Information access
Last Modified 23 March 2025
Privacy and Data Protection
The Social Development Bank recognizes the importance of your privacy and personal data; Therefore, we are committed to keeping all important information and data for all users safe, secure and confidential.
The privacy policy and procedures of the Social Development Bank’s electronic portal are subject toPersonal Data Protection Law (Royal Decree No. (M/19) dated 2/9/1443 AH), Main Principles To protect personal information, the main principles and general rules for data exchange issued by the Saudi Data and Artificial Intelligence Authority and National Data Management Office.
The Personal Data Protection Law and its executive regulations establish the legal basis for protecting your rights regarding the processing of personal data by all entities in the Kingdom, as well as all entities Outside the Kingdom that processes personal data relating to individuals residing in the Kingdom using any means, including online processing of personal data.
The basic principles of our data protection policy include the following:
Holding the head of the entity (or his or her representative) accountable for the data controller’s privacy policies and procedures.
Transparency through a privacy notice indicating the purposes for which data collection is being collected. Personal data.
Choice and consent obtained through implicit or explicit consent regarding the collection, use and disclosure of personal data prior to collection.
Limiting data collection to the minimum amount of data that enables To achieve the purposes.
Use, retain and destroy strictly for the intended purpose, retain for as long as necessary to achieve the intended purposes or as required by laws and regulations and destroy it safely, preventing leakage, loss, theft or misuse. , or unauthorized access.
Access to data through which any data subject can review, update and correct his or her personal data.
Restrictions on data disclosure approved by the data subject restrict third parties to the purposes set out in the Privacy Notice.
Data security by protecting personal data from leakage, corruption, loss, theft, misuse, modification or unauthorized access; In accordance with controls issued by the National Cybersecurity Authority and other relevant authorities.
Data quality after verifying its accuracy, completeness and timeliness.
Monitoring and complying with the data controller’s privacy policies and procedures, and any related inquiries, complaints and disputes. privacy.
The National Data Management and Personal Data Protection Standards cover 15 areas of data management and personal data protection. The standards apply to all government data regardless of form or data. Type, including paper records, emails, data stored in electronic form, audio recordings, videos, maps, photographs, scripts, handwritten documents, or other recorded data.
Implementing the provisions of the Personal Data Protection Law and its executive regulations does not prejudice the powers and tasks of the National Cybersecurity Authority as a security authority specialized in cybersecurity and its affairs in the Kingdom.
Privacy and Data Protection Agreement
As a user of the electronic portal and its application, you Accepts the privacy and data protection policies and regulations of the Kingdom of Saudi Arabia; Which controls the portal and its application. This agreement becomes effective immediately upon using or accessing the portal for the first time.
If you do not agree to this policy, you must not use any of the services of the Social Development Bank’s electronic portal.
Collecting user data
The purpose of collecting personal data is directly related to the purposes of the electronic portal and does not conflict with any specific provision. The methods and means of collecting personal information are appropriate to the owner’s circumstances, direct, clear and secure. , and free from deception, misleading information or blackmail. If it becomes clear that the personal data collected is no longer necessary to achieve the purpose of its collection, the Social Development Bank electronic portal will stop hoarding it and destroy the previously collected data immediately. Read more
The Social Development Bank's electronic portal will ensure that the following criteria are met before collecting your personal data:
Justification for collecting your personal data.
The purpose of collecting your personal data, whether all or part of it, is mandatory or voluntary, with further information on the processing of the data that is not inconsistent with the purpose of its collection or is otherwise provided by law.
Identity and reference address of the personal data collector where applicable, unless for security purposes.
The entity or entities to which the personal data will be disclosed and a description of whether the personal data will be transferred, disclosed or processed outside the Kingdom
Potential consequences and risks of non-compliance with the personal data collection procedure.
Your privacy and data protection rights as provided by law.
Other elements specified by the regulations Depending on the nature of the activity carried out by this entity.
In the event that personal data is collected from non-owners, the following conditions will be met:
If the owner of the personal data agrees to Doing so, in accordance with the provisions of the law.
If the personal data is publicly available or collected from a publicly available source.
If the entity is a public entity, and the personal data collected is not privately owned or processed. Directly for a purpose other than the one for which they were collected, this is required for security purposes, for the implementation of another system or to meet judicial requirements in accordance with the provisions specified in the regulations.
