Privacy Policy

1. Controller

The data controller is:

• Company: Mahsumah Company
• Commercial Registration: 7038325788
• Country: Kingdom of Saudi Arabia
• Email: info@mahsumaah.sa

Technology, hosting, cloud, payment, communications, support, or operational providers may process data on our behalf as processors or service providers.

2. Personal Data We Collect

We may collect different types of data depending on how you use the platform.

Account Data: name, email address, mobile number, password or authentication details, account type, role, profile status, and login records.

Profile Data: photo, nationality, city, country, date of birth (if required), emergency contact, social links, team membership, role or discipline, and biography or racing story.

Driver and Rider Data: license information, vehicle information, racing number, class, team, documents required for registration or safety review, competition history, results and standings, and accreditation and access zones.

Identity and Document Data (where required): National ID, Iqama, passport, driving/riding license, vehicle registration, media credentials, company documents, and supporting documents for verification.

Ticketing and Payment Data: ticket type, order details, payment status, invoice or transaction reference, QR code status, entry and scan records, and refund or cancellation records. We do not intentionally store full card details unless a compliant payment provider requires it; payment card details are generally processed by third-party payment providers.

Media and Content Data: uploaded photos, uploaded videos, press materials, gallery submissions, news or article submissions, comments or messages, and media accreditation requests.

Technical Data: IP address, device information, browser type, operating system, cookies or similar identifiers, log data, security events, usage analytics, and approximate location derived from technical data.

Support Data: support requests, messages, attachments, categories, status, internal notes, and response history.

3. How We Use Personal Data

We may use personal data for the following purposes:

• Creating and managing accounts
• Verifying identity, eligibility, documents, roles, and accreditation
• Managing driver, rider, team, media, volunteer, sponsor, staff, and fan profiles
• Processing championship registration
• Managing tickets, QR codes, badges, wristbands, and access zones
• Processing payments, refunds, invoices, and payment status
• Operating events, safety controls, and check-in
• Publishing approved public profiles, results, standings, news, media, and team pages
• Sending service messages, confirmations, updates, and announcements
• Providing support
• Improving the platform
• Preventing fraud, misuse, unauthorized access, and security incidents
• Meeting legal, regulatory, accounting, tax, safety, and operational obligations
• Protecting our rights, users, staff, partners, and event integrity

4. Legal Basis for Processing

We process personal data where we have an appropriate basis under applicable law. This may include:

• Your consent
• Performance of a contract or requested service
• Compliance with legal or regulatory obligations
• Legitimate operational interests, where permitted
• Safety and security requirements
• Establishment, exercise, or defense of legal claims
• Protection of vital interests in emergencies

Where consent is required, you may withdraw it where applicable, but this may affect your ability to use certain services.

5. Public Information

Some information may be displayed publicly if you choose to participate in public-facing features or if your role requires publication. This may include:

• Driver/rider name
• Racing number
• Photo
• Nationality flag/country
• Team
• Vehicle class
• Results
• Standings
• Biography
• Sponsor information
• Approved media content

We will not intentionally publish sensitive identity documents, payment details, private contact details, or non-public documents.

6. Sharing Personal Data

We may share personal data with:

• Event organizers and operations teams
• Registration reviewers
• Gate and QR check-in staff
• Safety and security personnel
• Payment providers
• Cloud and hosting providers
• Email, SMS, notification, analytics, and support providers
• Media, photography, or production teams where relevant
• Sponsors or partners only where necessary and appropriate
• Governmental, regulatory, judicial, security, or law enforcement authorities where required
• Professional advisers such as lawyers, auditors, and accountants

We do not sell personal data.

7. International Transfers

Some service providers or systems may process or store data outside Saudi Arabia. Where personal data is transferred outside the Kingdom, we will take steps required by applicable law, including using appropriate safeguards, contractual controls, or approved mechanisms where required.

8. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including legal, regulatory, accounting, tax, operational, safety, event, dispute, audit, and archival purposes.

Retention periods may differ depending on data type. For example:

• Account records may be kept while the account is active and for a reasonable period after closure.
• Payment and invoice records may be kept for legal and accounting requirements.
• Event access, QR scan, accreditation, and safety records may be kept for operational, dispute, and legal purposes.
• Published media, results, standings, and public championship records may be retained as part of the public sporting archive unless removal is required by law.

9. Security

We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

Security measures may include access controls, authentication, logging, encryption where appropriate, role-based permissions, backups, monitoring, and restricted administrative access.

No digital platform can guarantee absolute security. You are responsible for keeping your login credentials confidential.

10. Cookies and Analytics

We may use cookies and similar technologies to operate the website, maintain sessions, improve performance, understand usage, remember preferences, enhance security, and support analytics.

You may control cookies through your browser settings. Some features may not function properly if cookies are disabled.

11. Your Rights

Subject to applicable law, you may have rights regarding your personal data, including the right to:

• Be informed about processing
• Access your personal data
• Request correction of inaccurate data
• Request deletion where applicable
• Withdraw consent where processing is based on consent
• Object to certain processing where applicable
• Request restriction or limitation where applicable
• File a complaint with the competent authority where applicable

To exercise rights, contact us using the details below. We may need to verify your identity before responding.

12. Children and Minors

The platform is not intended for unsupervised use by children. If minors are allowed to participate in any event, registration, ticketing, or account feature, guardian consent and additional documents may be required.

We may restrict, reject, or remove minor-related data if legal, safety, or event requirements are not satisfied.

13. Media and Photography at Events

Events may be photographed, filmed, recorded, streamed, or broadcast. By attending or participating in an event, you acknowledge that your image, likeness, vehicle, team, or public participation may appear in event media, promotional materials, live broadcasts, news, or archives, subject to applicable law.

Restricted or sensitive personal information will not be intentionally published.

14. Third-Party Links

The platform may contain links to third-party websites or services. We are not responsible for the privacy practices, terms, security, or content of third-party services.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on the platform with the revised date. Continued use of the platform after publication means you acknowledge the updated Policy.

16. Contact

For privacy questions, requests, or complaints, contact:

• Email: info@mahsumaah.sa
• Company: Mahsumah Company
• Country: Kingdom of Saudi Arabia