Effective Date: 1 December 2025

Al-Saheb Al-Mutqadma for Information Technology (“Kitchefy”) is committed to protecting the online privacy of the users of this website (“Website”) or Kitchefy application (“App”) together, the Services. As such, this Privacy Policy has been written in order to allow you to understand Kitchefy’ policy regarding your privacy, as well as how your personal information will be handled when using the Website or the App. This Privacy Policy will also provide you with information so that you are able to consent to the processing of your personal data in an explicit and informed manner, where appropriate.

In general, any information and data which you provide to Kitchefy over the Website or the App, or which is otherwise gathered by Kitchefy, in the context of the use of Kitchefy’ Services, will be processed by Kitchefy in a lawful, fair and transparent manner. To this end, and as further described below, Kitchefy takes into consideration internationally recognised principles governing the processing of personal data, such as purpose limitation, storage limitation, data minimisation, data quality and confidentiality.

Data Controller

Al-Saheb Al-Mutqadma for Information Technology, a company registered in the KSA with commercial license number 1010486502, is the data controller regarding all personal data processing carried out through the Website or the App.

Personal Data Processed

When you use the Services, Kitchefy will collect and process information regarding you (as an individual) which allows you to be identified either by itself, or together with other information which has been collected. Kitchefy may also be able to collect and process information regarding other persons in this same manner, if you choose to provide it to Kitchefy.

This information may be classified as “Personal Data” and can be collected by Kitchefy both when you choose to provide it (e.g., when you contact Kitchefy through our online contact forms) or simply by analysing your behaviour on the Website or the App.

Personal Data which can be processed by Kitchefy through the Website or the App are as follows:

Name, contact details and other Personal Data

In order to access some of Kitchefy’ Services you will be asked to provide Personal Data, such as your name, contact details (mobile number, email address etc.) and the company you work for or represent and other information including but not limited to information about cards to be used as payment methods (such as number, name, expiry date and card verification number) and your address.

Device data

When choosing to install the App, you grant permission to Kitchefy to set up the App on your mobile device (“Device”), as well as to access Personal Data and other information stored on your Device which are needed in order to successfully install the App (e.g., Device model, operating system version, screen resolution, network connection type, language, etc.). This collection of information is inherent to the process of installing and setting up the App and, as such, you may not object to it unless you uninstall the App from your Device.

Once the App has been installed, you may be asked to allow the App to send and read SMS messages from your Device, in order to send you an SMS verification code and to grant you automatic access to the App, upon successful receipt of this code. When using the App, access may also be requested to your Device’s storage (e.g., when you register shipping addresses on an application), camera (e.g., so that you can scan your credit card in order to insert its details as a payment method in the applications) and Internet access, among other functions where necessary.

Location data

Once you have installed the App, you may be asked to consent to the App accessing your Device’s location, even when you are not using the App, as well as to your Device’s map functionalities. This is meant to allow Kitchefy to provide more precise and useful Services to you via the App, in particular, by allowing you to pinpoint your location, and ensuring goods/services offered to you via the App are available in your country.

If you believe that the continuous access to your location is too invasive, you can configure your Device in a way to share your position only when the App is in use. If even this is too invasive, you can always revoke the sharing of your position from the Device settings and simply provide a physical address, zip code or state for the Services you are interested in (or manually pin your relevant address on a map within the App), where relevant.

Job applications

When registering to apply for a position within Kitchefy, in the “Careers” section of the Website, you will also be asked to provide various types of Personal Data, including your name (first and last), professional / employment details (e.g., current job title and employer), referral sources, e-mail address, telephone number, country of residence, physical address (state, city, zip / postal code, street), age, photo, education, salary expectations, languages, professional skills, CV / resume. In some cases, you will be required to take a technical and written test that will help us in the evaluation process and that we will therefore assess.

If you provide data of third parties (e.g., contact details for references, minor’s data etc.), you assume all the obligations and responsibilities prescribed by the law, conferring the widest indemnity with respect to any dispute, claim, request for compensation for damage, etc. that we may receive from third parties whose Personal Data were transmitted by you and processed in violation of the applicable data protection laws.