If compliance with this prohibition would harm the owner of the personal data or affect his or her interests Biometrics, through provisions specified in the regulations.
If the collection or processing of personal data is necessary to protect the health, public safety, or life or health of a specific individual or individuals.
If not Personal data is recorded or stored in a format that makes it possible to directly or indirectly identify and identify its owner.
What data do we collect?
When you visit the portal The Social Development Bank’s electronic portal, our servers automatically collect your IP address and collect information about the user’s browser, search engine, geographic location, date and time of the URL.
The Social Development Bank’s electronic portal retrieves your personal data available on the integration channel. Governmental Information (GSB). Personal data, whatever its source or form, will explicitly identify an individual or make it directly or indirectly identifiable to an individual, and includes name, personal identification number, addresses, contact numbers, license numbers, records, personal property, bank account and credit card numbers. Still or moving images of an individual and other data of a personal nature.
It includes any operation performed on personal data by any means, whether manual or automated, including collection, recording, preservation, indexing, arrangement, coordination, storage, modification, updating, integration, retrieval, and use. Disclosure, transfer, publication, data sharing or interconnection, blocking, scanning, and destruction.
Cookies are files saved on your phone, tablet, or computer when you visit the electronic portal of the Social Development Bank.< /p>
Why do we need your data?
Using the IP address helps us solve any technical problems that arise on our servers, including statistics about the use of the portal (such as the number of visitors, the language of the computer used, etc.). Geolocation of users will benefit from the availability of specific services on its platform and application.
Cookies enhance your use of the portal and better understand your need. Therefore, we use cookies to collect and store information about how you use the electronic portal of the Social Development Bank And government digital services.
How do we process and store personal data?
Your personal data will not be processed without taking sufficient steps to verify its accuracy, completeness, timeliness and relevance for the purpose for which it was collected according to the provisions of the regulations.
The Social Development Bank’s electronic portal applies the highest security standards to protect data and information. Sensitive data is encrypted and any data that must be kept confidential in accordance with legal requirements and is subject to additional controls and procedures. Sensitive data includes ethnic or tribal origin. of the individual, or religious, intellectual or political belief, or refers to membership in associations or civil institutions, in addition to criminal and security data, biometric data that identifies genetic data, insurance data, health data, location data, credit data, and data that indicates that the individual’s parents are unknown or one of them is
It allows our technical staff to deal with specific information to provide the Social Development Bank’s electronic portal services that are consistent with your needs. We never allow any other party to know your IP address other than the portal’s technical team The electronic form of the Social Development Bank .
In exceptional circumstances, your information may be made available to government officials; However, it will never be made available to the public without your prior consent. Furthermore, this information will not be circulated, exchanged or sold to any third party without your prior consent.
Your personal data will only be disclosed in the following cases:
If You agreed to its disclosure in accordance with the provisions of the law.
If your personal data is collected from a publicly available source.
If the party requesting the disclosure is a public entity, for security purposes, to implement another system, or to meet Judicial requirements in accordance with the provisions specified in the regulations.
If the disclosure is necessary to protect public health, public safety, or the life or health of an individual or specific individuals.
If the disclosure is limited to addressing subsequent data in a manner that does not specifically identify the owner of the personal data or any other individual.
The Social Development Bank may not disclose your personal data if the disclosure leads to any of the following :
It represents a threat to security, harms the Kingdom’s reputation, or conflicts with its interests
It affects the Kingdom’s relations with other countries
It prevents the detection of a crime Or violates the rights of the accused to a fair trial, or affects the fairness of existing criminal proceedings.
It jeopardizes the safety of the individual or individuals
It involves an invasion of the privacy of an individual other than the owner of the personal data in such a way that which is determined by the regulations
It conflicts with an incomplete or incapable interest
It violates well-established professional obligations
It involves a breach of an obligation, procedure or judicial ruling
It involves a breach of an obligation, procedure or court ruling
It reveals a confidential source of information that should not be disclosed in the public interest.
The Social Development Bank will dispose of your personal data once the purpose for which it was collected has ended. However, it may It has the right to retain this data after the purpose of collecting it has ended if everything that leads to specific knowledge of the owner has been removed in accordance with the controls specified in the regulations.
The Social Development Bank retains personal data even after the purpose of collecting it has ended in the following cases only: :
If there is a methodological justification, it must be kept for a specific period, and in this case it must be destroyed after the end of this period or the end of the purpose of its collection, whichever is longer.
If the data The character is closely linked to a case before a judicial body and its preservation was required for this purpose, in which case it is destroyed after the completion of the judicial proceedings of the case.
Terms of Use
The Social Development Bank's electronic portal is available to all users. By accessing this portal, you and the users of the site are deemed to agree and agree to all terms of use, including all laws and regulations applicable in the Kingdom of Saudi Arabia.
As a user Registered, you have the full right to:
Access information
Obtain information
Correct information or Amend it
Withdraw the agreement and delete the information by contacting us through the Contact Us page. You, as a user who is the owner of personal data, have the right to know (including That notification) of the official or practical justification that was considered for collecting your personal data, and not to subsequently process your data in a manner inconsistent with the purpose of its collection or otherwise. You have the right to request the destruction of your personal data available to us without prejudice to the provisions of the law.
User Restrictions: By accessing this portal, you agree to avoid:
Providing or uploading files that contain Unlicensed software, materials, data, or any other information or files that may contain viruses
Use this portal to send any unsolicited or commercial e-mail Or misuse the portal in any other way by publishing, advertising, distributing, or circulating materials and information that are defamatory or that violate the rules of the Kingdom, and any other unacceptable materials or actionable information
Using this portal to participate in any illegal or illicit activities in the Kingdom of Saudi Arabia
Using the portal to advertise any product or service that may lead to a violation of laws or rules In the Kingdom, using any tool, program or procedure that interrupts or may interrupt the operation of the portal
Performing any action that places an unreasonable load or requires huge storage on the portal’s infrastructure.
Termination of Use: We have the authority, in our sole discretion, to limit the user's right to log in, suspend or terminate his or her use without prior notice and for any reason, including violation of the Terms of Use or Any action that we may consider to be illegal or cause harm to others. You will not be allowed to log in to the portal during this termination.
Except in the circumstances stipulated by law, personal data may not be processed, or the purpose for which it may be processed may be changed only with the consent of the owner. The regulations set out the conditions for consent, the circumstances in which consent must be in writing, and the terms and conditions for obtaining the consent of the legal guardian if the owner of the personal data is incomplete or incapacitated. However, consent may not be a condition for providing a service or benefit unless the service or The benefit is linked to the processing of authorized personal data.
Standards for comments and e-participation: All comments in e-participation channels or on social networks are carefully reviewed to ensure that users observe the standards and regulations regarding making comments. This platform administration has the power to exclude any Comments are considered inappropriate, and users are required to:
Respect general ethics and avoid any inappropriate expressions or use of impolite words.
Keep comments relevant and focus on the issue under discussion.
Avoid intolerance and personal criticism that does not enrich the discussion.
Be absolutely sure of accuracy when referring to Quranic texts or religious opinions and allow only specialists to discuss Such topics.
Avoid posting personal information, such as contact details, within comments.
Any other edits apply to Terms of Use immediately upon announcement unless otherwise stated.
Data leakage: The Social Development Bank must notify the competent authority as soon as it becomes aware of a leak, corruption of personal data or illegal access. Furthermore, if If any of the above would cause serious harm to your data, the entity will notify you immediately.
Communication: With the exception of awareness materials sent by public entities, the Social Development Bank electronic portal may not use personal means of communication. , including your postal and electronic addresses, to send advertising or awareness materials, except for the following:
You must obtain the consent of the intended recipient to send these materials to him.
You must obtain the consent of the intended recipient to send these materials to him.
The sender of material must provide a clear mechanism, as determined by the regulations, by which the intended recipient can express his or her wish to stop sending it to him when he so desires.
With the exception of sensitive data, the data may be processed Personal data for marketing purposes if collected directly from the owner and agreed upon in accordance with the provisions of the law.
Moreover, your personal data may be collected or processed for scientific, research or statistical purposes without your consent, in Only in the following cases:
If the personal data does not include proof of your identity
If your identity is destroyed during its processing and before it is disclosed To any other party, this data is not sensitive.
If the collection or processing of personal data for these purposes is required by another system or in implementation of a previous agreement to which you are a party.
Official documents identifying the owner of personal data may not be photocopied or copied, except when this is in implementation of the provisions of the regulations or when a competent public authority requests photocopying or photocopying of these documents in the manner specified by the rules.
