NAVER Innovation

Effective date: 14 August 2026
Last updated: 13 August 2026

1. Introduction

NAVER Innovation ("NAVER Innovation", "we", "us" or "our") operates the website available at naverinnovationcorp.com (the "Website"). This Privacy Policy explains what personal data we process when you visit the Website, why we process it, who it is shared with, how long we keep it, and the rights available to you.

This Privacy Policy is issued in accordance with the Personal Data Protection Law of the Kingdom of Saudi Arabia (Royal Decree No. M/19 dated 9/2/1443H, as amended) (the "PDPL"), its Implementing Regulations, and the guidance issued by the Saudi Data & AI Authority ("SDAIA").

The Website is an informational corporate website. It does not provide user accounts, registration, contact or inquiry forms, marketing sign-ups, or any transaction functionality, and it is not integrated with any application or service operated by NAVER Innovation or any of its affiliates.

2. Data controller

NAVER Innovation is the data controller responsible for the personal data processed through the Website.

• Entity: NAVER Innovation
• Address: 7671 Al Olaya St, Al Sahafah, Riyadh, Kingdom of Saudi Arabia
• Email: info@naverinnovation.sa

3. Personal data we process

We do not ask you to provide any personal data in order to use the Website, and the Website contains no feature through which you could voluntarily submit personal data to us.

The only personal data we process is technical access data that your browser generates automatically and that is recorded in our server logs each time a page is requested:

• IP address
• Browser type and version
• Operating system
• Referring URL
• Date and time of access
• Pages viewed

Whether provision of this data is mandatory. You are not asked to provide any personal data, and there is no optional information for you to submit. The access data described above is generated automatically by your browser and is a technical necessity of delivering the Website; it cannot be switched off while you browse.

Cookies and tracking technologies. At launch, the Website does not use cookies or similar tracking technologies for analytics, profiling, advertising or marketing purposes. If we introduce cookies or similar technologies that involve the processing of personal data, we will update this Privacy Policy and provide any notice or consent mechanism required by applicable law before introducing them.

Sensitive data. We do not knowingly collect any sensitive personal data through the Website.

4. Purposes and legal basis for processing

We process the access data listed in Section 3 for the following purposes:

Where we rely on legitimate interests, we limit the processing to what is necessary for the relevant purpose and balance our interests against the rights and interests of data subjects.

We do not use access data to build profiles about you, to carry out automated decision-making that produces legal effects concerning you, or for advertising or direct marketing purposes.

Consent. We do not rely on your consent to process the access data described in this Privacy Policy, and there is accordingly no consent for you to withdraw in relation to those processing activities. If we introduce any processing that requires consent, we will request it separately and provide a means of withdrawing it in accordance with applicable law.

5. Disclosure of personal data

We do not sell, rent or trade personal data. We disclose the access data described in this Privacy Policy only to:

• NAVER Cloud Corp. ("NAVER Cloud"), which develops, hosts, operates and maintains the Website on our behalf. NAVER Cloud processes the data on our behalf and solely for the purposes of operating and maintaining the Website; and
• Competent authorities, where disclosure is required by applicable law, court order, or a lawful request from a public authority.

No other entity within the NAVER group receives personal data collected through the Website. In particular, no personal data collected through the Website is shared with, or integrated into any service of, any entity located in China or in any country other than as expressly stated in this Privacy Policy.

6. Transfer of personal data outside the Kingdom

During the initial phase of operation, the Website is hosted and operated by NAVER Cloud on servers located in the Republic of Korea. As a result, the access data described in Section 3 is transferred to and processed in the Republic of Korea for the purposes of hosting, operating, securing and maintaining the Website.

NAVER Cloud is the overseas recipient of this data for those purposes. The data transferred is limited to the technical access data described in Section 3.

NAVER Innovation takes measures designed to limit the transfer to the personal data necessary for these purposes and to protect the security and confidentiality of the data. NAVER Cloud processes the data on behalf of NAVER Innovation for the purposes described above. NAVER Innovation remains responsible for ensuring that transfers of personal data are handled in accordance with the applicable requirements of the PDPL and its Regulations.

