Privacy Policy

This Policy applies to personal data processed through the Step to the World (STW) website, its contact forms, and its related digital services and features, to the extent that the entity responsible for Step to the World acts as a controller or is otherwise responsible for the processing under applicable laws.

Certain future services or events may be subject to additional privacy notices or terms depending on the nature of the service, the event organizer, the content owner, and the service providers involved.

At its current stage, this website serves as an informational, marketing, and investment platform for Step to the World.

We may collect information that users voluntarily provide when contacting us, including:

1. Name.
2. Email address.
3. Phone number and country code.
4. Reason for contacting us and the content of the message.
5. Any other information the user chooses to provide.

When the system's services become operational, additional data necessary to provide those services may be processed, including registration and access information, identity verification data, and technical or operational data associated with use of the service.

Certain technical data may also be processed automatically, depending on the technologies actually implemented, such as device and browser information, Internet Protocol (IP) address, access and usage logs, and performance and security data.

The inclusion of these categories does not mean that all such data is collected in every case. The data actually processed will depend on the service, the technologies used, and the purpose of the processing.

Subject to the applicable legal basis, personal data may be used to communicate with users and respond to requests, evaluate investment, partnership, and sponsorship opportunities, manage demonstration requests, operate services and manage access, verify identity and eligibility for access, protect the system against unauthorized use and fraud, provide support, and comply with applicable legal and contractual obligations.

Step to the World seeks to limit the collection and processing of personal data to what is appropriate and necessary for the specified purpose.

Personal data is processed on the appropriate legal basis for each processing activity in accordance with applicable laws and regulations. This may include consent where required, performance of an agreement to which the data subject is a party, compliance with a legal obligation, or another legal basis permitted by applicable law.

Consent provided for one specific purpose will not automatically be treated as consent for a separate purpose that requires independent consent. Personal data will not be used for direct marketing except in accordance with applicable legal requirements.

When Step to the World services requiring identity verification become operational, biometric authentication methods may be used, such as facial or fingerprint authentication or other approved methods permitted by applicable law.

Biometric data used for identification is treated as sensitive data and processed in accordance with applicable legal requirements. Where consent is the legal basis for such processing, the required consent will be obtained explicitly, independently, and clearly before processing takes place.

Depending on the approved technical design, biometric authentication may take place through the user's device, a specialized technology provider, or another approved authentication method. The use of biometric authentication does not necessarily mean that Step to the World collects or retains a raw copy of a user's facial or fingerprint biometric data.

The website may use cookies or similar technologies where necessary to operate the website, maintain security, remember settings, understand usage, or improve performance.

Where the use of such technologies requires notice or consent under applicable laws, the appropriate measures will be taken based on the type and purpose of the technology.

Step to the World does not sell or rent personal data submitted through the website to third parties for marketing purposes.

Personal data may be shared, to the extent necessary and legally permitted, with service providers, technical or operational providers, event organizers, and partners involved in providing the service, as well as competent government, regulatory, judicial, or security authorities where disclosure is required or permitted by law.

Access to personal data by any party will be limited to what is necessary for that party to perform its role or fulfill the relevant lawful purpose, subject to appropriate legal and contractual requirements based on the responsibilities of each party.

Certain organizations involved in a service or event may act as independent controllers of particular personal data. In such cases, their own privacy policies may apply to processing activities that fall within their responsibility.

If providing a service requires personal data to be transferred outside the Kingdom of Saudi Arabia or made available to an entity outside the Kingdom, such transfer will be carried out in accordance with the requirements and safeguards prescribed by applicable laws and regulations.

Use of the website or service does not, by itself, constitute unrestricted consent to transfer personal data outside the Kingdom where an additional legal basis, notice, consent, safeguard, or other measure is required.

Personal data will be retained for as long as necessary to fulfill the purpose for which it was collected or processed, or for the period required by legitimate legal, regulatory, or contractual requirements.

When there is no longer a lawful or legitimate need to retain the data, it will be handled in accordance with applicable requirements relating to destruction, anonymization, or other legally prescribed measures.

The end of an event or expiration of an access link does not necessarily mean that all related data will be deleted immediately. Certain data may need to be retained for lawful, security, contractual, evidentiary, or rights-protection purposes where permitted by law.

Appropriate technical and organizational measures will be implemented to help protect personal data against unauthorized access, use, alteration, disclosure, loss, or destruction. However, no electronic system or method of transmission can be guaranteed to be completely free from security risks.

Data subjects have the rights granted to them under applicable laws and regulations, depending on the nature and circumstances of the processing. These may include the right to be informed about the processing of their personal data, access their personal data, obtain a copy where applicable, request correction, completion, or updating of their data, request destruction where legally applicable, and withdraw consent where consent is the legal basis for processing.

The exercise of these rights is subject to the applicable legal requirements, limitations, exceptions, and timeframes. Requests may be submitted through the designated privacy contact channel.

The current informational website is not intended to independently collect personal data from children or individuals who do not have full legal capacity.

If a future service involves processing personal data relating to a minor or an individual without full legal capacity, such data and any related consents and rights will be handled in accordance with applicable legal requirements and the nature of the service.

This Privacy Policy may be updated from time to time to reflect the development of Step to the World, its services, technologies, operational requirements, and applicable legal or regulatory requirements.

The updated version will be published on the website together with its effective date and date of last update. If a change requires notice to the data subject or new or separate consent under applicable law, the required action will be taken before the relevant processing begins.

An update to this Policy does not, by itself, expand the scope of consent previously provided for another purpose.

This Privacy Policy should be read together with the Terms and Conditions and any privacy notices or specific terms applicable to a particular service or event.

If any provision of this Policy conflicts with a mandatory provision of the laws applicable in the Kingdom of Saudi Arabia, the mandatory legal provision will prevail. Nothing in this Policy will be interpreted as a waiver of any right, obligation, or liability that cannot lawfully be waived or excluded.