{"id":12954,"date":"2021-01-27T08:23:10","date_gmt":"2021-01-27T08:23:10","guid":{"rendered":"https:\/\/sanid.sa\/new-site\/?page_id=12954"},"modified":"2025-09-28T08:01:34","modified_gmt":"2025-09-28T08:01:34","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/sanid.sa\/new-site\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"12954\" class=\"elementor elementor-12954\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-2b1184b0 elementor-section-boxed elementor-section-height-default elementor-section-height-default wpr-particle-no wpr-jarallax-no wpr-parallax-no wpr-sticky-section-no sc_fly_static\" data-id=\"2b1184b0\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-extended\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-153e1c19 sc_content_align_inherit sc_layouts_column_icons_position_left sc_fly_static\" data-id=\"153e1c19\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-54db29de elementor-widget__width-initial sc_fly_static elementor-widget elementor-widget-text-editor\" data-id=\"54db29de\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2 data-start=\"97\" data-end=\"119\"><strong data-start=\"100\" data-end=\"117\">1. Who We Are<\/strong><\/h2><p data-start=\"120\" data-end=\"483\">The Saudi Financial Support Services Company \u2013 <strong data-start=\"167\" data-end=\"176\">SANID<\/strong>, a Closed Joint Stock Company registered in the Kingdom of Saudi Arabia, Commercial Registration No. <strong data-start=\"278\" data-end=\"294\">(1010059195)<\/strong>, Unified Number <strong data-start=\"311\" data-end=\"327\">(7000662424)<\/strong> (hereinafter referred to as <strong data-start=\"356\" data-end=\"367\">\u201cSANID\u201d<\/strong> or <strong data-start=\"371\" data-end=\"388\">\u201cthe Company\u201d<\/strong> or <strong data-start=\"392\" data-end=\"400\">\u201cwe\u201d<\/strong>), is a leading Saudi provider of comprehensive financial solutions and services.<\/p><p data-start=\"485\" data-end=\"804\">Our offerings include \u2013 but are not limited to \u2013 point-of-sale (POS) devices, ATM management, e-commerce solutions, cash center management and operations, prepaid cards, cash recycling machines, and self-service devices, serving banks, financial institutions, and corporate clients across the Kingdom of Saudi Arabia.<\/p><p data-start=\"806\" data-end=\"991\">The Company is regulated and supervised by the Saudi Central Bank (<strong data-start=\"873\" data-end=\"881\">SAMA<\/strong>) and the Ministry of Interior and is fully committed to complying with all applicable laws and regulations.<\/p><hr data-start=\"993\" data-end=\"996\" \/><h2 data-start=\"998\" data-end=\"1031\"><strong data-start=\"1001\" data-end=\"1029\">2. Purpose of the Notice<\/strong><\/h2><p data-start=\"1032\" data-end=\"1243\">This Privacy Notice (\u201c<strong data-start=\"1054\" data-end=\"1064\">Notice<\/strong>\u201d) explains how SANID collects, processes, uses, stores, and protects your personal data, as well as the legal bases for processing, your legal rights, and how to exercise them.<\/p><p data-start=\"1245\" data-end=\"1457\">This Notice has been prepared in accordance with the <strong data-start=\"1298\" data-end=\"1337\">Personal Data Protection Law (PDPL)<\/strong>, its implementing regulations, and all other applicable laws and regulations in force in the Kingdom of Saudi Arabia.