Introduction
Raqamyah for Debt-based Crowdfunding (referred to in this Privacy Policy as 'Raqamyah' or 'we') respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we handle your personal data and outlines your privacy rights, in compliance with the Personal Data Protection Law (PDPL) enforced in the Kingdom of Saudi Arabia. By using our platform, you agree to the terms of this Policy.
This Policy should be read alongside our General Terms and Conditions ('General Terms') and any other documents referred to in this Policy and the General Terms.
The following terms used in this Privacy Policy have the meanings set out below:
Services: refers to any products, services, content, features, technologies, functionalities, and all related websites, applications, and services we provide to you.
Platform: refers to the websites, mobile sites, or other digital means through which we offer our services.
About our Company
We are a closed joint stock company established under the laws of the Kingdom of Saudi Arabia, with Commercial Registration Number 1010449309 and Tax Registration Number 310204704600003. We are licensed by the Saudi Central Bank under license number 67/ش أ/202301. Our head office is located at 3252 Prince Mohammed Bin Abdulaziz Street, Al Dughaythir Commercial Complex No. 2, 2nd Floor, Al Olaya, Riyadh 12241-6231, Saudi Arabia.
What Data Do We Collect About You?
When you register with us to use certain services provided through our platform, we collect the following data:
Identity Information (including your name, date of birth, ID/residency information, passport details, and national address).
Contact Information(including your email address and phone number).
Bank Account Information and other financial data related to our services such as deposits and withdrawals.
Details about your business.
Data We Collect Automatically When You Use Our Services
When you interact with our platform or use our services, we automatically collect the following data:
Device information (such as IP address, operating system, and browser type).
Geolocation data.
Documents you provide to us.
Information required by Raqamyah for regulatory compliance with the Saudi Central Bank and other regulatory authorities, such as anti-money laundering regulations and Know Your Customer (KYC) requirements.
User data when visiting our website without registration, such as server logs, domain names, service providers, and referral/exit pages.
Information entered by users, such as filling out complaint forms or using other e-services.
Such data will be retained only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable regulations. Once the purpose has ended, the data will be securely deleted.
Cookies
We may use cookies to enhance your user experience. For more information, please visit:https://www.aboutcookies.org We use cookies only after obtaining the explicit consent of the user. Users may modify their preferences at any time through their browser settings or via the platform’s interface.
Data Received from Third Parties or Public Sources
We may receive personal data about you from various third-party sources and public records, including but not limited to the Saudi Credit Bureau (SIMAH), Bayan Credit Bureau, Thiqa, and Nafath, in accordance with applicable legal permissions and after obtaining any necessary consent.
Sources of Personal Data Collection
We collect personal data from multiple sources, including:
Data provided directly by the customer.
Publicly available data or data from official and commercial entities.
Authorized legal representatives.
Interaction with our digital platforms, whether through websites, apps, or paper forms.
Participation in surveys, feedback submissions, complaints, and inquiries. This includes both electronic and manual transactions.
Processing and Sharing Personal Data
We process personal data in accordance with the principles of the Saudi PDPL for purposes including:
Providing and improving our financial services.
Complying with legal and regulatory obligations, including those set by the Saudi Central Bank.
Enhancing information security.
Fulfilling Islamic Sharia obligations.
Addressing security or legal requirements.
With the explicit consent of the customer.
We do not share your data with third parties except:
With your explicit consent.
To comply with legal obligations.
With service providers who adhere to adequate data protection standards.
We also conduct regular assessments of service providers to ensure compliance with security procedures and disclose data to government and regulatory authorities as required.
Know Your Rights
As a customer of Raqamyah for Debt-based Crowdfunding, you have the following rights under the PDPL:
The right to be informed of the purpose and legal basis for data collection.
The right to access your personal data.
The right to request correction, deletion, or destruction of data.
The right to withdraw consent at any time.
To exercise any of these rights, please contact us using the information provided in the 'Contact Us' section or by email, with the subject line 'Privacy Policy'. Requests are processed within thirty (30) days of receipt, in accordance with the law Raqamyah may extend the period for fulfilling the data subject’s request for an additional thirty (30) days if processing the request requires unexpected or unusual effort, or if the company receives multiple requests from the same data subject. The data subject shall be notified in advance of the extension and the reasons behind it.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. Once the purpose is fulfilled, the data is securely deleted or destroyed.
Technical and Organizational Measures & Data Security
All information is stored on secure servers located within the Kingdom of Saudi Arabia. Raqamyah implements strict technical and organizational measures, including encryption, advanced authentication mechanisms, and access controls to protect your data from unauthorized access, alteration, or destruction. We also conduct periodic reviews of our information security programs.
Reporting a Data Breach
In the event of a personal data breach, we commit to notify the competent authority within seventy-two (72) hours of becoming aware of the incident. The data subject will also be notified during the same period via their registered email or through an in-platform notification. Corrective actions will be taken immediately.
How Will We Notify You of Changes to This Privacy Policy?
We may update this Privacy Policy from time to time. When we do, we will update the revision date on this page. Please check this page regularly. If any material changes are made to this privacy policy, we will notify you in advance before the changes take effect, either by email or via a notice within the platform.
Your continued use of the platform or services after changes are posted signifies your acceptance of those changes.
Links to Third-Party Websites
Our platform may contain links to external websites or applications. Please note that these sites have their own privacy policies, and we bear no responsibility for them. We encourage you to review the privacy policies of those websites before providing any personal data.
Contact Us
For further information or to exercise your rights, please contact us at: contactus@raqamyah.com, and include 'Privacy Policy' in the subject line.