Website Data Privacy Policy

Introduction

Data privacy has become one of the most critical aspects in the modern era, particularly with respect to Personal Data.

FinZey Finance Company is committed to safeguarding the privacy of its customers' Personal Data and ensuring its protection in compliance with applicable legislative and regulatory requirements. Accordingly, this Policy has been developed to clarify how we collect, use, and process Personal Data when you use our mobile application and website.

Personal Data is collected solely for legitimate purposes, including the provision of financing services, facilitating access for customers and all website visitors, and ensuring an enhanced user experience.

Collection of Personal Data

You may choose to provide us with Personal Data through a variety of forms and applications made available on our mobile application or through our website at www.finzey.com. For example, you may wish to provide us with your name, national identification number, and contact details in order for us to contact you for recruitment purposes, to apply for financing, to request after-sales services, to report misconduct, or to engage with us as a supplier or business partner.

These forms require the submission of basic contact information, in addition to other information necessary to fulfill your request. Personal Data may also be collected when you contact us through our unified number, toll-free number, email, or through any other available communication channels.

The Personal Data you provide may include basic contact information such as your full name, national identification number, contact details including phone numbers, email address, region, and city, employer details, length of employment, financing amount, individual monthly income, your curriculum vitae and professional experience in relation to a vacancy at FinZey, as well as any other information you choose to provide in the free-text fields available on the website.

Personal Information We Collect About You

We collect and process different categories of Personal Data depending on the nature of the requested service. Such categories may include, without limitation, identification data, contact data, employment and financial data, as well as financing or recruitment application data, through application forms made available via the mobile application or through any other approved communication channels.

Use of Personal Data and Legal Basis

We process your Personal Data for the following legitimate purposes and based on the lawful bases stipulated under the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia:

Perform or Take Steps to Conclude a Contract

• We may process your Personal Data to verify your identity, review and process financing or recruitment applications, conclude and administer contracts, provide agreed services, communicate with you regarding your account or application, monitor contractual obligations, and notify you of due dates. Such processing is necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering into a contract.
• We may also use your Personal Data to process your financing application, deliver the requested services, provide updates on the status of your application, and communicate with you to ensure a comprehensive financing experience that meets your needs and expectations.

Providing Support

• Assisting customers with their requests, complaints, or reports of violations of laws and regulations.
• Supporting customers in exercising their rights under the Personal Data Protection Law and ensuring compliance with such rights.

Marketing

• Conducting market research to improve our products and services in cooperation with authorized agents and ensuring they meet your expectations and needs.
• Contacting you to request your participation in customer satisfaction surveys. The results of such surveys may be used to enhance our services and evaluate new and existing products.
• Carrying out targeted online advertising and personalized marketing campaigns based on your interests and needs, and informing you of promotions and special events that may be of interest to you.
• Responding to your inquiries.

You may opt out of receiving marketing communications from us at any time by following the unsubscribe instructions included in any text message you receive, by informing us when we contact you, or by contacting us directly.

Sharing Your Personal Data with Third Parties

Your Personal Data may be shared with third parties or governmental entities, such as the Saudi Central Bank and the Saudi Credit Bureau (SIMAH), for the purposes described below:

• Your payment record, including arrears, defaults, and delayed payments.
• Fraud prevention service providers for payment processing and, where necessary, fraud screening.
• In response to a valid lawful request from government authorities or law enforcement agencies.
• Third-party service providers engaged by us to deliver services involving data processing, such as implementing marketing initiatives or conducting customer surveys on our behalf.
• Third parties such as law firms and courts to enforce or apply any contract entered into with you.
• Third parties such as police authorities and regulatory bodies to protect our rights, property, customers, employees, and assets.

We do not sell Personal Data to third parties. We only permit third parties to send you marketing communications where we have obtained your consent to do so.

Third-Party Websites and Applications

We may provide links to other websites, including social media sites such as Instagram, TikTok, and X. You may have accounts on these third-party sites or applications that allow you to log in, post content, or join communities from our site.

When you visit social media sites, you are subject to the privacy policies of third parties. You should familiarize yourself with the privacy policies of these websites before using them, as FinZey Finance is not responsible for the privacy practices or content of such third-party websites or applications.

Legitimate Interests and Interests of Third Parties

• We may use your data to analyze financial performance and plan for the future, and to ensure compliance with regulatory requirements such as the Saudi Central Bank by conducting internal audits, optimizing operations, and reducing risk.
• We also manage relationships with suppliers and business partners, including contract negotiation and joint account management.
• In an emergency or when there are potential risks that affect your safety and security, we use your data to contact and alert you. If necessary, we conduct internal investigations to ensure compliance with company policies and prevent illegal behavior.