<\/p><hr data-start=\"1459\" data-end=\"1462\" \/><h2 data-start=\"1464\" data-end=\"1487\"><strong data-start=\"1467\" data-end=\"1485\">3. Definitions<\/strong><\/h2><div class=\"_tableContainer_1rjym_1\"><div class=\"group w-fit _tableWrapper_1rjym_13 flex flex-col-reverse\" tabindex=\"-1\"><table class=\"w-fit min-w-(--thread-content-width)\" data-start=\"1489\" data-end=\"3159\"><thead data-start=\"1489\" data-end=\"1516\"><tr data-start=\"1489\" data-end=\"1516\"><th data-start=\"1489\" data-end=\"1495\" data-col-size=\"sm\">No.<\/th><th data-start=\"1495\" data-end=\"1502\" data-col-size=\"sm\">Term<\/th><th data-start=\"1502\" data-end=\"1516\" data-col-size=\"xl\">Definition<\/th><\/tr><\/thead><tbody data-start=\"1545\" data-end=\"3159\"><tr data-start=\"1545\" data-end=\"1773\"><td data-start=\"1545\" data-end=\"1549\" data-col-size=\"sm\">1<\/td><td data-start=\"1549\" data-end=\"1565\" data-col-size=\"sm\">Personal Data<\/td><td data-start=\"1565\" data-end=\"1773\" data-col-size=\"xl\">Any data, regardless of its source or form, that would lead to identifying a person directly or indirectly, including: name, ID number, address, contact number, photographs, or any other identifying data.<\/td><\/tr><tr data-start=\"1774\" data-end=\"1993\"><td data-start=\"1774\" data-end=\"1778\" data-col-size=\"sm\">2<\/td><td data-start=\"1778\" data-end=\"1795\" data-col-size=\"sm\">Sensitive Data<\/td><td data-start=\"1795\" data-end=\"1993\" data-col-size=\"xl\">Personal data revealing an individual\u2019s racial or tribal origin, religious, intellectual, or political beliefs, health or genetic data, banking or credit data, location data, or criminal record.<\/td><\/tr><tr data-start=\"1994\" data-end=\"2170\"><td data-start=\"1994\" data-end=\"1998\" data-col-size=\"sm\">3<\/td><td data-start=\"1998\" data-end=\"2011\" data-col-size=\"sm\">Processing<\/td><td data-start=\"2011\" data-end=\"2170\" data-col-size=\"xl\">Any operation performed on personal data, whether manual or automated, such as collection, recording, storage, use, disclosure, alteration, or destruction.<\/td><\/tr><tr data-start=\"2171\" data-end=\"2331\"><td data-start=\"2171\" data-end=\"2175\" data-col-size=\"sm\">4<\/td><td data-start=\"2175\" data-end=\"2193\" data-col-size=\"sm\">Data Controller<\/td><td data-start=\"2193\" data-end=\"2331\" data-col-size=\"xl\">The entity that determines the purpose of collecting personal data and the method of processing it, whether a natural or legal person.<\/td><\/tr><tr data-start=\"2332\" data-end=\"2499\"><td data-start=\"2332\" data-end=\"2336\" data-col-size=\"sm\">5<\/td><td data-start=\"2336\" data-end=\"2353\" data-col-size=\"sm\">Data Processor<\/td><td data-start=\"2353\" data-end=\"2499\" data-col-size=\"xl\">The entity that processes personal data on behalf of the Data Controller and according to its instructions, whether a natural or legal person.<\/td><\/tr><tr data-start=\"2500\" data-end=\"2659\"><td data-start=\"2500\" data-end=\"2504\" data-col-size=\"sm\">6<\/td><td data-start=\"2504\" data-end=\"2514\" data-col-size=\"sm\">Consent<\/td><td data-start=\"2514\" data-end=\"2659\" data-col-size=\"xl\">The explicit permission given by the Data Subject \u2013 by any reliable means \u2013 for the processing of their personal data for a specific purpose.