Data Processing Agreement
Arabic is the legally binding version per Saudi law.
Effective date: 1 May 2026 / 1 مايو 2026
This agreement is entered into between Jabr (Processor) and the User (Controller) in accordance with the requirements of the Saudi Personal Data Protection Law (PDPL).
1. Definitions
- Controller: The business entity subscribed to Jabr
- Processor: Jabr and its operating entity
- Personal Data: Any information that identifies a natural person
2. Processor Obligations (Jabr)
- Process data only on the Controller's documented instructions
- Implement appropriate security measures (encryption, access control, backup)
- Not disclose data to third parties without authorization
- Assist the Controller in responding to data subject requests
- Notify the Controller of any security breach within 48 hours
- Delete or return data upon termination of the service
3. Controller Obligations (User)
- Obtain necessary consents for data processing
- Inform Jabr of any changes affecting processing requirements
- Ensure the accuracy of data entered
4. Sub-processors
The Controller consents to the use of sub-processors listed in the Privacy Policy. The Controller will be notified of any material change to the sub-processor list 30 days in advance.
5. Data Transfers
Data is processed primarily in the Middle East region. Any international transfer of data is performed with appropriate safeguards as required under PDPL.
6. Duration
This agreement remains in force for the duration of the subscription and terminates automatically upon service termination.
View in:|