Privacy
Policy

The personal data we collect depends on how you interact with Ordinal.

Information you provide to us

When you contact Ordinal or submit an enquiry, we may collect: your name; work email address; company; role; enquiry type; the contents of your message; and other information you choose to provide.

When you are provided access to authenticated areas of Ordinal, we may process information required to establish, authenticate and administer that access.

Technical and usage information

When you use our website or platform, we may process limited technical information necessary to operate, secure and diagnose the service. This may include information such as request identifiers, timestamps, authentication events, browser or device information, IP address where available to the relevant service, and technical logs.

Customer and operational data

Organisations working with Ordinal may provide operational information for network analysis, pilots or use of the platform. Depending on the dataset supplied by the customer, operational data may contain information capable of identifying an individual.

Where Ordinal processes personal data contained in customer-provided operational datasets on behalf of a customer, the respective responsibilities of Ordinal and the customer may also be governed by the applicable commercial agreement or data-processing terms.

Customers should provide only the data necessary for the agreed purpose and should avoid including unnecessary personal data.

We may collect personal data:

• directly from you when you contact us or submit information;
• when an authorised account is created or used;
• through your interaction with the Ordinal website or platform;
• from an organisation you represent or work with;
• through operational datasets supplied to Ordinal for an agreed analysis, pilot or service; and
• automatically through systems necessary to operate, secure and maintain our services.

We seek to limit collection to information reasonably necessary for the relevant purpose.

Depending on your interaction with Ordinal, we may process personal data to:

• respond to enquiries and communicate with you;
• evaluate requests for network analyses, pilots or commercial discussions;
• provide and administer access to Ordinal;
• perform agreed analyses or services;
• operate, maintain and improve the reliability of our platform;
• protect Ordinal, its users and customers against misuse, unauthorised access and security threats;
• diagnose technical issues;
• maintain appropriate operational and security records;
• manage customer and business relationships;
• comply with applicable legal and regulatory requirements; and
• establish, exercise or defend legal rights where necessary.

We do not use personal data for purposes incompatible with the purpose for which it was collected unless permitted or required by applicable law.

Ordinal processes personal data only where there is an appropriate basis under applicable law. Depending on the circumstances, this may include:

• your consent;
• taking steps at your request before entering into a contractual relationship;
• performing an agreement;
• complying with a legal obligation;
• pursuing a legitimate interest where permitted by applicable law and where the required conditions are satisfied; or
• another lawful basis recognised under applicable Saudi law.

Where processing depends on consent, you may withdraw that consent in accordance with applicable law. Withdrawal does not affect processing lawfully carried out before the withdrawal.

Information submitted through the Ordinal Contact page is used to receive, review and respond to your enquiry and, where relevant, to continue a business discussion you initiated.

Contact enquiries may include your: name; work email; company; role; enquiry type; and message.

Submitting the Contact form does not subscribe you to marketing communications.

Please do not submit confidential operational datasets, customer records or other sensitive information through the public Contact form.

Ordinal may process operational datasets supplied by customers for network analysis, pilots or other agreed services.

The information required depends on the agreed work and may include order, location, delivery-window, fleet, vehicle, capacity, shift, depot and related operational information.

Ordinal seeks to use only the information necessary to perform the agreed analysis or service.

Customers are responsible for ensuring that information they provide to Ordinal is lawfully collected and may lawfully be disclosed or otherwise made available to Ordinal for the agreed purpose.

Where appropriate, additional confidentiality, data-processing, security or retention requirements will be addressed in the relevant agreement between Ordinal and the customer.

Ordinal uses technology and infrastructure providers to operate its website, authentication, database, application infrastructure and related services. These providers may process information on Ordinal's behalf where necessary to provide their services.

Ordinal seeks to limit such processing to what is necessary and to use appropriate contractual, organisational and technical safeguards.

We do not sell personal data.

Ordinal is based in Saudi Arabia, but some of the technology infrastructure and service providers used to operate Ordinal may process or host data outside the Kingdom. Accordingly, personal data may, where applicable, be transferred to or processed in another country.

Where Saudi law applies to a transfer of personal data outside the Kingdom, Ordinal will seek to carry out that transfer in accordance with applicable requirements governing international transfers and appropriate safeguards. This may include limiting transfers to what is necessary and applying contractual, organisational or technical safeguards as required.

Ordinal retains personal data only for as long as reasonably necessary for the purpose for which it was collected, subject to applicable legal, contractual, security and operational requirements. Different categories of information may therefore have different retention periods.

When personal data is no longer required, Ordinal will delete, destroy or anonymise it as appropriate and in accordance with applicable requirements.

Customer operational data may also be subject to retention and deletion terms agreed with the relevant customer.

Ordinal uses technical and organisational measures designed to protect information against unauthorised access, disclosure, alteration, loss or destruction.

Depending on the relevant system, these measures may include authentication, access controls, tenant isolation, protected credentials, logging, secure application architecture, backups and recovery controls.

No information system can be guaranteed to be completely secure. Ordinal therefore reviews and develops its safeguards as the platform and its use evolve.

Ordinal may disclose personal data where reasonably necessary:

• to service providers processing information on our behalf;
• to professional advisers where necessary;
• to comply with applicable law, regulation, legal process or lawful authority;
• to protect legal rights or the security of Ordinal, its customers or users;
• in connection with a corporate transaction where permitted by law; or
• where you have authorised the disclosure.

We do not sell personal data.

Where a disclosure involves a transfer outside Saudi Arabia, applicable cross-border transfer requirements will be considered.

Subject to the Personal Data Protection Law, its Implementing Regulations and other applicable requirements, you may have rights in relation to your personal data, including rights concerning:

• being informed about the processing of your personal data;
• accessing your personal data;
• obtaining personal data in an intelligible form;
• requesting correction, completion or updating of inaccurate personal data; and
• requesting destruction of personal data where applicable.

Other rights may apply depending on the circumstances and legal basis of processing.

To exercise a privacy right or ask a question about your personal data, contact: hello@ordinalsa.com

We may need to verify your identity before acting on a request.

Ordinal may use technologies necessary for the operation, authentication, security and functionality of its website and platform.

If Ordinal introduces non-essential analytics, advertising or other tracking technologies that require additional notice or consent, this Privacy Policy and the relevant consent mechanisms will be updated accordingly.

Ordinal's website and services are intended for business and professional use and are not directed towards children. We do not knowingly seek to collect personal data from children through the public Ordinal website.

Ordinal may update this Privacy Policy as its services, infrastructure or legal obligations change. The current version will be published on this page with its latest revision date.

Where required by applicable law, we will provide additional notice of material changes.

For questions, requests or concerns concerning privacy or personal data:

Ordinal

Riyadh, Saudi Arabia

hello@ordinalsa.com