Privacy Policy

​​Policy Date: 11/12/2025

Saudi Standards, Metrology and Quality Organization was established by The Council of Ministers' Resolution No. 216 dated 17/06/1431 AH, and is affiliated with the Minister of Commerce. SASO is an independent legal entity with financial and administrative autonomy. Committed to protecting your privacy and ensuring the secure and appropriate use of your personal data, SASO is dedicated to safeguard user data and information. It is committed to maintain the confidentiality and privacy of this data and using it to achieve the desired level of service in accordance with the regulations, rules, and instructions in force in the Kingdom of Saudi Arabia. This policy details what personal data will be collected, the purpose of collecting your personal data, its content, how it will be collected, stored, processed, used, and destroyed, the rights of data subjects, and how to exercise those rights.

You can also contact us through the channels listed below for further information or to exercise your rights. Using SASO's website constitutes your acceptance of this Privacy Policy.

Personal Data Collected

We collect and process personal data, including the following mandatory fields:

•  Name

•  Date of Birth

 • National ID/Residence Permit Number (Iqama)

•  Mobile Number

 • Email Address

•  Address

How and Purpose of Collecting Your Personal Data:

Data Collected Directly: Data provided by the data subject to the website during registration is collected and is not subsequently processed in a manner inconsistent with the purpose for which it was collected.

• Name: The name is collected to accurately identify the user and issue licenses or certificates in their official name.

• Date of Birth: Used to determine the user's legal eligibility to benefit from the services provided and to ensure compliance with relevant regulations.

• National ID: Collected to verify personal identity and ensure legal documentation for all transactions related to the services.

• Mobile Number: Used for immediate communication with users, such as sending notifications related to services, appointments, or any other updates and services.

• Email Address: Used to share information and reports electronically, and to communicate regarding inquiries, official notices, or to send notifications related to services, appointments, or any other updates and services.

• Address: Used to determine the user's geographic location for service delivery purposes, such as technical inspections or sending official documents.

Data collected indirectly: through cookies, which are collected when you visit the website.

• Cookie and analytics data: used to improve user experience and analyze behavioral patterns within the platforms, such as usage preferences and past visits.

How We Use Your Personal Data

We use personal data collected directly or indirectly as follows:

• To provide requested services such as issuing licenses or certificates.

• To communicate with users regarding service updates or appointments.

• To receive user complaints and forward them to the appropriate internal specialists.

• To comply with regulatory requirements.

• To complete the registration process and improve and develop the services provided.

Disclosure of Your Personal Data

We are committed to not disclose your personal data to any third party for marketing purposes. However, we may disclose some data to the following parties:

• Government agencies responsible for compliance with regulations and which have a legal basis to obtain this data.

 

• Technology service providers, such as cloud computing services.

Legal justifications for collecting and processing your personal data

1. Your explicit consent, which you may withdraw at any time, provided that it does not affect processing operations carried out based on other legal justifications. You may withdraw your consent by contacting the Personal Data Protection Officer via email at: DPO@saso.gov.sa.

2. The Private Laboratories Law issued by Royal Decree No. (M/3) dated 8/02/1423 AH and its implementing regulations issued by Ministerial Resolution No. (307) dated 02/21/1424 AH and its amendments.

3. The Product Safety System issued by Royal Decree No. (M/36) dated 01/29/1446 AH and its implementing regulations issued by Ministerial Resolution No. (097) dated 05/18/1446 AH and all related regulations and documents.

4. The Standards and Quality System issued by Royal Decree No. (M/36) dated 10/29/1446 AH and its Implementing Regulations issued by Ministerial Resolution No. (098) dated 05/18/1446 AH and related documents.

5. The Measurement and Calibration System issued by Royal Decree No. (M/79) dated 6/03/1446 AH and its Implementing Regulations issued by Ministerial Resolution No. (273) dated 12/09/1446 AH and related documents.

