Sign Up
Log In

Privacy Policy

Privacy Policy

Privacy Policy

Dear Valued Customers,

In accordance with the Personal Data Protection Law issued by Royal Decree No. (M/19) dated 09/02/1443 AH and amended by Royal Decree No. (M/148) dated 05/09/1444 AH, as well as other applicable regulations in the Kingdom of Saudi Arabia, we at Smart Interaction for Digital Brokerage Company are committed to safeguarding the confidentiality and security of your personal data. We understand that the protection of your information is crucial to maintaining your trust, and we are fully dedicated to ensuring its confidentiality and integrity.

This Privacy Policy outlines our practices regarding the collection, use, and protection of your personal data, in compliance with the Personal Data Protection Law and the standards set by the Saudi Data and Artificial Intelligence Authority (SDAIA).

Our Commitment to Protect Your Data

We will:

  • Protect all customer information in line with the highest safety and confidentiality standards.
  • Collect and use only the minimum necessary amount of personal information required to provide our services.
  • Not share your personal information with any third parties, except where required by law, or with your explicit consent.
  • Continuously monitor the confidentiality and security of your personal data.
  • When working with external service providers, we ensure that they adhere to the same confidentiality standards.
  • Share customer information with trusted reference sources for purposes such as credit reporting, compliance, and risk management, when necessary.

Who We Are

Smart Interaction for Digital Brokerage Company is licensed by the Saudi Central Bank under License No. (83/N M/202312) dated 27/05/1445 AH to provide financial solutions supporting micro, small, and medium enterprises.

For any inquiries, please contact us at:

Last Updated: 06/10/2024

What is Personal Data?

Personal data refers to any information that, either on its own or when combined with other information, can be used to identify an individual. This includes, but is not limited to:

  • Full name
  • Identification numbers (e.g., National ID, passport)
  • Contact details (e.g., address, phone number, email)
  • Financial information (e.g., bank account numbers, credit card details)
  • Employment and income data
  • Images (static or moving)

What Personal Data Do We Collect and Process?

We collect and process the following types of personal data:

  • Personal Identification Information: Full name, date of birth, nationality, and ID numbers (National ID, passport).
  • Contact Information: National address, phone number, email.
  • Employment Information: Employer details, job title, salary, and employment history.
  • Financial Information: Sources of income, financial obligations, bank account details, financial statements, credit ratings, etc.

Personal data may be collected directly through the “Qardi” platform or through communication with our customer support team via phone or email.

Additionally, we may obtain data indirectly from third parties, including:

  • Business entity verification through the “Wathiq” service (for commercial registry data).
  • Credit data provided by SIMAH Credit Bureau, which may be shared with financing entities on the Qardi platform at your request.

Why Do We Collect and Process Personal Data?

We collect and process your personal data for the following purposes:

  • Account management and service delivery, including transaction processing.
  • Customer support and communication related to accounts, products, and services.
  • Compliance with regulatory and legal requirements in the financial sector in Saudi Arabia.
  • Identity verification and adherence to the “Know Your Customer” (KYC) and Anti-Money Laundering (AML) regulations.
  • Credit risk assessment and management of credit facilities.
  • Security and fraud prevention.
  • Improvement and development of our services.
  • Data analysis and reporting.

How is Personal Data Stored, Protected, and Deleted?

Your personal data is securely stored at our company headquarters in compliance with Saudi Central Bank regulations. We apply technical and organizational measures, such as encryption, access controls, and periodic security reviews, to protect your data from unauthorized access, disclosure, modification, and destruction.

We retain personal data only for as long as necessary to fulfill the purpose for which it was collected. Once it is no longer needed, we securely dispose of it. Retention periods are determined based on regulatory guidelines, and the data is regularly reviewed to ensure compliance.

Your Rights Regarding Personal Data

Under the Personal Data Protection Law, you have the following rights:

  • Right to be informed: You have the right to be informed about how your personal data is collected, processed, stored, and shared.
  • Right to access: You can request access to the personal data we hold about you.
  • Right to receive: You may request that we provide your personal data in a readable format.
  • Right to correct: You can request corrections to any inaccurate or incomplete data. Certain changes may require documentation, and we will process requests within 30 days (with possible extensions).
  • Right to delete: You can request the deletion of your personal data, provided it is no longer required for legal or business purposes.
  • Right to withdraw consent: You may withdraw your consent to the processing of your data at any time.

When Might Your Rights Be Restricted?

Your rights may be limited under certain conditions:

  • Public security and law enforcement: Rights may be restricted if they interfere with national security or law enforcement activities.
  • Regulatory requirements: We may need to retain data or deny requests to comply with legal obligations.
  • Archiving, research, and statistics: Restrictions may apply to data processing for archiving, research, or statistical purposes.
  • Confidentiality and intellectual property: Some requests may be restricted if they conflict with others’ rights, such as intellectual property or confidentiality.

How to File a Complaint or Objection

If you believe we are not complying with the Personal Data Protection Law, you may file a complaint through our Customer Care channels:

If you are not satisfied with our response or if we do not respond within 15 business days, you can file a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA) through their official website sdaia.gov.sa or the National Data Governance Portal dgp.sdaia.gov.sa.

Disclaimer

This Privacy Policy is intended to inform you of our data practices and does not create any contractual rights or obligations.

For further inquiries, please contact Customer Care at: