Privacy Policy

Introduction

Welcome to the Next Simulation platform, hereinafter referred to as "the Company" or "We", a Saudi company specializing in providing innovative technological solutions in the field of education and entertainment using virtual reality technologies, through the creation and development of scenarios serving multiple fields, by transforming content into an immersive interactive environment that accurately simulates reality and contributes to enhancing efficiency and conveying the idea with the highest levels of impact to the user.

This policy explains how your personal data is collected, processed, and protected, in accordance with the provisions of the Personal Data Protection Law (PDPL) issued by the Saudi Data and Artificial Intelligence Authority (SDAIA) and its implementing regulations applicable in the Kingdom of Saudi Arabia.

By using our website or platform, you acknowledge that you have read and agreed to this policy and its provisions.

1. Definitions

For the purposes of this policy, the following terms shall have the meanings assigned to them below:

Term	Meaning
Personal Data	Any statement that directly or indirectly identifies its owner, such as name, email address, or mobile number.
User/Trainee	A natural person who uses the website or platform for training or browsing purposes.
Institutional Client	The legal entity (company or government entity) that contracts with the company to provide training for its employees.
Processing	Any operation performed on personal data such as collection, storage, analysis, sharing, and deletion.
Regulation	Saudi Personal Data Protection Law (PDPL) and its implementing regulations.

2. The Data We Collect

We collect the following types of personal data to the extent necessary to provide our services:

2.1 Basic Identification Data

• Full Name
• Email Address

2.2 Platform Usage Data

• Internet Protocol (IP) address and type of device and browser used
• Pages visited, session duration, and date and time of access
• Cookies necessary for website operation and to improve user experience

2.3 Training and Performance Data

• Results of training tests and assessments
• Performance indicators within the virtual reality environment (response time, completion rate, error rate)
• Progress records across different training phases
• Observations and comments for each trainee

3. Purposes of Data Collection and Processing

We use your data exclusively for the following legitimate purposes:

Purpose	Description
Service Provision	To enable you to access the platform and use the training content
Performance Measurement	To analyze training results and issue performance reports for trainees and contracting parties
Service Improvement	To develop training content and user interface based on usage data
Communication	Sending account notifications and technical updates related to our services
Regulatory Compliance	Meeting applicable legal and regulatory requirements in the Kingdom
Information Security	Monitoring illegal activities and protecting the platform from breaches

4. Regulatory Basis for Processing

Our processing of your personal data is based on one of the following regulatory bases:

• Your explicit consent upon registration on or use of the platform
• Execution of the contract concluded with the institutional client to which you belong
• Compliance with applicable regulatory or contractual requirements
• The legitimate interests of the company, provided that this does not conflict with your fundamental rights

5. Data Sharing with Third Parties

We are committed to not selling your personal data to any third party under any circumstances, except that we may share some data with the following parties within the limits of service requirements:

• Institutional Client (employer): In case training is provided through your entity, we share performance reports and results with the relevant management
• Technical service providers: Such as hosting provider (Hostinger) and analytics service providers, to the extent necessary for the operation of the platform
• Official entities: Upon receiving an official regulatory request from a competent authority in the Kingdom of Saudi Arabia

All parties with whom we share data are bound by confidentiality and protection standards equivalent to our standards, through written data processing agreements.

6. Data Transfer Outside the Kingdom

Due to our use of hosting services that may include servers outside the Kingdom of Saudi Arabia, we are committed to the following:

• Notifying you in advance of the transfer of your data outside the Kingdom
• Ensuring that the receiving country provides an appropriate level of data protection
• Entering into binding contractual agreements with hosting providers that guarantee the protection of your data
• Complying with the data transfer regulations issued by the Saudi Authority for Data and Artificial Intelligence (SDAIA)

7. Data Retention Period

We retain your data for the periods specified below, after which it will be deleted or securely anonymized:

Data Type	Retention Period
Account Data (name and email)	Throughout account activity period + 12 months after closure
Platform Usage Data	24 months from collection date
Training Results and Performance	According to contract duration with institutional client, maximum 5 years
Accounting and Tax Records	10 years according to Saudi regulations
Cookies	Depending on file type, from single session to 12 months

8. Your Rights Under the Regulation

The Saudi Personal Data Protection Law grants you the following rights which you can exercise at any time:

Right	Description
Right to Know	Know the legal basis and purpose for collecting your data
Right to Access	Review your data held by us and obtain a copy of it
Right to Correct	Request amendment of any inaccurate or incomplete data
Right to Delete	Request deletion of your data if the purpose is no longer valid
Right to Object	Object to processing of your data for certain purposes
Right to Withdraw Consent	Withdraw your consent at any time without affecting the legality of previous processing

To exercise any of these rights, please contact us via the dedicated data protection email mentioned at the end of this policy.

9. Data Protection Security Measures

We implement a set of technical and organizational controls to protect your data, including:

• Data encryption during transmission using (SSL/TLS) protocol
• Encryption of sensitive data during storage
• Access permissions based on "need to know" principle
• Regular data backup
• Periodic review and update of security measures when needed
• Employee training on data protection practices

10. Cookies

We use cookies to improve your experience on our website and platform, which are divided into:

• Essential cookies: Cannot be disabled as they are necessary for website operation
• Performance cookies: To measure your interaction with the website and improve content
• Functionality cookies: To save your preferences such as language

You can control these files through your browser settings, noting that disabling essential cookies may affect platform functionality.

11. Minors' Data

Our platform is intended for use by adults (18 years and older) or minors registered through accredited training entities. We do not collect data from children under 18 years old directly without parental or accredited entity consent.

12. Contact and Complaints

For any inquiries, complaints, or to exercise your rights under this policy, please contact us via:

Method	Details
Email	Sales@nextsimu.com

13. Governing Law and Jurisdiction

This policy is governed by and construed in accordance with the laws of the Kingdom of Saudi Arabia, and the Saudi courts shall have exclusive jurisdiction to settle any dispute arising from or related to its application or interpretation.

Thank you for trusting Next Simulation