<\/td><\/tr><tr data-start=\"2660\" data-end=\"2777\"><td data-start=\"2660\" data-end=\"2664\" data-col-size=\"sm\">7<\/td><td data-start=\"2664\" data-end=\"2679\" data-col-size=\"sm\">Data Subject<\/td><td data-start=\"2679\" data-end=\"2777\" data-col-size=\"xl\">The individual to whom the personal data relates and who is either identified or identifiable.<\/td><\/tr><tr data-start=\"2778\" data-end=\"2941\"><td data-start=\"2778\" data-end=\"2782\" data-col-size=\"sm\">8<\/td><td data-start=\"2782\" data-end=\"2805\" data-col-size=\"sm\">Personal Data Breach<\/td><td data-start=\"2805\" data-end=\"2941\" data-col-size=\"xl\">Any incident leading to unauthorized access to, disclosure, destruction, or alteration of personal data without legal authorization.<\/td><\/tr><tr data-start=\"2942\" data-end=\"3055\"><td data-start=\"2942\" data-end=\"2946\" data-col-size=\"sm\">9<\/td><td data-start=\"2946\" data-end=\"2959\" data-col-size=\"sm\">Disclosure<\/td><td data-start=\"2959\" data-end=\"3055\" data-col-size=\"xl\">Enabling a person or entity to access, reveal, send, or transfer personal data by any means.<\/td><\/tr><tr data-start=\"3056\" data-end=\"3159\"><td data-start=\"3056\" data-end=\"3061\" data-col-size=\"sm\">10<\/td><td data-start=\"3061\" data-end=\"3071\" data-col-size=\"sm\">Storage<\/td><td data-start=\"3071\" data-end=\"3159\" data-col-size=\"xl\">The retention of personal data in any medium that allows retrieval or future access.<\/td><\/tr><\/tbody><\/table><\/div><\/div><hr data-start=\"3161\" data-end=\"3164\" \/><h2 data-start=\"3166\" data-end=\"3204\"><strong data-start=\"3169\" data-end=\"3202\">4. Legal Bases for Processing<\/strong><\/h2><p data-start=\"3205\" data-end=\"3319\">The Company relies on one or more of the following legal bases for collecting and processing your personal data:<\/p><ul data-start=\"3320\" data-end=\"3645\"><li data-start=\"3320\" data-end=\"3400\"><p data-start=\"3322\" data-end=\"3400\">Contractual necessity for the performance of agreed services or obligations.<\/p><\/li><li data-start=\"3401\" data-end=\"3471\"><p data-start=\"3403\" data-end=\"3471\">Legitimate interest that does not conflict with your legal rights.<\/p><\/li><li data-start=\"3472\" data-end=\"3531\"><p data-start=\"3474\" data-end=\"3531\">Direct benefit that provides tangible advantage to you.<\/p><\/li><li data-start=\"3532\" data-end=\"3591\"><p data-start=\"3534\" data-end=\"3591\">Legal obligation under applicable laws and regulations.<\/p><\/li><li data-start=\"3592\" data-end=\"3645\"><p data-start=\"3594\" data-end=\"3645\">Explicit consent, in cases where required by law.<\/p><\/li><\/ul><hr data-start=\"3647\" data-end=\"3650\" \/><h2 data-start=\"3652\" data-end=\"3696\"><strong data-start=\"3655\" data-end=\"3694\">5. Types of Personal Data Collected<\/strong><\/h2><p data-start=\"3697\" data-end=\"3739\">This may include, but is not limited to:<\/p><ul data-start=\"3740\" data-end=\"4098\"><li data-start=\"3740\" data-end=\"3820\"><p data-start=\"3742\" data-end=\"3820\"><strong data-start=\"3742\" data-end=\"3760\">Identity Data:<\/strong> Full name, National ID\/Iqama, date of birth, nationality.<\/p><\/li><li data-start=\"3821\" data-end=\"3889\"><p data-start=\"3823\" data-end=\"3889\"><strong data-start=\"3823\" data-end=\"3840\">Contact Data:<\/strong> Phone number, email address, national address.<\/p><\/li><li data-start=\"3890\" data-end=\"3946\"><p data-start=\"3892\" data-end=\"3946\"><strong data-start=\"3892\" data-end=\"3911\">Financial Data:<\/strong> Account and transaction details.