Privacy Policy
Next Simulation
Introduction
Welcome to the Next Simulation platform, hereinafter referred to as "the Company" or "We", a Saudi company specializing in providing innovative technological solutions in the field of education and entertainment using virtual reality technologies, through the creation and development of scenarios serving multiple fields, by transforming content into an immersive interactive environment that accurately simulates reality and contributes to enhancing efficiency and conveying the idea with the highest levels of impact to the user.
This policy explains how your personal data is collected, processed, and protected, in accordance with the provisions of the Personal Data Protection Law (PDPL) issued by the Saudi Data and Artificial Intelligence Authority (SDAIA) and its implementing regulations applicable in the Kingdom of Saudi Arabia.
By using our website or platform, you acknowledge that you have read and agreed to this policy and its provisions.
1. Definitions
For the purposes of this policy, the following terms shall have the meanings assigned to them below:
| Term | Meaning |
|---|---|
| Personal Data | Any statement that directly or indirectly identifies its owner, such as name, email address, or mobile number. |
| User/Trainee | A natural person who uses the website or platform for training or browsing purposes. |
| Institutional Client | The legal entity (company or government entity) that contracts with the company to provide training for its employees. |
| Processing | Any operation performed on personal data such as collection, storage, analysis, sharing, and deletion. |
| Regulation | Saudi Personal Data Protection Law (PDPL) and its implementing regulations. |
2. The Data We Collect
We collect the following types of personal data to the extent necessary to provide our services:
2.1 Basic Identification Data
- Full Name
- Email Address
2.2 Platform Usage Data
- Internet Protocol (IP) address and type of device and browser used
- Pages visited, session duration, and date and time of access
- Cookies necessary for website operation and to improve user experience
2.3 Training and Performance Data
- Results of training tests and assessments
- Performance indicators within the virtual reality environment (response time, completion rate, error rate)
- Progress records across different training phases
- Observations and comments for each trainee
3. Purposes of Data Collection and Processing
We use your data exclusively for the following legitimate purposes:
| Purpose | Description |
|---|---|
| Service Provision | To enable you to access the platform and use the training content |
| Performance Measurement | To analyze training results and issue performance reports for trainees and contracting parties |
| Service Improvement | To develop training content and user interface based on usage data |
| Communication | Sending account notifications and technical updates related to our services |
| Regulatory Compliance | Meeting applicable legal and regulatory requirements in the Kingdom |
| Information Security | Monitoring illegal activities and protecting the platform from breaches |
4. Regulatory Basis for Processing
Our processing of your personal data is based on one of the following regulatory bases:
- Your explicit consent upon registration on or use of the platform
- Execution of the contract concluded with the institutional client to which you belong
- Compliance with applicable regulatory or contractual requirements
- The legitimate interests of the company, provided that this does not conflict with your fundamental rights
5. Data Sharing with Third Parties
We are committed to not selling your personal data to any third party under any circumstances, except that we may share some data with the following parties within the limits of service requirements:
- Institutional Client (employer): In case training is provided through your entity, we share performance reports and results with the relevant management
- Technical service providers: Such as hosting provider (Hostinger) and analytics service providers, to the extent necessary for the operation of the platform
- Official entities: Upon receiving an official regulatory request from a competent authority in the Kingdom of Saudi Arabia
All parties with whom we share data are bound by confidentiality and protection standards equivalent to our standards, through written data processing agreements.
6. Data Transfer Outside the Kingdom
Due to our use of hosting services that may include servers outside the Kingdom of Saudi Arabia, we are committed to the following:
- Notifying you in advance of the transfer of your data outside the Kingdom
- Ensuring that the receiving country provides an appropriate level of data protection
- Entering into binding contractual agreements with hosting providers that guarantee the protection of your data
- Complying with the data transfer regulations issued by the Saudi Authority for Data and Artificial Intelligence (SDAIA)
7. Data Retention Period
We retain your data for the periods specified below, after which it will be deleted or securely anonymized:
| Data Type | Retention Period |
|---|---|
| Account Data (name and email) | Throughout account activity period + 12 months after closure |
| Platform Usage Data | 24 months from collection date |
| Training Results and Performance | According to contract duration with institutional client, maximum 5 years |
| Accounting and Tax Records | 10 years according to Saudi regulations |
| Cookies | Depending on file type, from single session to 12 months |
8. Your Rights Under the Regulation
The Saudi Personal Data Protection Law grants you the following rights which you can exercise at any time:
| Right | Description |
|---|---|
| Right to Know | Know the legal basis and purpose for collecting your data |
| Right to Access | Review your data held by us and obtain a copy of it |
| Right to Correct | Request amendment of any inaccurate or incomplete data |
| Right to Delete | Request deletion of your data if the purpose is no longer valid |
| Right to Object | Object to processing of your data for certain purposes |
| Right to Withdraw Consent | Withdraw your consent at any time without affecting the legality of previous processing |
To exercise any of these rights, please contact us via the dedicated data protection email mentioned at the end of this policy.
9. Data Protection Security Measures
We implement a set of technical and organizational controls to protect your data, including:
- Data encryption during transmission using (SSL/TLS) protocol
- Encryption of sensitive data during storage
- Access permissions based on "need to know" principle
- Regular data backup
- Periodic review and update of security measures when needed
- Employee training on data protection practices
10. Cookies
We use cookies to improve your experience on our website and platform, which are divided into:
- Essential cookies: Cannot be disabled as they are necessary for website operation
- Performance cookies: To measure your interaction with the website and improve content
- Functionality cookies: To save your preferences such as language
You can control these files through your browser settings, noting that disabling essential cookies may affect platform functionality.
11. Minors' Data
Our platform is intended for use by adults (18 years and older) or minors registered through accredited training entities. We do not collect data from children under 18 years old directly without parental or accredited entity consent.
12. Contact and Complaints
For any inquiries, complaints, or to exercise your rights under this policy, please contact us via:
| Method | Details |
|---|---|
| sales@nextsimu.com |
13. Governing Law and Jurisdiction
This policy is governed by and construed in accordance with the laws of the Kingdom of Saudi Arabia, and the Saudi courts shall have exclusive jurisdiction to settle any dispute arising from or related to its application or interpretation.
Thank you for trusting Next Simulation