Privacy Notice

Privacy Notice

 

SCOPE

This Privacy Notice (the “Notice”) governs your use of Sanad Cash spend management system, which provides services accessible at www.sanadcash.com (the “System”). The System is operated by Sanad Cash for Financial Technology Company, a corporation established under the laws of the Kingdom of Saudi Arabia, with its registered office in Riyadh, Saudi Arabia, under Commercial Registration number 1010725921 and unified number 7023868784 (hereafter referred to as “Sanad Cash”, “we”, “us”, or “our”). This Privacy Notice is an essential component of the System’s terms and conditions.

This policy governs the collection, processing, and storage of personal information by Sanad Cash for Financial Technology Company, covering both online and offline interactions.

By using our services, you consent to the collection and use of your personal information as outlined in this policy.

 

The information we collect

·        We collect personal information based on your engagement with our services, your preferences, and the features or products you use. This information may be provided directly by you during registration, through your use of our services, or via communication with us. It may also be shared on your behalf by your authorized company Administrator or obtained from third parties acting under your authorization. The types of personal information we collect may include (Name, Phone number, Email address, Date of birth, Gender, Credit/Debit card information, National address information, National ID/Iqama information, Passport information).

·        Portal and app login Information: Account login details, including login credentials and passwords.

o   Correspondence: Information you provide by filling out any of our forms or by communicating with us, whether face-to-face, by phone, email, online, or otherwise.

o   Marketing: Details of any marketing preferences you provide to us.

·        Device Data: We may collect information about the device you use to access our services, including your Internet Protocol (IP) address, device id/fingerprint, device type and information, operating system, and browser type.

·        Location Data: We may collect an approximate geolocation derived from your IP address or Location Services provided by your device.

·        Transaction Data: Information related to your card transactions, bill payments, reimbursements and, including account activities and the specific products or services utilized, payment mechanism, amount, location, and any additional information you provide will be collected.

·        Service Log and Usage Data: We may collect insights into how you interact with our services, including diagnostic and performance information, Device Data, the features you access, the pages you navigate, and the actions you perform.

·        Use of Cookies and Other Tracking Technologies: We use cookies and other tracking technologies to collect and store information about your interactions with our website. These technologies enhance your experience by personalizing content, improving functionality, and tailoring our services to your preferences. They may collect data such as your IP address, browser type, and information on how you navigate the site. Some cookies are essential for the operation of our website, while others help optimize performance and analyze site usage. You can manage your cookie preferences through your browser settings, though disabling certain cookies may affect the functionality of our website.

 

 

Legal Basis for Processing Personal Data

We will process personal data in accordance with the lawful grounds outlined by the PDPL, which include obtaining your explicit consent before processing your personal data (Consent). In some cases, we may process your personal data when it is necessary for fulfilling a contract to which you are a party (Contractual Requirement). Additionally, we may process personal data to comply with legal obligations that apply to us (Legal Obligation). Furthermore, we may process personal data based on our legitimate business interests, provided that such processing does not override your fundamental rights (Legitimate Interests).

 

Purposes for Processing Your Information

At Sanad Cash for Financial Technology Company, we use the personal information we collect in various ways to provide and enhance our services. This includes the administration of our web and mobile applications, communication with you, and compliance with legal requirements. Here’s how we may use your information:

·        Service provision and maintenance: To provide, operate and maintain our services, website and mobile App, and business.

·        Account access and management: To enable you to create and access your account.

·        System Functionality Improvement: To deliver and improve the functionality of our system through web and mobile application.

·        Customer support and assistance: To address your questions, resolve any problems, and provide assistance related to our services.

·        Communication and updates: We may send you important updates regarding our products, services, policies, or promotional offers.

·        Order and payment management: To handle orders, payments, and returns through our system.

·        Identity verification and fraud prevention: We conduct identity verification to protect you and ensure the security of our platforms, including monitoring and preventing fraudulent activities.

·        Regulatory compliance and terms adherence: To ensure adherence to our terms of service and comply with regulations set by authorities within the Kingdom of Saudi Arabia.

·        Performance optimization and analytics: We analyze your interactions and usage trend analysis with our services to optimize performance and improve functionality.

·        Automated decision-making and risk analysis: We may use automated decision-making or profiling processes in certain circumstances, such as fraud detection or risk analysis, to assess and detect potentially fraudulent or suspicious activities.

·        Generating Aggregate or Anonymized Data: We anonymize your information by removing or obscuring any details that could personally identify you. We may also combine your data with other data to produce aggregated insights.