Employment

When you apply for a job or enquire about employment opportunities with FinZey Finance, we may use the information you provide, such as your resume, for the purpose of reviewing your application and considering your nomination for employment purposes. We may use this information to respond to your inquiries or requests related to employment whether the job is advertised on the Company's website or through other media.

Children's Data

Our services at FinZey Finance are not targeted at children under the age of 18. We do not knowingly collect or process children's Personal Data. If we discover that we have inadvertently collected personal information about a child, we will delete that information immediately. We recommend that parents and guardians monitor their children's online activity to ensure that they do not provide any personal information via our platforms.

Retention Period of Personal Data

At FinZey Finance, we retain your Personal Data for as long as necessary for the purposes for which it was collected or for legal and operational purposes related to the services we provide. For example, when you obtain financing.

• We retain information about your account so that we can fulfill the specific arrangements you have made. After that, we retain the information for a period that enables us to respond to complaints, queries, or concerns related to your account, including legal requirements.
• We retain customer data for 10 years in accordance with regulatory requirements. In the event of legal disputes or inquiries, we may retain this data for more than 10 years until the investigation, dispute, or complaint is fully addressed.
• We retain information to ensure that you receive any credits owed to you.
• If you request deletion of your Personal Data, we may not be able to accommodate this request if you have taken out a credit loan or other service with us within the last ten years, or if there are ongoing legal disputes. If you have an unpaid balance, you can contact us after this period has elapsed to reapply.
• We will not be able to delete your Personal Data if we have an open complaint or issue related to your dealings with us, as such data remains necessary to properly address the complaint and resolve the dispute.

Your Rights as a Personal Data Subject

You have several rights related to your Personal Data under the Saudi Personal Data Protection Law. In some cases, we may ask for additional information to confirm your identity and help locate your Personal Data. Normally, we will respond to your requests within 30 days of receiving your request.

• Your right to know how this Privacy Notice informs you of how we process your data.
• You can ask us to stop sending you marketing messages. However, if you subsequently apply for financing services with us, we may need to contact you about the services you requested.
• You can ask us to stop using your Personal Data when we do so based on legitimate interests, except in the cases mentioned in Section Five.
• You can ask us to stop processing your Personal Data for marketing purposes, including analytics for targeted marketing purposes.
• You can access your personal information that we hold, except in cases involving information about others who have not consented to disclosure or legally protected information.
• You can request a copy of your Personal Data and we will provide it electronically in a structured, commonly used, machine-readable format, such as a PDF file.
• You can ask us to correct your Personal Data (Right to Rectification) if such information is inaccurate or incorrect.
• You can ask us to erase your Personal Data, and we will delete your data from our active systems. However, we may retain a restricted copy for up to 10 years to fulfill legal obligations and apply legal process only, and it will not be used for any other purpose.
• If the data is used for analysis or research purposes, your identity will be anonymized to ensure that it is not directly related to you.
• If the processing of your data depends on your consent, you can withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing previously carried out based on consent before its withdrawal.

If you have concerns about how we handle your Personal Data or wish to exercise any of these rights, we encourage you to contact us directly. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant authority through SAMA Cares.

Ensuring the Protection of Personal Data

At FinZey Finance, we are committed to protecting your Personal Data from loss, improper use, or unauthorized modification. For this reason, we rely on advanced physical, electronic, and administrative procedures to ensure the protection of information. For example, our servers can only be accessed by authorized personnel, and your data is only shared with relevant individuals when necessary to complete transactions and provide the services you requested.

To protect your privacy and the security of your data, we verify your identity before granting access to your Personal Data, making changes to it, providing copies, or processing any other requests related to your rights.

We also apply data anonymization techniques and convert data into statistical or aggregated data to ensure that it cannot be identified or associated with you as a natural person. This aggregated data cannot be directly linked to you and is used to conduct research, analysis, and produce reports and statistical studies.

Although we do our best to protect the confidentiality of your Personal Data, online transfers cannot be fully guaranteed. By using this website, you acknowledge that:

• You have read the Data Privacy Policy and Data Privacy Notice and agree to everything contained therein.
• You have been given the opportunity to view the Privacy Policy, have read it, and agree to all its terms.
• We accept no responsibility for unauthorized disclosure of your Personal Data resulting from transmission errors or unauthorized acts by third parties.

Change This Policy

We may update this policy periodically. You will be notified of any changes by posting an updated version on our website and/or by contacting you via email. These changes will take effect immediately upon posting or notification. We recommend that you review this policy regularly when visiting our website.