Protecting Your Personal Data
We are committed to protecting your privacy and ensuring compliance with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations.
GDPR & PDPL Compliant
Compliant with European GDPR and the Saudi Personal Data Protection Law.
Data Controller Information
Fundtrics Limited Commercial Registration: 1010123456 Address: King Fahd Road, Riyadh 12345, Kingdom of Saudi Arabia Email: privacy@fundtrics.com Phone: +966 11 234 5678
Types of Data We Collect
Personal Data
- Full name
- Email address
- Phone number
- National address
- National ID / Iqama number
- Date of birth
- Nationality
Financial Data
- Bank account information
- Investment history
- Portfolio and holdings
- Financial transactions
- Payment information
Usage Data
- IP address and browser type
- Web pages you visit
- Time
- date and time spent
- Diagnostic data
- Preference settings
Purpose of Processing
Primary Purposes
- Providing and managing wealth management services
- Processing transactions and payments
- Personalizing investment recommendations
- Compliance with Saudi Capital Market Authority regulations
- Identity verification and fraud prevention
Secondary Purposes
- Sending updates and notifications
- Analyzing and improving our services
- Responding to your inquiries
- Market research and analytics
- Legal and regulatory compliance
Legal Basis for Processing
Your Consent
- When you subscribe to our services
- When you consent to cookies
- When you subscribe to newsletters
- When you participate in surveys
Contractual Obligation
- Executing service agreements
- Processing financial transactions
- Providing technical support
- Managing your account
Legal Obligation
- CMA regulatory compliance
- Anti-money laundering requirements
- Tax compliance
- Data protection under Saudi law
Data Retention Periods
We retain your personal data only for as long as necessary for the purposes specified in this policy: • Account data: Duration of your active account + 5 years • Financial data: 10 years as per CMA requirements • Transaction data: 7 years for tax purposes • Usage data: 24 months for analytics • Marketing data: Until unsubscribe or 2 years from last interaction After the retention period expires, we securely delete or anonymize your data.
Your Data Protection Rights
Under the Saudi Personal Data Protection Law and its implementing regulations, you have the following rights:
Right of Access
- Obtain a copy of your personal data
- Know the purposes of processing
- Identify data categories
- Know the recipients
Right to Rectification
- Correct inaccurate data
- Complete incomplete data
- Update old information
Right to Erasure
- Delete data when no longer needed
- Delete data upon consent withdrawal
- Delete data for unlawful processing
Right to Data Portability
- Receive your data in structured format
- Transfer data to another controller
- Direct transfer when technically feasible
Right to Object
- Object to marketing processing
- Object to automated processing
- Object to profiling
Right to Restrict Processing
- Restrict processing during accuracy verification
- Restrict unlawful processing
- Restrict processing for legal claims
Data Sharing and Disclosure
We Share Your Data With
- Service providers (payment processors
- hosting)
- Regulatory authorities (CMA)
- Legal partners (lawyers
- auditors)
- Authorized business partners
- In case of merger or acquisition
We Do Not Sell Your Data
- We do not sell or rent your personal data
- We do not share data for external marketing
- We share only what is necessary for service
Security Measures
We implement comprehensive technical and organizational security measures to protect your data: • Encryption: SSL/TLS encryption for all data transmission • Storage: Encrypted storage for sensitive data • Access Control: Multi-factor authentication • Monitoring: Continuous monitoring for threat detection • Backup: Regular backup and recovery • Audit: Annual third-party security audit • Training: Employee data protection training • Compliance: ISO 27001 and Saudi PDPL compliant
Contact Information
For any privacy-related inquiries or to exercise your rights: Data Protection Officer (DPO) Fundtrics Limited Email: dpo@fundtrics.com Phone: +966 11 234 5678 Address: King Fahd Road, Riyadh 12345, Kingdom of Saudi Arabia You have the right to file a complaint with: Saudi Data & AI Authority (SDAIA) Website: www.sdaia.gov.sa
Questions about your privacy?
Our Data Protection team is available to answer all your inquiries and help you exercise your rights.
Contact Data Protection OfficerThis policy complies with the Saudi Personal Data Protection Law and implementing regulations issued by the Saudi Data & AI Authority (SDAIA).