HomeCompanyPrivacy Policy

Privacy Policy

How Sahab HR collects, uses, stores and protects information while delivering payroll and HR solutions in the Kingdom of Saudi Arabia.

Last updated November 26, 202513 sections

At a glance

  • PDPL compliantSaudi Personal Data Protection Law
  • Stored in Saudi ArabiaOr legally approved data regions
  • Employer is the controllerSahab HR acts as processor
  • Never soldNo sharing with advertisers

Sahab HR (“Sahab HR,” “we,” “us,” or “our”) is committed to maintaining the privacy and security of all personal and organizational data entrusted to us. This Privacy Policy explains how Sahab HR collects, uses, stores, and protects information while delivering payroll and HR solutions in the Kingdom of Saudi Arabia. By using Sahab HR, you agree to this Policy and the data practices described herein, including compliance with WPS and GOSI regulations.

1Scope and Applicability

This Privacy Policy applies to all organizations that subscribe to Sahab HR, their HR administrators and users, employees whose data is processed through the platform, and to visitors who access our website or online services. It does not apply to external websites, links, or third-party applications not controlled by Sahab HR.

2Data We Collect

2.1Information Provided by Organizations

Sahab HR collects data directly from organizations and their authorized users when creating accounts, requesting demos, subscribing to services, or contacting support. This may include company name, registration details, contact person information, billing and payment details, and communications between the organization and Sahab HR.

2.2Employee Data Processed on Behalf of Employers

Employers provide Sahab HR with employee-related information necessary for payroll and HR operations. This typically includes name, Iqama or National ID, nationality, job title, department, employment start date, salary structure, allowances, deductions, attendance, leave records, working hours, and WPS and GOSI contribution details. This information belongs to the employer, who acts as the data controller. Sahab HR only processes employee data based on the employer’s instructions and does not independently collect or alter employee records.

2.3Information Collected Automatically

When a user accesses Sahab HR or visits the company’s website, the platform automatically collects technical and analytical data such as IP address, browser type, device model, operating system details, user session duration, access timestamps, and activity logs. This information is used for monitoring system stability, detecting anomalies, and improving platform security and performance.

2.4Cookies and Tracking

Sahab HR uses cookies and related technologies to maintain session integrity, personalize user experiences, and enhance overall service reliability. Users can manage cookie preferences through their browsers, though disabling them may affect functionality.

3Purpose and Use of Information

The data collected is used to deliver payroll, HR, and compliance services; generate WPS files; calculate GOSI contributions; support leave and attendance management; provide customer support; improve platform performance and security; and ensure compliance with Saudi Arabian laws. Sahab HR may also use aggregated, anonymized data for analytical and optimization purposes. No personal or identifiable data is sold, rented, or traded.

4Data Processing Responsibilities

Sahab HR acts as a data processor, handling information solely under the organization’s instructions. The employer remains the legal controller of its employee data. Sahab HR does not access or process payroll records, salary slips, or HR details unless necessary to provide technical support. Employers are expected to ensure all data submitted complies with applicable data protection laws and employee consent requirements.

5Legal Basis for Processing

Sahab HR processes personal data on the lawful bases of contractual necessity, legitimate interest in providing secure and efficient services, and regulatory compliance under Saudi Labor Law, WPS, and GOSI regulations.

6Data Sharing and Disclosure

Information is shared strictly for legitimate operational or compliance purposes. Sahab HR may share data with banking partners for salary transfers and WPS file generation, with regulatory authorities for statutory reporting, with ERP or biometric device providers if integrated by the client, and with secure cloud hosting or cybersecurity partners as part of infrastructure management. All third parties are vetted to ensure confidentiality and compliance with Saudi data laws. Sahab HR does not share data with advertisers or marketing agencies.

7Data Security

Sahab HR employs advanced security protocols including encrypted data storage and transmission, role-based access controls, multi-factor authentication, regular security audits, and continuous system monitoring. All operations are hosted on Saudi-approved cloud infrastructure. While Sahab HR takes every precaution to protect data, organizations share the responsibility of safeguarding credentials and monitoring administrative access to their accounts.

8Data Retention

Sahab HR retains personal and organizational data for as long as necessary to deliver subscribed services, comply with local legal requirements, resolve disputes, and enforce contracts. When data is no longer required, it is securely deleted or anonymized. Employers may request data export or deletion, subject to applicable retention laws.

9Data Storage and Localization

All Sahab HR data is stored within cloud servers located in Saudi Arabia or data regions legally approved for use in the Kingdom. If any cross-border data transfer becomes necessary, Sahab HR will ensure that it meets the data protection and privacy requirements mandated by Saudi authorities.

9.1Compliance Statement with Saudi Data Protection Law

Sahab HR strictly adheres to the provisions of the Personal Data Protection Law (PDPL) and all applicable Saudi Arabian privacy and data residency regulations. All personal and organizational information is processed, stored, and transferred in accordance with these laws. Sahab HR conducts regular reviews to ensure ongoing compliance, promptly updates policies to reflect new regulatory requirements, and works closely with appropriate governmental bodies to assure the integrity and security of all client data within the Kingdom’s jurisdiction. In the event of any regulatory updates or mandates, Sahab HR will notify affected organizations, ensuring that only lawfully permitted data transfers or processing activities are undertaken.

10User Rights and Requests

Depending on the user’s jurisdiction and role, individuals may have the right to request access to their information, correction of inaccuracies, export of their data, or deletion where permissible. Requests should be directed either to the organization’s system administrator or to Sahab HR’s privacy contact detailed below. Sahab HR will respond to all valid requests in accordance with legal requirements.

11Third-Party Links

Sahab HR’s website or dashboard may include links to third-party websites or external content. The company is not responsible for the security or privacy practices of these sites and encourages users to review their respective privacy policies before providing any personal information.

12Policy Updates

Sahab HR reserves the right to modify or update this Privacy Policy periodically. Any material changes will be published on our official website, and significant updates will be communicated to client organizations in advance of enforcement.

13Contact Information

For any inquiries, privacy-related requests, or data protection questions, you can contact Sahab HR at: