A short brief about Fintech Saudi (“Fintech Saudi”, “we”, “us” and/or “our”) or the related service, Fintech Saudi was launched by the Saudi Central Bank in partnership with the Capital Market Authority in April 2018 to act as a catalyst for the development of the financial services technology (fintech) industry in Saudi Arabia. 

• Believing in the importance of data and its confidentiality, the management of Fintech Saudi’s official website (“System”)’s website, fintechsaudi.com (“Site”),​ (“Administration”) aims to provide the best levels of service with a commitment to maintaining the confidentiality and privacy of users’ data, so it is keen to maintain and ensure the confidentiality and privacy of the entered or collected data for any of the ​​System. (“User” or “Users”) where the privacy policy has been formulated in accordance with the Personal Data Protection Law, Regulations, and Controls in the Kingdom of Saudi Arabia for the purpose of helping the User understand the nature of the data we collect from him and how this data will be handled by the ​​​“Administration”​​​ 

The Administration will be collecting the User’s data entered for the purpose of registration and using personal or commercial data, or that the User provides for that purpose to the Administration through phone calls or E-mails. This Data includes – but is not limited to – the following: 

1. Identification Data, including User’s name, first and last name 
2. Contact Information, including address (city, country, postal code), phone number and Email 
3. Entity’s Information, including name, activities, Commercial Registration number, License number 
4. Data obtained through integration with the databases of ​Fintech Saudi if you are previous user​ 

• Contractual: to fulfill our services obligations to you. 
• Consent: for other activities such as information, sales, and marketing. 

• Provide, manage and enhance the services offered through Fintech Saudi, which include – but are not limited to – ​the following:​  

1. Using Jobs Portal, Directory, or other services provided by the system. 
2. Getting announcements and emails about the new fintech activities and initiatives in the Saudi kingdom, e.g. Fintech Accelerator. 

• Communication with ​System​ Users and interact with them for various purposes, including but not limited to, in the event of a request for assistance, or respond to any inquiries or complaints or communication with the ​System​ administration 

• For the purposes of marketing certain products and services to users via various means of communication, including telephone, email, or notifications. 

• Provide the user with the latest updates about current or new services and products or other events provided by the ​System‘s administration or its partners. 

• Monitoring and flagging any breach of this Policy or the ​System’s Terms of Use, or any case of misuse. 

• Maintaining and enhancing the performance and security of ​System, and the Administration’s programs, systems, and networks. 

• Share with Technical partner, Manage ​System​, and its internal operations, including but not limited to troubleshooting, data analysis, testing and surveying.

• Any use described throughout this Policy, or further consented by the User. 

• Data that does not contain any personal information or identifiers and cannot be used to identify you may be used within cumulative statistical data and indicators and shared with government agencies and/or relevant third parties, as deemed by the ​System​’s administration 

• The data that the owner of the personal data provides to the Site is collected through registration form, or other website’s forms, no personal data is collected from any other party. 

• The Administration will collect the User’s data through requesting it to fill in some forms or by contacting directly via approved communication channels with the user. 

• Personal data is used for the purposes of completing the registration process, improving the beneficiary’s experience and doing internal analysis for the Services provided by Fintech Saudi. 

• The personal data is stored on servers of the service provider that are specified within the Kingdom of Saudi Arabia. Fintech Saudi makes sure that these servers are protected from hacking and unauthorized access according to the rules. The user’s personal data will be kept for as long as it takes to reach the goals for which it was collected or as long as it takes to meet legal, regulatory, accounting, or reporting requirements. These periods may vary depending on the circumstances and requirements, and the data storage periods are subject to regular periodic review to ensure that personal data is not stored for longer than necessary, and destroyed in accordance with the policies and procedures followed in Fintech Saudi for data destruction. 

• The ​System​’s administration is taking personal data protection very seriously and it’s committed to using the organizational, administrative, and technical procedures and means necessary to protect the personal data from unauthorized access, use, alteration, or destruction, such as conducting internal and external audits, using data encryption and security tools, and trains employees on data privacy.  
• The right to access personal data is limited to authorized personnel based on the purposes and uses determined by the policies adopted by Fintech Saudi. 

1. Non-identifying data may be used within cumulative statistical data and indicators, and shared with all relevant authorities as deemed appropriate by Fintech Saudi. 
2. Personal Data may only be disclosed or shared when it complies with the laws and regulations in force in the Kingdom of Saudi Arabia or has been requested by law, or when management deems such action necessary or desirable to provide products, services or technical support. 

• The administration will disclose / share personal data in activities related to the services provided via ​System​. With its partners and related parties; to provide the user with information about the services he benefits from. 

1. Disclosure to Third Parties:

    

   The Administration will not disclose or share any of the personal data to third parties, except for the following cases: 

• Disclosure to a government entity, if that disclosure is in accordance with the applicable laws and regulations implemented in the Kingdom of Saudi Arabia, or any order issued by the competent authorities therein. 
• In the event the Administration resorts to external parties who are proven to be trusted and reputable establishments, and who shall adhere to the standards of confidentiality that are upheld by the Administration. 
• Disclosure to government authorities that are related to the electronic services that are requested by the User, as well as disclosure to non-government entities that are authorized by the government entities to receive, solve, transfer, or pass government service requests or to provide services whenever completion of the services requires observing or storing or processing User’s data by any entity government. 
• Disclosure to other parties subject to User’s consent 

       2. Disclosure to entities outside the Kingdom of Saudi Arabia:

Personal data will not be disclosed or processed outside the Kingdom of Saudi Arabia, except based on the applicable laws and regulations, in the event of necessity or to achieve the intended purposes of collecting and processing it in the first place. 

1. ​​System​, it may contain links to third party websites or services, which are subject to separate privacy policies. Please note that these links are beyond the control of the administration, and the administration is not responsible for how other parties collect or use personal information. The user is fully responsible for his data and should review the privacy policies of these links. 

1. The personal data subject (Owner) has the right to benefit from the rights stipulated in the Personal Data Protection Law. You can ​contact us at info@fintechsaudi.com​, noting that the Administration may request additional information in order to implement the request or verify identity. 

• The user is obliged to contact the Administration immediately when it is believed that someone has been able to access his data or access his account. 
• The user is obligated not to give any confidential information over the phone or the Internet unless the identity of the person or party receiving the information is known. 
• The user is obligated not to share login information (username, password) with others, and not to allow others to use the user account in System. 
• The user is obligated to use a secure browser when completing online transactions with unused applications closed on the network, and ensure that your antivirus software is always up to date. 

The user is obligated to update the contact information used to identify in System, if replaced. 

The Administration reserves the right to amend this Privacy Policy, and it shall notify the User to obtain User’s acceptance on such amendment. The User’s account may be subject to suspension or cancellation in case the User refuses to accept the new version on this Privacy Policy. 

Issue number: 10010 

Update date: 17/5/2023