Privacy Policy

At Credit Line, we take privacy and data security seriously. We believe that our users have the right to know what data we collect, how we use it, and to have full control over their data, including the right to delete it at any time. We are committed to maintaining the security and transparency of our data processing methods. We value your privacy and will never sell or share your personal data with any third party.

Last Modified: 12 Aug 2025

Introduction

Credit Line is a company established under the Saudi Companies Law with the Unified National Number (7042944996), located at3283, Anas Bin Malik Road, Al-Narjis District, 8536 Riyadh 13323, and licensed by the Saudi Central Bank (SAMA). We are committed to protecting the privacy of your data and processing it in compliance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia, its Implementing Regulations, and the instructions issued by the Saudi Data & Artificial Intelligence Authority (SDAIA) and SAMA.

 

Definitions

For the purposes of this Policy, thefollowing terms have the meanings assigned to them in the PDPL and its Implementing Regulations:

Personal Data: Any information that identifies an individual or makes them identifiable, directly or indirectly, regardless of its source or form.

Sensitive Data: Personal data relating to belief, political opinions, affiliations, health data, biometric data, or data indicating accusation, conviction, or special needs.

Data Subject: The natural person to whom the personal data relates.

Processing: Any operation performed on personal data, such as collection, storage, use, transfer, or destruction.

Controller: The entity that determines the purposes and means of processing.

Processor: The entity that processes personal data on behalfof the controller.

Cross-Border Transfer: Sending or sharing data outsidethe Kingdom.

 

Data We Collect and Process

We collect and process various categories of personal data, including:

  • Identity Data: Name, ID number, date of birth, nationality, marital status.
  • Contact Data: National address, email, phone numbers.
  • Financial Data: Bank accounts, salary, financial obligations, credit status.
  • Employment Data: Employer ,job title, length of service, sector.
  • Technical Usage Data: IP address, device type, geolocation, browsing behavior, cookies.

Methods of Data Collection

  • Directly from you through forms or contracts.
  • From official/authorized sources (e.g., SIMAH, GOSI, National Information Center, Ministry of Justice, Saudi Post).
  • Automatically via our website or application (e.g., cookies, pixels, analytics).

 

Purposes of Processing

Credit Line processes your personal data for legitimate, specific purposes to the extent required by law orcontract and in line with the PDPL and its Implementing Regulations, including:

1.     Provision of services and contract performance

  • Opening accounts; providing finance products and services.
  • Carrying out financial and administrative transactions.
  • After-sales services and technical support.

2.     Regulatory compliance

  • Complying with requirements of competent authorities such as SAMA and other relevant authorities.
  • Implementing KYC obligations and AML/CFT requirements.
  • Preparing regulatory, accounting, and tax reports.

3.     Identity and data verification

  • Verifying identity, financial, and employment information.
  • Secure technical integrations or direct exchange with affiliates or authorized parties to validate data.

4.     Credit assessment and risk management

  • Assessing creditworthiness and repayment ability.
  • managing delinquency and rescheduling.
  • preparing risk reports and expected-loss analyses.

5.     Authorized marketing and service development

  • Sending promotional offers or marketing information.
  • analyzing usage patterns to improve services and personalize content.

6.     Collections and legal actions

  • Managing collections and outstanding debts.
  • Taking legal measures to protect Credit Line’s rights or recover dues.

7.     Vital interests, health, and public safety

  •  Processing in emergencies or where necessary.

8.     Other legitimate purposes

  •  Any other processing that does not conflict with your fundamental rights and freedoms and is permitted by law.

Legal Bases for Processing

We rely on one or more of the followinglegal bases, depending on purpose:

1.     Explicit Consent

  • Freely given, explicit, and informed consent for specified purposes (e.g., marketing or sharing with specific parties).
  • You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

2.     Contract Performance

  • Where processing is necessary to enter into or perform a contract to which you are a party (e.g., finance agreement or requested services).

3.     Legal/Regulatory Obligation

  • To comply with Saudi laws and regulations, including requirements of SAMA, SDAIA, and AML/CFT laws.

4.     Legitimate Interests

  • Where necessary for Credit Line’s or a third party’s legitimate interests and not overridden by your fundamental rights and freedoms (e.g., service improvement or fraud prevention).

5.     Public Interest/Official Authority

  • Where necessary to perform a task in the public interest or pursuant to a competent authority’s request.

Data Sharing with Affiliates

1.     Scope of Sharing

  • Credit Line may establish a secure technical integration or direct data exchange with its affiliates within the Kingdom of Saudi Arabia to exchange customer data.

2.     Purposes of Sharing

  • Verifying customer identity and data accuracy.
  • Enhancing service quality and processing speed.
  • Facilitating provision of joint products or services.
  • Fraud prevention and detection of unlawful activities.

3.     Legal Basis for Sharing

  • Your explicit consent to share data with affiliates; or
  • Reliance on another legal basis permitted by the PDPL (e.g., legitimate interests or legal obligation).

4.     Safeguards

  • Limiting sharing to the minimum data necessary to achieve the legitimate purpose.
  • Protecting data in transit using advanced security and encryption protocols.
  • Ensuring all authorized affiliates comply with applicable data protection standards in the Kingdom.

5.     Your Options

  • You may request information about the nature of data shared with affiliates.
  • You may withdraw your consent at any time. Withdrawal does not affect prior processing and sharing based on another valid legal basis may continue.

 

Cross-Border Data Transfer

We will not transfer your personal dataoutside the Kingdom except where necessary and in accordance with the PDPLImplementing Regulations, ensuring the recipient provides an equivalent levelof protection.

 

Your Rights

In line with the PDPL, you have theright to:

  1. Know the nature of personal data collected and the purposes of processing.
  2. Access your personal data we hold and obtain a copy when needed.
  3. Rectify inaccurate or outdated personal data.
  4. Erase personal data no longer necessary for the purposes collected, to the extent permitted by law.
  5. Withdraw Consent at any time without affecting prior lawful processing.
  6. Lodge Complaints with the competent authority if you believe your data protection rights have been violated.
  7. You can contact our Data Protection Officer at: data.privacy@Creditline.finance. We will respond within 30 days from receipt of your request, extendable in accordance with the law, and we will notify you of the reason for any extension.

Data Retention

We retain your personal data for the period required by applicable laws or for legitimate regulatory or legalpurposes. Thereafter, we will securely delete or anonymize it.

 

Data Protection

We implement strict technical and organizational measures to protect your personal data against unauthorized access or use, including:

  • Encryption for data at rest and in transit.
  • Access controls with defined permissions.
  • Periodic security and risk reviews to assess and manage cybersecurity risks.
  • Data protection agreements with third parties that process personal data on our behalf.

 

Cookies

We use cookies to enhance yourexperience. You can manage or disable cookies through your browser settings.

 

Acceptance of this Policy

We may update this Policy from time to time. We will inform you of any material changes via email, an in-app notice,or on our website. By using or continuing to use our website, mobile application, or services, you acknowledge and agree to be bound by this Privacy Policy and any updates made to it. If you do not agree to any part of this Policy, please stop using our website, application, and services immediately.

 

Contact us

For inquiries or to exercise your rights, contact: data.privacy@Creditline.finance

Amsad logo
LogoLogo
Privacy Policy
Terms and Conditions
Customer Protection Principles