Last updated: 24 April 2025

1. مقدمة

The Riyadh Law Review (“RLR”, “we”, “our”, or “us”) operates as Oasis Periodical Publication Company, a Non-profit Single-shareholder Limited Liability Company incorporated and existing under the laws of the Kingdom of Saudi Arabia, having it office at Riyadh, Kingdom of Saudi Arabia, registered under CR No.  1009197172, and unpaid capital of five thousand (5,000) SAR.

RLR Is committed to protecting your privacy and ensuring the security of your personal data in accordance with the Kingdom of Saudi Arabia’s Personal Data Protection Law (“PDPL”) and its implementing regulations, as updated from time to time. This Privacy Policy outlines the types of personal data we collect, how we use it, with whom we may share it, and your rights regarding your data.

2. Data Controller

The data controller for the purposes of this policy is the Riyadh Law Review, a student-run academic law journal based in the Kingdom of Saudi Arabia.

3. Scope and Applicability

This policy applies to all individuals who interact with the RLR, including authors, reviewers, editorial board members, readers, academic partners, and visitors to our platforms.

4. Personal Data We Collect

We may collect the following categories of personal data:

• Identification Data: Full name, nationality, ID/passport number.
• Contact Information: Email address, phone number, mailing address.
• Academic and Professional Information: CVs, academic degrees, institutional affiliation, professional qualifications.
• Technical Data: IP address, browser type, access logs, usage data through cookies.
• Correspondence and Submission Records: Emails, manuscript submissions, reviewer reports, feedback.
• Consent Records: Explicit records of your consent for data processing, where applicable.

5. Purpose and Legal Basis for Processing

We process personal data for the following purposes:

Purpose	Legal Basis
Managing submissions and peer review	Performance of contract
Maintaining academic records and profiles	Legitimate interest
Communicating with authors, editors, and reviewers	Legitimate interest
Publishing accepted papers	Consent and performance of contract
Complying with legal obligations (e.g., tax, audit)	Legal obligation
Website improvement and analytics	Consent or legitimate interest

6. Sharing and Disclosure of Data

We may share your personal data:

• With internal staff and editorial board members as necessary.
• With academic partners, institutions, or conference collaborators.
• With service providers (e.g., hosting, analytics, plagiarism detection).
• When required by law or regulation (e.g., SDAIA, public authorities).
• With your explicit consent for other purposes.

We do not sell or rent personal data to third parties.

7. Data Storage and Security

Your data is securely stored on servers located within the Kingdom of Saudi Arabia or with providers who comply with applicable PDPL standards. We implement appropriate technical and organizational measures, including encryption, access restrictions, and regular audits.

8. Retention Period

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. After that period, data will be securely deleted or anonymized.

9. Your Rights under the PDPL

You have the right to:

• Access your personal data.
• Correct or update inaccurate data.
• Request deletion of your data (subject to legal obligations).
• Withdraw consent where consent is the basis of processing.
• Object to certain types of data processing.
• Lodge a complaint with the Saudi Data & AI Authority (SDAIA).

To exercise your rights, please contact us at: [email protected]

10. International Transfers

We avoid international data transfers unless necessary. Where required, we ensure appropriate legal safeguards are in place, including compliance with the PDPL and data transfer agreements.

11. Cookies and Tracking

Our website does not use cookies to track you use of the website.

12. Hyperlinks

Our websites may provide links to third-party websites for your convenience. If you access those links, you will leave our website. We do not control those websites or their privacy practices, which may differ from ours. We do not endorse or make any representations about third-party websites. This Privacy Policy does not cover the personal data you choose to give to unrelated third parties. We encourage you to review the privacy policy of any company before submitting your personal information. Some third-party companies may choose to share their personal data with us; that sharing is governed by that third-party company’s privacy policy.

13. Updates to this Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website. We encourage you to review this policy periodically.