Privacy Date : 7-10-2025
Saudi Standards, Metrology and Quality Organization (SASO) was established by Cabinet Resolution No. 216 dated 31-05-2010 (17-06-1431 AH). SASO is affiliated with the Minister of Commerce. Taqyees program was established by SASO. Royal Decree No (54878) dated 16-08-2016 (13-11-1437 AH) approved its detailed plans.. SASO is independent legal organization and financial and administrative autonomy. SASO is committed to protecting your privacy and ensuring the safe and appropriate use of your personal data. Out of concern for user data and information, SASO is committed to maintaining the confidentiality and privacy of this data and using it to achieve the desired level of service to the user in accordance with systems, regulations, and instructions in force in the Kingdom of Saudi Arabia. Therefore, this policy includes details about what personal data will be collected. The purpose of collecting your personal data, its content, how it is collected, stored, processed, used and destroyed, as well as the rights of data subjects and how to exercise those rights.
You can also contact us through the channels listed below for more information or to exercise your rights and using SASO's website constitutes the user's acceptance of the privacy policy.
Personal data collected
SASO collects and processes personal data such as the following mandatory fields:
• Name
• Date of birth
• National ID/Residence number
• Mobile number
• E-mail address
• Address
How your personal data is collected and the purpose of collecting it:
Data collected directly: Data provided by the data subject to the website during registration is collected and is not subsequently processed in a manner that conflicts with the purpose of collecting it.
• Name: The name is collected to accurately identify the user and issue licenses or certificates in their official name.
• Date of Birth: Used to determine the user's legal eligibility to use the services provided and to ensure compliance with relevant regulations.
• National ID: Collected to verify personal identity and ensure legal documentation of all operations related to the services.
• Mobile number: Used for immediate communication with users, such as sending notifications related to services, appointments or any updates and other services.
• E-mail: Used to share information and reports electronically, and for communication regarding inquiries or official notifications, or to send notifications related to services, appointments, or any updates and other services.
• Address: Used to determine the user's geographic location for purposes of providing services, such as technical inspections or sending official documents.
Data collected indirectly: Through cookies collected when visiting the website.
• Cookies and analytics data: Used to improve user experience and analyze behavioral patterns within the platforms, such as usage preferences and past visits.
How SASO use your personal data
SASO uses personal data collected directly or indirectly as follows:
• Providing requested services such as issuing licenses or certificates.
• Communicating with users regarding service updates or appointments.
• Receiving beneficiaries' issues and distributing them to internal specialists.
• Complying with regulatory requirements.
• Completing the registration process, improving, and developing the services provided.
Disclosure of your personal data.
SASO is committed to not disclosing your personal data to any third party for marketing purposes. However, SASO may disclose some data to the following parties:
• Relevant government bodies concerned with compliance with regulations and that have legal justifications to obtain this data.
• Technical service providers such as cloud computing services.
Legal justifications for collecting and processing your personal data
1. Your explicit consent. You can retract approval at any time unless affecting processing operations carried out based on other legal justifications. You can retract the approval by contacting the Personal Data Protection Officer via email: DPO@saso.gov.sa.
2. Private Laboratories Law issued by Royal Decree No. (m/3) dated 21-04-2002 (8-02-1423 AH) and its executive regulations issued by Ministerial Decision No. (307) dated 23-04-2003 (21-02-1424 AH) and its amendments.
3. Product Safety Law issued by Royal Decree No. (m/36) dated 04-08-2024 (29-01-1446 AH) and its executive regulations issued by Ministerial Decision No. (097) dated 20-10-2024 (18-05-1446) AH and the related regulations and documents.
4. Standards and Quality Law issued by Royal Decree No. (m/36) dated 27-04-2024 (29-10-1446 AH) and its executive regulation issued by Ministerial Decision No. (098) dated 20-11-2024 (18-05-1446 AH) and the related documents.
5. Measurement and Calibration Law issued by Royal Decree No. (m/79) dated 09-09-2024 (6-03-1446 AH) and its executive regulation issued by Ministerial Decision No. (273) dated 12-3-2025 (12-09-1446 AH) and the related documents.
6. Statute of Saudi Standards, Metrology, and Quality Organization issued by Cabinet Resolution No. (216) dated 31-05-2010 (17-06-1431 AH).
7. Statute of Vehicle Periodic Inspection issued by Cabinet Decision No. (386) dated 23-02-2021 (11-07-1442 AH) and its executive regulation issued by Ministerial Decision No. (00072) dated 16-10-2020 (29-02-1443 AH) and the related documents.