In some cases, your application may contain Sensitive Personal Data relating to you or third parties, such as (but not limited to) information revealing your racial or ethnic origin, political belief, religious or intellectual beliefs, data relating to security criminal convictions and offences, Biometric or Genetic Data for the purposes of identifying the person, Health Data, and data that indicates that one or both of the individual’s parents are unknown. We do not intend to use this information unless it is necessary or required for the position you are interested in (e.g., if the position is for persons belonging to protected categories or requiring special assistance). If not, please delete them before sending your application. If you send them anyway and they are not relevant, we inform you that they will not be taken into consideration. If, on the other hand, the collection of Sensitive Personal Data is necessary to establish the relationship, the processing will be based on prior explicit consent.

Information related to security criminal convictions and offences (for example, criminal records) may also be processed by Kitchefy, in order to perform background checks related to you. Kitchefy asks you not to disclose any Sensitive Personal Data in files you upload to the Website (such as your CV / resume), unless you consider this to be strictly necessary. In this case, it is important that you provide explicit consent to process this type of Personal Data (e.g., by declaring that you consent to the processing of data contained in the uploaded files), or Kitchefy will not be able to lawfully process it for any purpose.

Other persons’ Personal Data

In any situation where you decide to share Personal Data related to other persons through the Website or the App, you will be considered as an independent data controller regarding that Personal Data, and must assume all inherent legal obligations and responsibilities. This means, among other things, that you must fully indemnify Kitchefy against any complaints, claims or demands for compensation for damages which may arise from the processing of this Personal Data, brought by third parties whose information you provide through Kitchefy.

As Kitchefy does not collect this information directly from these third parties (but rather collects them, indirectly, from you), you must make sure that you have these third parties’ consent before providing any information regarding them to Kitchefy; if not, then you must make sure there is some other appropriate grounds on which you can rely to lawfully give Kitchefy this information.

Browsing data

The Website’s operation, as is standard with any websites on the Internet, involves the use of computer systems and software procedures, which collect information about the Website’s users as part of their routine operation. While Kitchefy does not collect this information in order to link it to specific users, it is still possible to identify those users either directly via that information, or by using other information collected – as such, this information must also be considered Personal Data.

This information includes several parameters related to your operating system and IT environment, including your IP address, location (country), the domain names of your computer, the URI (Uniform Resource Identifier) addresses of resources you request on the Website, the time of requests made, the method used to submit requests to the server, the dimensions of the file obtained in response to a request, the numerical code indicating the status of the response sent by the server (successful, error, etc.), and so on. These data are used to compile statistical information on the use of the Website, as well as to ensure its correct operation and identify any faults and/or abuse of the Website.

Personal Data collected

For Kitchefy RMS the information we collect includes:

• CR information: CR number, UNN, entity name, issue date, expiry date, business type, place of issue, owner name, manager name, as relevant.
• ID information: ID number, place of issue, expiry date, date of issue, as relevant.
• VAT registration information.
• Recordings of sessions/meetings.
• Any other information you provide us with.

Cookies

For more information on the cookies, please read our Cookie Policy.

Purposes of Processing

Service Provision

To respond to your requests for further information, and to provide any other Services which you may request; to send you information in connection with the Kitchefy’ Services; to manage our relationship with you or your organisation; to manage billings and payments; and to deal with any disputes related to Kitchefy’ Services;

Recruitment

To examine applicant’s resumes / CVs and to get in contact with applicants who have submitted their application via the Website;

Marketing

For future marketing, promotional and publicity purposes, including to carry out direct marketing, market research and surveys;

Compliance

For compliance with laws which impose upon Kitchefy the collection and/or further processing of certain kinds of Personal Data, as well as, where necessary, for establishment, exercise or defence of legal claims; to comply with contractual requirements;

Analytics

To analyse how users arrived at the Website and how users behave on the Website, in order for Kitchefy to optimize its business operations and the performance, content and features of this Website;

Misuse/Fraud

To prevent and detect any misuse of the App, or any fraudulent activities carried out through the App.