Except for cases that are absolutely necessary to preserve your life, or to prevent, examine, or treat disease, infection, the Social Development Bank may not transfer your personal data outside the Kingdom or disclose it to a destination outside the Kingdom unless this is in implementation of an obligation under an agreement that constitutes the Kingdom. A party to it, or to serve the interests of the Kingdom, or for other purposes specified by regulations, after meeting the following conditions:
The transfer or disclosure does not prejudice national security or the vital interests of the Kingdom.
Provide adequate guarantees to maintain the confidentiality of the personal data to be transferred or disclosed so that the standards for protecting personal data are no less than those stipulated in the law and regulations.
The transfer or disclosure is limited to a minimum. of the necessary personal data.
Approval of the competent authority for the transfer or disclosure as determined by the regulations.
Except for the condition stipulated herein, the competent authority of the Social Development Bank may, on a case-by-case basis Severity, of adhering to a condition; When the competent authority assesses, individually or jointly with other parties, that personal data will have an acceptable level of protection outside the Kingdom, and this data is not sensitive data.
This portal keeps records for a period specified by regulations. The records include the following minimum data:
Entity contact details
Purpose of processing Personal data
Categories of personal data subjects.
The party to whom the personal data have been (or will be) disclosed.
Whether the personal data has been Transferring it (or it will be transferred) outside the Kingdom or disclosing it to a party outside the Kingdom.
The expected period for retaining personal data.
Crimes Penalties: Without prejudice to any more severe penalty stipulated in another system, and in accordance with the Personal Data Protection System, the penalty for committing the following crimes shall be:
The penalty shall be imprisonment for a period not exceeding (two years) and a fine. Not exceeding (three million) riyals, or one of these two penalties if this was done with the intention of harming those who own the data or achieving a personal benefit.
The penalty shall be imprisonment for a period not exceeding (one year). ) and a fine not exceeding (one million) riyals, or one of these two penalties, for anyone who violates the provisions of transferring or disclosing personal data outside the Kingdom.
While there is no special provision among the provisions The law, without prejudice to any more severe penalty stipulated by another law, shall punish any person of a private or legal nature - covered by the provisions of the law - who violates any of the provisions of the law or regulations with a warning or a fine not exceeding five million riyals. The fine penalty may be doubled in the case of a repeated violation, even if it exceeds its maximum if it does not exceed twice this limit.
The Public Prosecution is responsible for investigating and prosecuting these violations before the competent court. The competent court will consider cases arising from the application of these Article and imposing the stipulated penalties.
The committee (or more) whose members are not less than (three), one of whom is named a chairperson, including a Sharia or legal advisor, shall be responsible for examining violations and imposing a warning or fine. stipulated here, according to the type of violation committed, its seriousness, and the extent of its impact, provided that the decision of the head of the competent authority shall issue his decision the work rules of the committee, in which the wages of its members are determined. Any person who opposes the committee’s decision has the right to appeal before a competent court.
With the exception of Violation of these provisions of the law, the Social Development Bank shall hold any of its employees accountable - disciplinary - in the event that they violate any of the provisions of the law and regulations, in accordance with the provisions and procedures of accountability and discipline stipulated in the law.
Without prejudice to the penalty imposed in the law. Everyone who has suffered damage due to committing any of the violations stipulated in the law or regulations has the right to claim before the competent court for compensation for material or moral damages in proportion to the extent of the damage.
Moreover, any person who starts a business In processing personal data, he is obligated to maintain secrets related to the data even after the end of his job or contractual relationship.
Disclaimer
This privacy and data protection policy applies to the electronic portal of the Social Development Bank only. You should read the Privacy and Data Protection Policy carefully when transferring to another website through this portal.
The provisions and procedures of the law are without prejudice to any provision granting the right of the owner of personal data or deciding to better protect it, provided for in another system or An international agreement to which the Kingdom is a party.
No liability: The portal has been prepared to comply with current regulations in the Kingdom of Saudi Arabia. Under this decision, the Social Development Bank cannot guarantee:
Accuracy and reliability of information
Response to external attack or hacking.
Sustainability or effectiveness
Relevance of portal content
Neither the portal nor the server will contain viruses or other harmful elements.
Neither Social Development Bank nor any other governmental entity may be held legally responsible for direct or indirect loss or damage that may result from the use of The portal.