8. Regulatory Arrangements for the Heavy Equipment Regulatory Center issued by Cabinet Decision No. (488) dated 06-04-2021 (24-08-1442 AH) and the related documents.
9. Regulation for the Acceptance of Conformity Assessment Bodies issued by the Board of Directors of SASO Resolution No. (153) dated 08-10-2015 (25-12-1436 AH).
10. Any other legal justification that requires the collection and processing of personal data.
SASO has the right to collect and process personal data based on the following legal justifications:
- To meet regulatory requirements.
- To protect public health or public safety.
- To protect the vital interests of individuals.
- To protect SASO’s legitimate interests.
- To fulfill an obligation in which the data subject is a party.
SASO has the right to process personal data for purposes other than those for which it was originally collected, if such processing complies with the provisions of the Personal Data Protection Law and its Executive Regulation.
Storage of Your Personal Data
• Your personal data is stored on secure servers within the Kingdom of Saudi Arabia or with trusted cloud computing service providers. The data is retained in accordance with SASO’s legal obligations and in compliance with the policies and controls of National Cybersecurity Authority and international criteria, ensuring protection against unauthorized access and reducing cybersecurity risks. The data will be securely destroyed once the purpose of its collection has been fulfilled, in a manner that prevents any further access or recovery, in line with the applicable laws, regulations, and instructions in the Kingdom of Saudi Arabia.
• SASO does not transfer or process your personal data outside the Kingdom.
External Links
SASO’s website may contain links to other websites for user convenience. SASO is not responsible for the content of such external websites, their
operation, or any issues arising from their use. Users are solely responsible for any actions they take while using any external websites accessed through the links provided on SASO’s website.
Your Rights Regarding Your Personal Data
• Right to be informed: You have the right to know how SASO collects your personal data, the legal justifications for its collection and processing, how it is processed, stored, and destroyed, and to whom it may be disclosed. You may review all related details in this Privacy Policy or contact us using the information provided below.
• Right to access your personal data: You have the right to access your personal data via email.
• Right to request your personal data: You have the right to request a readable and clear copy of your personal data held by SASO, in accordance with the rules and procedures defined in the Personal Data Protection Law, its Executive Regulation, and the applicable laws in the Kingdom of Saudi Arabia.
• Right to correct your personal data: You have the right to request correction of any personal data that you believe to be inaccurate, incorrect, or incomplete. This may be done through the original data sources or databases from which the data was obtained. If the source of the data is SASO, rectification may be requested through SASO’s support channels.
• Right to destroy your personal data: You have the right to request SASO to destroy your personal data that is no longer needed, unless there is a legal basis that requires its retention.
• Right to retract approval to process your personal data: You have the right to retract approval to process your personal data at any time, in accordance with the applicable laws and regulations in the Kingdom of Saudi Arabia, unless there are legitimate purposes or regulatory obligations that require otherwise.
Except as provided by law, you will not be required to pay any fees to exercise these rights. You may exercise your rights at any time, and SASO will respond to your request within 30 days from the date of receiving the completed request.
For further details or inquiries about the processing of your personal data and how to exercise your rights, please contact SASO’s Personal Data Protection Officer at:
DPO@saso.gov.sa
How to Submit a Complaint or Objection
If you have any concerns or believe that SASO has not complied with the Personal Data Protection Law, you may submit a complaint to SASO’s Data Management Office via:
DMO@saso.gov.sa or by submitting a report through SASO’s official website.
If you are not satisfied with SASO’s handling of your complaint or do not receive a response within 10 working days, you may submit a complaint to the competent authority, Saudi Data and Artificial Intelligence Authority (SDAIA).
Availability of the Privacy Policy
• This Privacy Policy is available on SASO’s website and can be easily accessed. SASO is committed to reviewing and updating the policy periodically, and will record any changes in the attached update history. The most recent update to this Privacy Policy was made on 07/10/2025.
• The SASO's website management reserves the right to add or modify any provisions of this Privacy Policy. Users will be notified of any changes, and SASO reserves the right to terminate a user’s account if they do not accept the updated terms.
• The Arabic language is the official reference in applying these terms and conditions. In case of any discrepancy in interpretation between the Arabic and other language versions, the Arabic text shall prevail.
• In the event of any conflict between the provisions of this Policy and the applicable laws and regulations, the laws and regulations shall prevail.