FinTax account.
ii.
To comply with applicable laws and regulations in the Kingdom of
Saudi Arabia.
iii. To maintain and improve the Service.
The legal basis for processing your data includes your consent, contractual necessity, and legal compliance under KSA PDPL.
05. DATA SUBJECT RIGHTS
You have the right to:
i.
Access your personal data.
ii. Request correction or updating of
inaccurate data.
iii. Request deletion of your data.
iv.
Withdraw your consent at any time.
v. Object to processing under
specific circumstances.
vi. File complaints with SDAIA.
To exercise your rights, contact us at info@marahel.com.sa.
06. THIRD-PARTY INTEGRATIONS WITH XERO
Our Service integrates with Xero, a cloud accounting platform, to enable seamless tax management and accounting functionalities.
When you authorize FinTax to connect with your Xero account, we may access certain data from your Xero account, including:
i.
Contact names.
ii. Accounting transactions and invoices.
iii.
Other financial data necessary to provide the Service.
We access this data solely to:
i.
Provide tax management and compliance services.
ii. Synchronize
your accounting data with your FinTax account.
iii. Improve and
support your use of the Service.
We do not share Xero data with any third party except:
i.
As required to provide the Service using secure hosting within
KSA.
ii. As required by applicable laws and regulations.
All data obtained from Xero will be securely stored and processed within the Kingdom of Saudi Arabia.
For information on Xero’s privacy practices, please review the Xero Privacy Policy.
07. DATA RETENTION
Marahel retains your data:
i.
As long as your account remains active.
ii. As required by Saudi
tax laws.
iii. For up to ten (10) years from your last activity
or as required under applicable regulations.
08. DATA SECURITY
Marahel implements the following security measures:
i.
Encryption at rest and in transit.
ii. Access control policies
to limit internal access to data.
iii. Regular security audits
to protect your data.
While we strive to protect your data, we remind you that no electronic transmission is 100% secure.
09. DATA BREACH NOTIFICATION
In the event of a data breach, Marahel will notify SDAIA and affected data subjects in compliance with PDPL requirements within the mandated timeframes.
10. INTERNATIONAL DATA TRANSFER
Your data will be stored and processed securely within the Kingdom of Saudi Arabia and will not be transferred outside the KSA without compliance with PDPL requirements and applicable safeguards.
11. LINKS TO OTHER SITES
The Service may contain links to third-party websites not operated by Marahel. We are not responsible for their privacy practices. We recommend reviewing their privacy policies independently.
12. CHILDREN'S PRIVACY
The Service is not intended for individuals under the age of 13, and we do not knowingly collect data from children under 13. If you believe a child has provided us with data, contact us immediately for removal.
13. CONTACT INFORMATION
For any questions or requests regarding your personal data or this Privacy Policy, please contact us at:
info@marahel.com.sa
14. ARABIC LANGUAGE GOVERNS
In the event of any conflict between the English and Arabic versions of this Privacy Policy, the Arabic version shall govern under the laws of the Kingdom of Saudi Arabia.