6. The regulation of Saudi Standards, Metrology and Quality Organization (SASO) issued by The Council of Ministers' Resolution No. (216) dated 17/06/1431 AH (June 17, 2010).

7. The regulation for periodic technical inspection of vehicles issued by The Council of Ministers' Resolution No. (386) dated 11/70/1442 AH (July 11, 2021) and its implementing regulation issued by Ministerial Resolution No. (00072) dated 29/20/1443 AH (July 29, 2022) and related documents.

8. The organizational arrangements for the Heavy Equipment Regulation Center issued by The Council of Ministers' Resolution No. (488) dated 24/08/1442 AH (August 24, 2021) and related documents.

9. The regulation for accepting conformity assessment bodies issued by SASO's Board of Directors Resolution No. (153) dated 25/12/1436 AH (December 25, 2015).

10. Any other legal justification requiring the collection and processing of personal data.

SASO may collect and process personal data based on the following regulatory justifications:

1. To fulfill regulatory requirements.

2. To protect public health or public safety.

3. To protect the vital interests of individuals.

4. To protect the legitimate interests of SASO.

5. To fulfill an obligation to which the data subject is a party.

SASO may also process personal data for purposes other than those for which it was collected, in accordance with the provisions of the Personal Data Protection Law and its Implementing Regulation.

Storing Your Personal Data

• Your personal data is stored on secure servers within the Kingdom of Saudi Arabia or with trusted cloud computing providers. Data retention is carried out in accordance with our regulatory obligations, compliant with the policies and regulations of the National Cybersecurity Authority and international standards. This ensures that unauthorized access is prevented and cybersecurity risks are prevented. This data is destroyed when the purpose for which it was collected is fulfilled, and the destruction is carried out in a secure manner in which the data cannot be accessed or recovered again, in accordance with the regulations, rules and instructions in force in the Kingdom of Saudi Arabia.

• SASO does not transfer or process your personal data outside the Kingdom.

External Links

Links to other websites have been provided on SASO's website in consideration of the user's needs. SASO is not responsible for any content on those websites, nor for any person's use of them or their proper functioning, or for any problems that may arise from their use. The user is responsible for all actions he takes while using any of the websites he visits through those links on this website.

Your rights regarding your personal data

• The right to know: You have the right to know how we collect your personal data, the legal justification for collecting and processing it, how it is processed, stored, and destroyed, and to whom it will be disclosed. You can find all the details in the privacy policy or you can contact us using the information provided below.

• The right to access your personal data: You have the right to access your personal data via email.

• The right to request your personal data: You have the right to request your personal data held by SASO in a clear and legible format, in accordance with the regulations and procedures stipulated by the Personal Data Protection Law, its implementing regulations, and the applicable laws in the Kingdom of Saudi Arabia.

• The right to correct your personal data: You have the right to request the correction of your personal data that you believe is inaccurate, incorrect, or incomplete. This can be done through the data sources or databases from which the data was imported. If the data source is SASO, this can be done through the support channels.

• The right to destroy your personal data: You have the right to request SASO to destroy your personal data that is no longer needed, unless there is a legal justification for retaining it.

• The right to withdraw your consent to the processing of your personal data: You have the right to withdraw your consent to the processing of your personal data at any time, in accordance with the applicable laws and regulations in force in the Kingdom of Saudi Arabia, unless there are legitimate purposes or regulatory or legal restrictions that require otherwise.

Except as otherwise provided by law, you will not be required to pay any fees to exercise these rights. You may exercise the aforementioned rights at any time. If you submit a request to exercise any of these rights, you will receive a response within 30 days of the date of receipt of the complete request.

For further details or inquiries regarding the processing of your personal data and how to exercise your rights, you can contact the Personal Data Protection Officer at SASO via email at DPO@saso.gov.sa.

How to File a Complaint or Objection

If you have any concerns or believe we have not complied with the Personal Data Protection Law, you can file a complaint with the Data Management Office at SASO via email at DMO@saso.gov.sa or by submitting a report through