Grounds for Processing and Mandatory / Discretionary Nature of Processing

Kitchefy’ grounds for processing your Personal Data, according to the purposes identified above, are as follows:

• Service Provision: processing for these purposes is necessary to provide the Services and, therefore, is necessary for the performance of a contract with you. It is not mandatory for you to give Kitchefy your Personal Data for these purposes, and providing some of the Personal Data requested in the respective forms is purely optional; however, if you do not provide all mandatory information requested, Kitchefy will not be able to provide any Services to you;
• Recruitment: processing for this purpose is needed in order for Kitchefy to be able to evaluate your application, contact you (or someone you nominate) for an interview and/or answer your questions/requests for clarification. The processing of your Personal Data is based on the need to execute your request for selection. It is not mandatory for you to give Kitchefy your Personal Data for these purposes, and providing some of the Personal Data requested in the respective forms is purely optional; however, if you do not provide all mandatory information requested, Kitchefy will not be able to consider your candidacies. If your application contains Sensitive Personal Data, please provide your consent, as indicated above;
• Marketing: processing for these purposes is generally based on your consent. It is not mandatory for you to give consent to Kitchefy for use of your Personal Data for these purposes, and you will suffer no consequence if you choose not to (aside from not being able to receive further marketing communications from Kitchefy). Any consent given may also be withdrawn at a later stage (please see Data Subjects’ Rights for more information);
• Additionally, if you provide your e-mail address when acquiring any products or services from Kitchefy, that e-mail address may be used to send you direct marketing communications regarding Kitchefy’ own similar products or services. You will be given the opportunity to withdraw your consent in regard to this processing when you provide your e-mail address, and with each marketing communication you are sent (please see Data Subjects’ Rights for more information).
• Compliance: processing for this purpose is necessary for Kitchefy to comply with its legal obligations. When you provide any Personal Data to Kitchefy, Kitchefy must process it in accordance with the laws applicable to it, which may include retaining and reporting your Personal Data to official authorities for compliance with tax, customs or other legal obligations. Additionally, Kitchefy may process Personal Data where necessary to establish, exercise or defend any legal claims;
• Analytics: processing for this purpose is carried out through the use of analytical cookies, which are placed only with your consent, provided by clicking on a button in the pop-up banner you were shown, or otherwise by setting your cookie preferences (please see our Cookie Policy for more information). It is not mandatory for you to give consent to Kitchefy for use of your Personal Data for this purpose, and you will suffer no consequence if you choose not to. Any consent given may also be withdrawn at a later stage (please see Data Subjects’ Rights for more information);
• Misuse/Fraud: processing for this purpose is generally based on Kitchefy’ legitimate interests, namely, in preventing and detecting fraudulent activities or misuse of the Services (for potentially criminal purposes), and ensuring the security of the Services.

Recipients of Personal Data

Your Personal Data may be shared with the following list of persons / entities (“Recipients”):

• Entities engaged in order to provide the Services or to carry out processing activities related to Recruitment, Marketing and/or Analytics on our behalf (e.g., marketing agencies, customer relationship managers, recruiting platforms, IT services providers);
• Persons authorised to perform technical maintenance (including maintenance of network equipment and electronic communications networks);
• Persons authorised by Kitchefy to process Personal Data needed to carry out activities strictly related to the provision of the Services, who have undertaken an obligation of confidentiality or are subject to an appropriate legal obligation of confidentiality (e.g., employees of Kitchefy);
• Other companies within Kitchefy’ Group;
• New or potential owners; if the ownership or control of Kitchefy, or all or part of the Services may change, we may transfer your Personal Data to the new or potential owners;
• Public entities, bodies or authorities to whom your Personal Data may be disclosed, in accordance with the applicable law or binding orders of those entities, bodies or authorities; and
• Third parties, acting as controllers, by means of third-party cookies set (please see our Cookie Policy for more information).