<\/p><\/li><li data-start=\"3947\" data-end=\"4022\"><p data-start=\"3949\" data-end=\"4022\"><strong data-start=\"3949\" data-end=\"3969\">Compliance Data:<\/strong> Documents required to meet regulatory obligations.<\/p><\/li><li data-start=\"4023\" data-end=\"4098\"><p data-start=\"4025\" data-end=\"4098\"><strong data-start=\"4025\" data-end=\"4044\">Technical Data:<\/strong> IP addresses, cookies data, electronic access logs.<\/p><\/li><\/ul><hr data-start=\"4100\" data-end=\"4103\" \/><h2 data-start=\"4105\" data-end=\"4143\"><strong data-start=\"4108\" data-end=\"4141\">6. Methods of Data Collection<\/strong><\/h2><ul data-start=\"4144\" data-end=\"4344\"><li data-start=\"4144\" data-end=\"4205\"><p data-start=\"4146\" data-end=\"4205\">Directly from the customer or their legal representative.<\/p><\/li><li data-start=\"4206\" data-end=\"4260\"><p data-start=\"4208\" data-end=\"4260\">Through digital channels or approved applications.<\/p><\/li><li data-start=\"4261\" data-end=\"4344\"><p data-start=\"4263\" data-end=\"4344\">From public records, official authorities, or legally authorized third parties.<\/p><\/li><\/ul><hr data-start=\"4346\" data-end=\"4349\" \/><h2 data-start=\"4351\" data-end=\"4393\"><strong data-start=\"4354\" data-end=\"4391\">7. Data Retention and Destruction<\/strong><\/h2><ul data-start=\"4394\" data-end=\"4648\"><li data-start=\"4394\" data-end=\"4534\"><p data-start=\"4396\" data-end=\"4534\">Personal data is retained for the period necessary to fulfill the purposes for which it was collected or as required by applicable laws.<\/p><\/li><li data-start=\"4535\" data-end=\"4648\"><p data-start=\"4537\" data-end=\"4648\">Data is securely destroyed or anonymized using approved methods once the purpose or retention period expires.<\/p><\/li><\/ul><hr data-start=\"4650\" data-end=\"4653\" \/><h2 data-start=\"4655\" data-end=\"4682\"><strong data-start=\"4658\" data-end=\"4680\">8. Data Protection<\/strong><\/h2><p data-start=\"4683\" data-end=\"4897\">SANID applies strict organizational and technical controls, including encryption, access restrictions, periodic audits, and employee training, to safeguard personal data against unauthorized access or processing.<\/p><hr data-start=\"4899\" data-end=\"4902\" \/><h2 data-start=\"4904\" data-end=\"4928\"><strong data-start=\"4907\" data-end=\"4926\">9. Data Sharing<\/strong><\/h2><p data-start=\"4929\" data-end=\"4997\">SANID may share your personal data, to the extent necessary, with:<\/p><ul data-start=\"4998\" data-end=\"5345\"><li data-start=\"4998\" data-end=\"5038\"><p data-start=\"5000\" data-end=\"5038\">Regulatory and official authorities.<\/p><\/li><li data-start=\"5039\" data-end=\"5099\"><p data-start=\"5041\" data-end=\"5099\">Approved service providers under contractual agreements.<\/p><\/li><li data-start=\"5100\" data-end=\"5161\"><p data-start=\"5102\" data-end=\"5161\">Other parties under a legal basis or legitimate interest.<\/p><\/li><li data-start=\"5162\" data-end=\"5345\"><p data-start=\"5164\" data-end=\"5345\">Entities inside and outside the Kingdom, provided an adequate protection level is ensured or in accordance with adequacy decisions issued by the Saudi Data &amp; AI Authority (SDAIA).