Privacy Policy
Saudi Fransi For Finance Leasing (J-B)
Privacy Policy
1. Privacy Notice
At J-B (referred to as "we", "us", or "our"), your privacy and the protection of your personal data are paramount. We are committed to processing your personal data in accordance with the applicable Personal Data Protection Laws and Regulations in the Kingdom of Saudi Arabia (PDPL).
This Privacy Notice outlines our approach to the collection, processing, storage, and protection of your personal data. It applies to all individuals who interact with us, including customers, visitors, and users (collectively referred to as “you” or “User”), whether through our website, mobile applications, or by other means.
We recognize your right to privacy and have adopted appropriate measures to protect your personal data. Our practices are guided by principles of transparency, accountability, and security, ensuring that your personal information is handled with the utmost care and in compliance with the applicable legal framework.
2. Why We Collect, Process, and Use Your Personal Data
We collect, process, and use your personal data to deliver high-quality services and fulfill our contractual and legal obligations. Specifically, your personal data may be processed for the following purposes:
• Provision of Services: To deliver the financial products and services that you have requested from us, that includes providing credit facilities as well as any After Sales services.
• Operational Efficiency: To ensure the accurate recording and validation of transactions, maintain efficiency in our services, and manage our relationship with you.
• Security and Fraud Prevention: To safeguard your personal data and Financing details through advanced security measures, prevent unauthorized access, detect and mitigate fraud, and protect against cyber threats.
• Regulatory Compliance: To comply with legal and regulatory requirements, including identity verification (Know Your Customer – KYC) and anti-money laundering (AML) regulations.
• Credit and Risk Assessment: To assess creditworthiness, collaborate with licensed credit bureaus, and provide financial services based on your credit profile.
• Customer Support: To respond to your inquiries, resolve complaints, and provide tailored customer support.
• Marketing and Communication: With your consent, to send you promotional materials, product updates, and special offers that align with your preferences.
• Service Improvement and Feedback: To gather customer feedback, analyze behavior, and enhance our products and services based on user experience and analytics.
• Notifications: To send you important updates related to your Financing account activities, such as transaction alerts, balance updates, or changes in service terms.
3. Lawful Basis for Processing Your Personal Data
In accordance with PDPL, we process your personal data on the following lawful bases:
• Contractual Necessity: To fulfill our obligations under the agreements we have with you, such as providing financing products or services.
• Legitimate Interests: To pursue our legitimate business interests, including improving our services, enhancing security, and conducting internal audits, while ensuring that such processing does not infringe upon your rights.
• Legal Compliance: To meet our regulatory and legal obligations as a Finance Company operating in Kingdom of Saudi Arabia, whether pursuant to laws applicable to us or applicable to you
• Consent: In cases where your consent is required, such as for marketing communications or the processing of sensitive personal data, we will ensure that consent is freely given, specific, informed, and unambiguous.
4. What Personal Data We Collect, Process, and Use
We may collect and process the following categories of personal data, depending on your relationship with us and the services you request:
• Identity Information: Full name, gender, nationality, IQAMA/National ID, passport details, job title, and contact details (e.g., phone number, email address).
• Financial Information: Bank account details, transaction history, account balance, credit status, investment records, and loan information.
• Contact Information: Residential address, postal address, and historical addresses.
• Biometric Information: Fingerprint data, facial recognition, voice recordings, and signature samples.
• Credit Information: Credit scores, income levels, assets, credit bureau reports, and details on any financial obligations.
• Other Data: Personal Data for compliance with laws and regulations and regulatory requirements, or for delivering online services. Such as, location (including geographic location and network IP address), cookies, communication records (including video or audio records). Personal data arising from customer investigation, e.g., Personal Data collected during customer due diligence, sanction or anti-money laundering checks
5. How We Collect Your Personal Data
We collect personal data through various channels, including:
• Direct Collection: Information that you provide when filling out forms, subscribing to services, or communicating with us (e.g., in-person, via phone, email, or online platforms).
• Automated Data Collection: Data collected through the use of cookies, server logs, and similar tracking technologies when you interact with our website or mobile application.
• Third-Party Sources: Data we may obtain from authorized third parties, such as credit bureaus, regulatory bodies, or public databases, in compliance with applicable regulations.
We ensure that any data collected from third-party sources is processed in a manner consistent with your rights and applicable data protection laws.
J-B may collect Personal Data from a source other that the Data Subject and may process Personal Data for purposes other than the ones for which they have been collected in the following situations only.
1. The Data Subject gives their consent in accordance with the provisions of this Law.
2. Personal Data is publicly available or was collected from a publicly available source.
3. The Controller is a Public Entity, and the Collection or Processing of the Personal Data is required for public interest or security purposes, or to implement another law, or to fulfill judicial requirements.
4. Complying with this may harm the Data Subject or affect their vital interests
5. Personal Data Collection or Processing is necessary to protect public health, public safety, or to protect the life or health of specific individuals.
6. Personal Data Collection is necessary to achieve legitimate interests of the Controller, without prejudice to the rights and interests of the Data Subject, and provided that no Sensitive Data is to be processed.
6. Data Retention, Storage, and Destruction
Your Personal Data will be stored and retained securely to the extent necessary or as required by the law, and for a minimum of ten years or for the duration necessary to fulfill the outlined purposes in this Notice This duration might be changed or extended based on your continued usage and benefiting of our services and products, and/or based on regulatory requirements for the retention of Personal Data or connected information. Your personal data will be stored on servers located within the Kingdom of Saudi Arabia. We employ industry-standard security measures, such as encryption, firewalls, and access controls, to protect your data from unauthorized access. At the lapse of such duration(s) or upon your request to the extend technically applicable and legal permissible, such data will be destructed securely.