Personal Data Storage and Security

·        We securely store your personal information on servers located in Saudi Arabia, implementing strict security measures to safeguard your data from unauthorized access, use, or disclosure. You are solely responsible for maintaining the security and confidentiality of your account username and password.

 

·        Our storage systems are protected by both technical and organizational measures designed to ensure the confidentiality and integrity of your personal information.

 

·        We are committed to maintaining the highest standards of data security. Our practices align with industry-recognized frameworks, including CIS Benchmarks™, PCI DSS, and other applicable security best practices.

 

·        We regularly review and update our security protocols to ensure they align with the latest best practices and provide continued protection for your data.

 

·        We keep your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by applicable laws, including obligations related to tax, accounting, or other legal requirements.

 

·        When we no longer need your personal information for business purposes or to comply with applicable laws, we will either delete or anonymize it. In cases where immediate deletion is not possible (e.g., data stored in backup archives), we securely store the data and prevent further processing until it can be removed.

 

·        While we implement rigorous security measures, it’s important to note that the internet is not entirely secure. We take all reasonable steps to protect your data in accordance with Saudi Arabia’s data protection regulations.

 

Rights of Data Subjects

As a data subject under the Personal Data Protection Law (PDPL), you have specific rights, including:

  • Right to Access: You may request access to the personal data we hold about you, subject to conditions that avoid impacting the rights of others.
  • Right to Obtain a Copy: You can request a clear and readable copy of your personal data, provided it does not interfere with others’ rights, such as intellectual property or trade secrets.
  • Right to Correction and Deletion: You have the right to request the correction of inaccurate or incomplete personal data or request the deletion of data that is no longer necessary for its original purpose.
  • Right to Restrict Processing: You may request a limitation on the processing of your personal data if there is a question regarding its accuracy or in other legally permitted circumstances.
  • Right to Destruction: You can request the destruction of your personal data when it is no longer required for the purpose for which it was collected.
  • Right to Withdraw Consent: If our processing of your data is based on your consent, you have the right to withdraw your consent at any time by contacting us.

To exercise these rights, please contact us via the methods provided in this policy. Upon receiving your request, we will respond within 30 days. In cases where multiple requests are made, or additional time is needed to handle complex requests, we may extend this period by another 30 days.

 

Sharing Your Personal Data

Sanad Cash may share your personal data with third parties, in full compliance with the Personal Data Protection Law (PDPL). We implement necessary safeguards to ensure your data remains protected during these transfers. The categories of recipients include:

  • Service Providers: Third-party companies that offer services such as IT services, card management, and professional consultancy on our behalf. These partners help us deliver, improve, and customize our services for you.
  • Regulatory and Legal Authorities: We may disclose your personal data to courts, regulatory bodies, or government authorities to comply with legal obligations or regulatory requirements within Saudi Arabia.
  • Business Partners: We may share your personal data with third-party companies or clients to promote products and services, or to assist with key functions such as fraud prevention and payment processing.
  • Corporate Transactions: In the event of a sale, merger, liquidation, receivership, or transfer of assets involving Sanad Cash or one of our affiliates, your personal data may be shared with potential buyers and their professional advisers.
  • Cross-Border Transfers: For operational or technical reasons, your personal data may be transferred to, stored, or processed in countries outside Saudi Arabia. In such cases, we ensure that adequate safeguards, such as standard contractual clauses, are in place to protect your data.

Your personal data is primarily stored on servers located in Saudi Arabia. However, if external systems or services, such as cloud-based solutions outside the Kingdom, become necessary, we may transfer your data accordingly.

By using our services, you consent to the transfer, storage, and processing of your personal data both within and outside Saudi Arabia, in accordance with this Privacy Policy and applicable legal requirements. We will ensure that appropriate protections are applied through contractual agreements with service providers.

By accepting this policy, you permit us to contact you through channels such as SMS, push notifications, WhatsApp, email, and phone. This includes updates on our products and services, as well as advertising, awareness campaigns, and marketing materials that may be relevant to you.

 

Changes to this Privacy Policy

We may update this Privacy Policy periodically to ensure compliance with relevant laws and regulations. If we make any material changes, we will inform you by either prominently posting a notice within the app or website, or by sending you a direct notification, such as through email. By continuing to use our services after such updates, you acknowledge and accept the changes to this Privacy Policy.

 

Contact information

If you have any inquiries or require assistance regarding this Privacy Policy, or if you wish to exercise your rights under the Personal Data Protection Law, you can reach us at any time by emailing dp@sanadcash.com.

 

 

 

 

This site is registered on wpml.org as a development site.