<\/p><\/li><\/ul><hr data-start=\"5347\" data-end=\"5350\" \/><h2 data-start=\"5352\" data-end=\"5376\"><strong data-start=\"5355\" data-end=\"5374\">10. Your Rights<\/strong><\/h2><p data-start=\"5377\" data-end=\"5417\">Under the PDPL, you have the right to:<\/p><ul data-start=\"5418\" data-end=\"5718\"><li data-start=\"5418\" data-end=\"5509\"><p data-start=\"5420\" data-end=\"5509\">Be informed about the purposes and legal bases for collecting and processing your data.<\/p><\/li><li data-start=\"5510\" data-end=\"5549\"><p data-start=\"5512\" data-end=\"5549\">Access your data and obtain a copy.<\/p><\/li><li data-start=\"5550\" data-end=\"5607\"><p data-start=\"5552\" data-end=\"5607\">Request correction, update, or deletion of your data.<\/p><\/li><li data-start=\"5608\" data-end=\"5656\"><p data-start=\"5610\" data-end=\"5656\">Withdraw consent, where legally permissible.<\/p><\/li><li data-start=\"5657\" data-end=\"5718\"><p data-start=\"5659\" data-end=\"5718\">File complaints and seek compensation for proven damages.<\/p><\/li><\/ul><hr data-start=\"5720\" data-end=\"5723\" \/><h2 data-start=\"5725\" data-end=\"5748\"><strong data-start=\"5728\" data-end=\"5746\">11. Complaints<\/strong><\/h2><p data-start=\"5749\" data-end=\"5797\">You may file complaints or objections through:<\/p><ul data-start=\"5798\" data-end=\"5918\"><li data-start=\"5798\" data-end=\"5844\"><p data-start=\"5800\" data-end=\"5844\">The official website: <strong data-start=\"5822\" data-end=\"5842\"><a class=\"decorated-link\" href=\"http:\/\/www.sanid.com.sa\" target=\"_new\" rel=\"noopener\" data-start=\"5824\" data-end=\"5840\">www.sanid.com.sa<\/a><\/strong><\/p><\/li><li data-start=\"5845\" data-end=\"5872\"><p data-start=\"5847\" data-end=\"5872\">Email: [to be provided]<\/p><\/li><li data-start=\"5873\" data-end=\"5918\"><p data-start=\"5875\" data-end=\"5918\">Other approved customer service channels.<\/p><\/li><\/ul><hr data-start=\"5920\" data-end=\"5923\" \/><h2 data-start=\"5925\" data-end=\"5967\"><strong data-start=\"5928\" data-end=\"5965\">12. Updates to the Privacy Notice<\/strong><\/h2><p data-start=\"5968\" data-end=\"6234\">SANID reserves the right to amend or update this Notice from time to time in line with legal requirements and best practices. In the event of material changes, you will be notified through approved channels, and your consent may be requested where required by law.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>1. Who We Are The Saudi Financial Support Services Company \u2013 SANID, a Closed Joint Stock Company registered in the Kingdom of Saudi Arabia, Commercial Registration No. (1010059195), Unified Number&hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_themeisle_gutenberg_block_has_review":false,"footnotes":""},"class_list":["post-12954","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/sanid.sa\/new-site\/wp-json\/wp\/v2\/pages\/12954","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sanid.sa\/new-site\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/sanid.sa\/new-site\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/sanid.sa\/new-site\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sanid.sa\/new-site\/wp-json\/wp\/v2\/comments?post=12954"}],"version-history":[{"count":18,"href":"https:\/\/sanid.sa\/new-site\/wp-json\/wp\/v2\/pages\/12954\/revisions"}],"predecessor-version":[{"id":24259,"href":"https:\/\/sanid.sa\/new-site\/wp-json\/wp\/v2\/pages\/12954\/revisions\/24259"}],"wp:attachment":[{"href":"https:\/\/sanid.sa\/new-site\/wp-json\/wp\/v2\/media?parent=12954"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}