Privacy Notice

The General Irrigation Authority is a public governmental institution that aims to ensure the sustainability of water resources by supplying water to the agricultural, industrial, and urban sectors. The Authority continuously strives to improve the quality and coverage of irrigation water networks across the Kingdom and ensure compliance with applicable standards to maximize the benefits derived from water resources. In pursuit of its objectives, the Authority collects and processes personal data for the purposes outlined in this notice and in accordance with the relevant policies and regulations.
You may contact us through the various available channels.

• Full Name
• National ID Number
• Mobile Number
• Email Address
• Date of Birth
• City
• Commercial Registration Number
• Educational Qualifications
• Professional Experience
• Job Title

• Personal data is collected when the data subject provides it while registering for any of the services mentioned above, or by logging in through the National Single Sign-On (Nafath) and Tawakkalna Services. Failure to provide the required information may affect the ability to deliver the requested services.
• Your personal data may also be collected indirectly through cookies gathered when visiting the website.

Personal data is used for the following purposes:

• Providing Rai Platform services.
• Improving the beneficiary experience.
• Administrative Communication Services.
• Processing Data Sharing Requests.
• Providing services through the Rai Application or Tawakkalna Services.

Personal data collected through the Authority’s website is not shared or exchanged with other entities except in the following circumstances:

• If you consent to its disclosure in accordance with applicable laws.
• If your personal data was collected from a publicly available source.
• If the requesting party is a public authority and the disclosure is required for public interest, security purposes, implementation of another law, or compliance with judicial requirements.
• If disclosure is necessary to protect public health, public safety, or the life or health of specific individuals.
• If the disclosure is limited to subsequent processing in a manner that does not identify the personal data owner or any other individual.

In accordance with the Personal Data Protection Policy issued by the National Data Management Office, the legal bases relied upon for processing personal data are:

• Your explicit consent. You may withdraw your consent at any time unless another legal basis applies. To do so, you may contact the Data and Records Management Department at: DMO@sio.gov.sa.
• Fulfillment of a contractual obligation.
• Serving the public interest.

Your personal data is stored securely on servers located within the Authority’s premises. These servers are protected using advanced technologies in compliance with the policies and controls of the National Cybersecurity Authority. Personal data will be destroyed within three years from the date of storage.

Under the Personal Data Policy, you have the following rights, which primarily depend on the purpose of collecting and processing the personal data:

• Right to Know: The personal data subject has the right to know our methods of collecting their data, the statutory basis for its collection and processing, how it is processed, stored, and destroyed, and with whom it will be shared. You can review all details through the Privacy Policy—this policy—or you can contact us using the information detailed in Clause Nine.

• Right of Access to Data: The personal data subject has the right to know and access their personal data that is being processed.

• Right to Correct Personal Data: The personal data subject has the right to request the correction of their personal data that they deem inaccurate, incorrect, or incomplete, via the email detailed in Clause Nine. It will be reviewed and updated within [seven working days], and the personal data subject will be notified of this via email.

• Right to Destroy Personal Data: The personal data subject has the right to request the destruction of their personal data under certain circumstances, unless there is a statutory provision specifying a specific retention period or contractual requirements.

• Right to Object: The personal data subject may withdraw consent for the processing of their personal data—at any time—unless there are legitimate purposes that require otherwise.

• Right to Restrict Processing: The personal data subject has the right to request the suspension or restriction of the use of their personal data for specific purposes, while only retaining and storing it.

• Right to Data Portability: The personal data subject has the right to request a copy of their personal data in a machine-readable format via the email detailed in Clause Nine. It will be provided to them—free of charge—within [seven working days] via email.

The personal data subject has the right to request access to, correction of, or deletion of their personal data. For more details regarding personal data processing and how to exercise your rights, please contact the Personal Data Protection Officer at the General Irrigation Authority using the details below:

Name: Data and Records Management Department
Email: DMO@sio.gov.sa

If you have any complaints or inquiries related to this Privacy Policy or the handling of personal data, please contact the website administration at:
info@sio.gov.sa

If no response is received within seven business days, the complaint or inquiry may be escalated to the Data Management Department at the Ministry of Environment, Water and Agriculture via:
info@mewa.gov.sa

If the issue remains unresolved or no response is received within seven business days, it may be escalated to the National Data Management Office via:
pr@ndmo.gov.sa.

• This Privacy Policy was last updated on January 30, 2025.

• The Authority reserves the right to add or amend any provisions of this Privacy Policy by announcing such changes on the website. The Authority also reserves the right to terminate a data subject’s account if they do not accept any changes made to the Privacy Policy.

• Arabic is the governing language for the interpretation and application of these terms and conditions. In the event of any discrepancy arising from translations into other languages, the Arabic text shall prevail.