Cross-Border Personal Data Transfers

Considering Kitchefy’ international presence and business operations, your Personal Data may be transferred to Recipients (as listed above) located in several different countries. Kitchefy implements appropriate safeguards to ensure the lawfulness and security of these Personal Data transfers, such as by relying on decisions from relevant competent authorities, approved standard data protection clauses, or other safeguards or conditions considered adequate to the transfer at hand.

Retention of Personal Data

Personal Data processed for Service Provision will be kept by Kitchefy until you withdraw your consent. In this case, your Personal Data will no longer be will be kept by Kitchefy for the period deemed strictly necessary to fulfil such purposes – in any case, as these Personal Data are processed for the provision of the Services, Kitchefy may continue to store this Personal Data for a longer period, as may be necessary to protect Kitchefy’ interests related to potential liability related to the provision of the Services.

Personal Data processed for the purposes of Recruitment are kept by Kitchefy for as long as the vacancy for which the CV was submitted is still available or, in case of open positions, for up to one (1) year, unless you request deletion/ destruction before the conclusion of the aforementioned period. Kitchefy may contact applicants before the expiration of this period to request an extension of the retention period.

Personal Data processed for Marketing will be kept by Kitchefy from the moment you give consent until the moment you withdraw the consent given. Once consent is withdrawn, Personal Data will no longer be used for these purposes, although it may still be kept by Kitchefy, in particular as may be necessary to protect Kitchefy’ interests related to potential liability related to this processing.

Personal Data processed for Analytics is typically aggregated or anonymised as soon as possible. In any case, any such data which is not aggregated or anonymised will only be kept by Kitchefy from the moment you give consent until the moment you withdraw the consent given. Once consent is withdrawn, Personal Data will no longer be used for these purposes, although it may still be kept by Kitchefy, in particular as may be necessary to protect Kitchefy’ interests related to potential liability related to this processing.

Personal Data processed for Compliance will be kept by Kitchefy for the period required by the specific legal obligation or by the applicable law, or as long as may be required in order to establish, exercise or defend legal claims.

Personal Data processed for Misuse/Fraud will be kept by Kitchefy for as long as deemed strictly necessary to fulfil the purposes for which it was collected.

All Personal Data collected will be stored in our databases in the Kingdom of Saudi Arabia.

Data Subjects’ Rights

As a data subject, are entitled to exercise the following rights before Kitchefy, at any time:

• Be informed of the legal basis and the purposes of collection of your Personal Data (as is the purpose of this Privacy Notice):
• Access your Personal Data being processed by Kitchefy;
• Correct, complete or update your Personal Data processed by Kitchefy, where it may be inaccurate or incomplete;
• Request destruction of your Personal Data being processed by Kitchefy, where you feel that the Personal Data is no longer required by you;
• Request the restriction of the processing of your Personal Data, where you feel that the Personal Data processed is inaccurate or incomplete,
• Exercise your right to obtain your Personal Data provided to Kitchefy, in a readable and clear format; and
• Withdraw your consent to processing.

You can withdraw consent for Marketing by selecting the appropriate link included at the bottom of every marketing e-mail message received.

You can withdraw your consent for Analytics by changing your cookie preferences (see our Cookie Policy for more information).

Aside from the above means, you can also exercise your rights described above by sending a written request to Kitchefy at privacy@kitchefy.com.

In any case, please note that, as a Data Subject, you are entitled to file a complaint with the Competent Authority for the protection of Personal Data, if you believe that the processing of your Personal Data carried out through the Website or the App is unlawful.

Amendments

Kitchefy reserves the right to amend this Privacy Policy partly or fully, or simply to update its content, e.g., as a result of changes in applicable law. Kitchefy will inform you of any substantial changes as soon as they are introduced (through a pop-up/notice on the Website and the App, and through e-mail notifications sent to its users included in Kitchefy’ mailing lists). Changes will be binding as soon as they are published on the Website and the App.

Contact Us

If you have any questions or concerns about this Privacy Policy or the handling of your data, you may contact Kitchefy Data Protection Officer at dpo@kitchefy.com or privacy@kitchefy.com.