7. Data Protection
Your data security is important to us. We have deployed robust organizational and technical measures to protect your data against unauthorized access, disclosure, or processing. These measures include:
• Encryption: All sensitive personal data is encrypted both in transit and at rest.
• Access Control: Access to personal data is restricted to authorized personnel only, based on their job responsibilities and the principle of least privilege.
• Audits and Training: Regular audits of our systems and processes ensure compliance with data protection regulations. Additionally, our staff receives ongoing training on data privacy and security practices.
Although we do our due diligence, we make no warranties, towards the security of third-party links in our websites. BSF assumes no responsibility for the completeness, accuracy, reliability, nor the protection from third-parties (including without limitation software, websites, etc.,), if any, which may be linked to our websites.
8. How We May Share Your Personal Data
We may share your personal data with the following entities, subject to strict confidentiality agreements and only for the purposes outlined in this notice:
• J-B Group Affiliates: To deliver services and manage our business operations.
• Regulatory Bodies and Government Authorities: whether for verification purposes, and /or to fulfil regulatory compliance obligations, or for other legal requirements
• Service Providers and Partners: Trusted third-party service providers who assist us in providing our products and services, such as IT providers, payment processors, and marketing partners.
• Competent Authorities: For credit assessment and reporting purposes.
• Payment Service Providers: to facilitate your payments.
We ensure that any transfer of personal data to third parties is performed in compliance with the applicable data protection regulations, including obtaining your consent when required.
9. How We Use Cookies
We use cookies to improve your browsing experience and enhance the functionality of our website and applications. Cookies enable us to:
• Recognize your device and preferences.
• Track usage patterns for website analytics.
• Provide customized services based on your preferences. You can manage or disable cookies through your browser settings.
10. Individual Who Lacks Legal Capacity
For individuals who lack legal capacity (e.g., minors or individuals under guardianship), we will process personal data only with the explicit consent of their legal guardian or as required by law. We ensure that such data is handled with additional safeguards to protect the individual's privacy and rights.
11. Your Rights as Our Customer
In accordance with the Personal Data Protection Law (PDPL) in the Kingdom of Saudi Arabia, you have the following rights with respect to your personal data processed by J-B:
1. Right to Be Informed: You have the right to be informed about how your personal data is processed, the lawful basis for the processing, and the purposes for which your data is collected and used.
2. Right of Access to Personal Data: You have the right to access your personal data that has been collected and processed by J-B.
3. Right to Request Access to Personal Data (Right to Request a Copy): You have the right to request a copy of your personal data in a clear, structured, and readable format. The format will be clear and identical to the content of the records, and J-B will provide this to you free of charge.
4. Right to Request Correction of Personal Data: You have the right to request the correction, completion, or updating of your personal data that has been collected and processed by J-B.
5. Right to Request Destruction of Personal Data: As long as there is no legal requirement or legitimate interest to Process or retain the data, you have the right to request Destruction of your Personal Data available to BSF, if it is no longer needed for the purpose it was originally collected
6. Right to Withdraw Consent for Personal Data: You have the right to withdraw your consent to the processing of your personal data at any time, except where there are legitimate grounds that require the continuation of processing.
12. Privacy Notice Amendments
J-B reserves the right to amend this Privacy Notice periodically to reflect changes in our practices, regulatory updates, or technological advancements. We will notify you of any significant changes to this notice and encourage you to review the latest version regularly. All updates will be published on our website and made available through other communication channels, as applicable. The latest version of the Privacy Notice will always indicate the date of the most recent revision.
13. Contacting Us
Maintaining the privacy and trust of our customers data is of utmost importance for J-B, and for any queries or to exercise any of the rights mentioned, please contact our Data Privacy Office at DPO@J-B.com.sa
14. Explanation of Key Terms
• PDPL (Personal Data Protection Law): The applicable legal framework governing the protection of personal data in the Kingdom of Saudi Arabia.
• Personal Data: Any element of data, regardless of its source or form, that independently or when combined with other available information could lead to the identification of an individual specifically, or that may directly or indirectly make it possible to identify an individual, including but not limited to name, personal identification number, addresses, contact numbers, license numbers, records, personal assets, bank and credit card numbers, photos and videos of an individual, and any other data of personal nature
• Collection: The collection of Personal Data by J-B by the provisions of this Law, either from the Data Subject directly, a representative of the Data Subject, any legal guardian over the Data Subject, or any other party
• Destruction: Any action taken on Personal Data that makes it unreadable and irretrievable, or impossible to identify the related Data Subject
• Processing: Any operation carried out on Personal Data by any means, whether manual or automated, including collecting, recording, saving, indexing, organizing, formatting, storing, modifying, updating, consolidating, retrieving, using, disclosing, transmitting, publishing, sharing, linking, blocking, erasing and destroying data
• Data Subject: The individual whose personal data is being processed (also referred to as “you” or “customer(s)” in this Notice)
• Consent: Consent is a crucial concept that refers to the Data Subject’s freely given, specific, informed, and unambiguous agreement to the Processing of their Personal Data. It's a fundamental requirement for organizations to collect, use, or share Personal Data lawfully and transparently.