We intend to migrate the development, hosting and operation of the Website to NAVER Innovation, with the relevant servers relocated to the Kingdom of Saudi Arabia. We will update this Privacy Policy when that migration changes the way personal data is processed.

7. Retention

We do not retain server log data for longer than is necessary for the purposes described in Section 4. Because the period needed varies with the purpose concerned, we determine it by reference to the following criteria:

• the time required to diagnose and resolve technical faults affecting the Website;
• the time required to detect, investigate and respond to security incidents; and
• any period for which we are required or permitted to retain the data under applicable law.

Once there is no longer a lawful or necessary basis for retaining the relevant log data, it is destroyed or irreversibly anonymised.

We may retain specific log entries for a longer period where this is necessary to comply with a legal obligation, or to establish, exercise or defend a legal claim, and only for as long as that purpose requires.

8. Security

We apply appropriate technical, organisational and administrative measures to protect personal data against loss, destruction, alteration, unauthorised access, disclosure or misuse. These measures include the encryption of data in transit (HTTPS), restricted and logged access to server infrastructure on a need-to-know basis, network and infrastructure protection controls, and contractual security obligations imposed on our service provider.

No method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

If a personal data breach occurs and the breach may cause harm to the personal data or to a data subject, or may conflict with a data subject's rights or interests, we will notify the Saudi Data & AI Authority within 72 hours of becoming aware of it, in accordance with the PDPL and its Implementing Regulations.

We will also notify affected data subjects without undue delay where the breach may cause damage to their personal data or conflict with their rights or interests, in accordance with the applicable requirements of the PDPL and its Implementing Regulations.

9. Your rights

Subject to the conditions and exceptions set out in the PDPL and its Implementing Regulations, you have the following rights in relation to your personal data:

• Right to be informed — to be informed of the legal basis and purpose for collecting your personal data;
• Right of access — to request access to your personal data held by us;
• Right to obtain a copy — to obtain a copy of your personal data in a readable and clear format;
• Right to request correction — to request that inaccurate, incomplete or outdated personal data be corrected, completed or updated;
• Right to request destruction — to request the destruction of your personal data in the circumstances provided for under the PDPL and its Implementing Regulations, subject to applicable lawful retention requirements.

To exercise any of these rights, please contact us at info@naverinnovation.sa. We will process your request within the period prescribed by the PDPL and its Implementing Regulations, and may request information reasonably necessary to verify your identity or to locate the relevant personal data.

Please note that the access data described in Section 3 is technical in nature and is not linked to your name or to any account. We may therefore need additional information from you in order to locate the relevant records. Where we are genuinely unable to identify the relevant records from the information reasonably available to us, we may be unable to fulfil all or part of the request, and we will inform you accordingly.

If you consider that your personal data has not been handled in accordance with applicable law, you may raise the matter with us using the contact details in Section 13. You also have the right to lodge a complaint with the Saudi Data & AI Authority (SDAIA) in accordance with its applicable procedures.

10. Children

The Website is a corporate information website intended for a general business audience. It is not directed at children, and we do not knowingly collect personal data relating to children through the Website.

11. Third-party websites

The Website contains links to websites operated by third parties, including other entities within the NAVER group. We are not responsible for the content of those websites or for their privacy practices. We encourage you to review the privacy policy of any third-party website you visit.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, in the operation of the Website, or in applicable law. The revised version will be published on this page with an updated "Last updated" date. Where a change is material, we will provide a prominent notice on the Website.

13. Contact

If you have any questions, requests or complaints regarding this Privacy Policy or the way we handle personal data, please contact us at:

NAVER Innovation
7671 Al Olaya St, Al Sahafah, Riyadh, Kingdom of Saudi Arabia
Email: info@naverinnovation.sa

14. Language

This Privacy Policy is published in English. If an Arabic version of this Privacy Policy is published, the Arabic version shall prevail in the event of any inconsistency between the two versions.