The Riyadh Municipality is a governmental entity with a legal personality, financial and administrative independent, in accordance with the Municipalities and Villages System issued by Royal Decree No. (M/5) dated 21/2/1397H. The Municipality is responsible for providing municipal services to the residents of Riyadh City and continuously strives to enhance these services and improve the urban environment in line with the city's sustainable development vision.
The data produced, received, or managed by the Riyadh Municipality are considered national assets that contribute to improving performance and productivity, facilitating the delivery of public services through effective operations support, strategic decision-making, future forecasting, and achieving high levels of accountability and transparency. The importance of data is further magnified with the rapid technological advancements and ease of data access and sharing, underscoring the importance of protecting data while maximizing its utilization for planning and strategizing services offered by the Municipality through the establishment of regulations and policies for data management, aligned with the national digital strategy and data protection guidelines.
In line with the role of the Data Management Office – as the regulatory body for the data of Riyadh Municipality – the office has developed a privacy policy to implement the provisions of the Personal Data Protection Law (the "Law") and its executive regulations, ensuring the right to information stipulated in Articles (4) and (13) of the Law. This policy also supports entities’ compliance with Article (12) of the same Law, which states that the controlling entity must adopt a privacy policy and make it available to the owners of personal data to review upon the collection of their data. This policy must include the purpose of data collection, the content of the personal data to be collected, the methods of collection, the means of storage, how it will be processed, how it will be destroyed, the rights of the data owner regarding the data, and how these rights can be exercised.
For general inquiries, you can contact the Municipality via the following details:
Entity Name: Riyadh Municipality
Address: Riyadh Municipality, Riyadh City, Al-Deira District, Sheikh Mohammed bin Abdulwahhab Street (12651)
Phone Number: 0114112222
Email: DMO@alriyadh.gov.sa
The last update to this privacy policy was made on [16/09/2024].
The Municipality ensures that the personal data it collects and processes is limited to the minimum necessary to perform its tasks and deliver the required services.
Through its website and services, the Municipality collects the following personal data:
1. Personal Identity Data: Name, date of birth, national ID number, or residency ID number.
2. Contact Data: Phone number, email address.
3. Personal Account Data: Password used to access the beneficiary’s page.
4. Cookies Data: Data collected through website logs and cookie technologies, such as your IP address used to connect your personal computer to the internet.
The Municipality collects personal data directly through electronic forms on the website or applications, and indirectly through cookie technologies and interconnections with other entities. This is done in cases where it is necessary to process requests related to the personal data owner, in accordance with relevant regulations and legislation.
The legal basis for data processing by the Riyadh Municipality is rooted in fulfilling regulatory and statutory obligations to achieve any of the following purposes:
1. Authenticating users’ identities and their contact information.
2. Enabling Riyadh Municipality to perform its assigned tasks and responsibilities and provide services in accordance with relevant regulations and legislation.
3. Understanding user needs and striving to improve them, including but not limited to receiving and processing inquiries, requests, and complaints.
4. Enhancing the performance of services, improving user experience, and ensuring the continuity of service delivery at the required quality.
Personal data collected directly or indirectly is processed to enable the Municipality to perform its assigned tasks and responsibilities, achieving the objectives outlined in this policy. Authorized individuals, based on their specific roles, process personal data according to approved policies.
The Municipality adheres to data-sharing policies and controls issued by regulatory entities. It does not share personal data with any external party outside the Municipality except in cases of disclosure specified in the Personal Data Protection Law and its executive regulations, whether by obtaining prior consent or disclosure as per the purposes and cases defined by the law.
Personal data is securely stored at the Riyadh Municipality premises or on its approved servers within the Kingdom of Saudi Arabia, following the best relevant security standards and practices to ensure data security and protection. This includes access control management, data classification and encryption, and regular security evaluations.
Data retention is based on the timeframes necessary to fulfill the Municipality’s regulatory obligations and the purpose of data processing. After fulfilling the purpose, data is securely destroyed to ensure it cannot be accessed or recovered, in compliance with Article (18) of the Personal Data Protection Law.
Under the Personal Data Protection Law, the following rights are granted, primarily based on the purpose of collecting and processing personal data:
Right to Know: You have the right to understand how we collect personal data, the legal basis for collecting and processing it, how it is processed, stored, destroyed, and to whom it will be disclosed. You can find all details through this privacy policy or contact us using the information provided below.
Right to Request Access to Your Personal Data: You may request access to your personal data available with the controlling entity in a readable and clear format, provided it is technically feasible. This can be done through the means used to supply personal data to its owner.
Right to Rectify Personal Data: You may request rectification of personal data that you deem inaccurate, incorrect, or incomplete. Such requests will be reviewed and updated within 30 business days, and you will be notified through the medium used to enable access to your personal data.
Right to Destroy Your Personal Data: You may request the destruction of your personal data under certain circumstances that will be clarified, ensuring that no regulatory or legal justifications conflict with such a request.
Right to Withdraw Consent for Data Processing: You have the right to withdraw your consent for data processing at any time unless legal justifications require otherwise. Except as stipulated by law, you will not be required to pay any fees to exercise these rights. If a request to exercise any of these rights is submitted, you will receive a response within 30 business days from the date of receiving the complete request.
.For more details on how your personal data is processed and how to exercise your rights, you may contact the Data Management Office using the contact details below
For any complaints, objections, or requests regarding the processing of personal data, you can contact the Data Management Office at Riyadh Municipality via email: DMO@alriyadh.gov.sa
For inquiries or comments regarding municipal services, please fill in the required information.
No comments have been added yet
Last Update:
05/08/2025
7 visitors liked the page content out of 9 shares