Use at your own risk: The portal contains links to other websites that are not subject to the supervisors of the Social Development Bank and therefore it is not responsible for the content of those sites. Any dangers arising from browsing websites through links provided on the portal are the responsibility of the user.
The portal contains links to other websites or portals that may attempt to protect information and privacy using tools different from those used by the portal; Therefore, we are not responsible for the content or privacy protections used. Users are advised to review the privacy policies of these sites.
Some of the Bank's websites use cookies; These files give users full access to websites. If desired, cookies can be used to remember passwords and simplify website access. Cookies are stored on the computer's hard drive if they are accepted and encoded.
Limitation of Liability: Users hereby acknowledge that they are aware that online communications can be spied on or hacked by third parties. As emphasized, Users understand that the Portal will not change the information provided by official government agencies. In addition, all requests and actions may also be submitted Administrative via the Internet directly and carried out in person.
The portal does not bear any responsibility for any loss or damage that users may suffer from using and visiting the portal, including as a result of any information, statement or advertised offer.
Moreover, the portal is not responsible for any problems that may arise in accessing the Internet and any damages to machines or software, and cannot be held accountable for any misconduct or malicious comment made by other users logged in to it.
Anti-virus protection: Users should make use of appropriate anti-virus software when attempting to download any content from the portal. We are not responsible for any loss or damage to data or the user's computer that may arise while using this portal or any of its content.< /p>
Waiver of claims: The electronic portal of the Social Development Bank and all its services, information sources and other materials are for personal use without approval or warranty. The portal is not responsible for errors or transgressions that may arise due to the use of its content or links, whether Whether known or unknown.
Any communication or information sent by users from the portal is neither the possession of the sender nor guaranteed with regard to privacy. In addition, any interactive use by users of the portal does not guarantee any rights, licenses or Privileges.
Compensation: Users hereby acknowledge never to act against the Social Development Bank or its managers, including all departments, employees, or authorized agents responsible for managing or updating the electronic portal of the Development Bank. This clause is considered a legal exemption. From obligations or responsibilities related to claims resulting from the user’s violation of the terms, conditions of use, or other relevant regulations inside and outside the Kingdom of Saudi Arabia.
Copyright Notice
This portal is subject to the supervision of the Social Development Bank It is a government entity that aims to increase the contribution of small and emerging enterprises and productive families to the national economy, enhance social services and financial planning represented by savings programs, as well as empower non-profit organizations.
All content available on the electronic portal of the Social Development Bank is protected according to the rules And national regulations related to publications, trade names, and intellectual property rights. All intellectual property rights related to the portal’s content are protected and considered the property of the Social Development Bank.
Unless otherwise stated, users are not permitted to sell, license, rent, or Modify, copy, reproduce, download, publish, transmit, distribute, or edit any materials explicitly derived from the content of this portal without the prior written consent of the Social Development Bank.
It is prohibited to change or Modify any of the portal’s content. In addition, all images and media included in the portal are protected by copyright, and it is not permitted to copy or use this content without the prior written consent of the Social Development Bank.
Jurisdiction Users hereby agree to comply exclusively with the jurisdiction of the Kingdom of Saudi Arabia regarding any issue or dispute arising due to the use of this portal.
Updates to the Privacy and Data Protection Policy
The Social Development Bank has the right to update And change its Privacy and Data Protection Policy as needed. We will update this Policy when our data and information processing practices change.
Contact Us
If you have any questions about our Privacy and Data Protection Policy With us, or if you need help or a complaint, please let us know by entering the page Contact us .
Personal data protection regulations
National data management and personal data protection standards.
Interim Regulations for National Data Governance.
Rights of individuals (data subject) and obligations of the data controller.
General rules for transferring personal data outside the Kingdom.
Other relevant legislation and regulations
Personal Data Protection Policy: Saudi Data and Artificial Intelligence Authority
Electronic Transactions System: Communications and Information Technology Commission
nCybercrimes System: Communications and Information Technology Commission
Basic Cybersecurity Controls: National Cybersecurity Authority
The Privacy Protection Policy for Children and Incompetents
specifies General Rules for Transferring Personal Data Outside the Kingdom Rules and standards for transferring personal data outside the geographical borders of the Kingdom to ensure the preservation of national sovereignty over this data, as well as the preservation of... The privacy of personal data owners and the protection of their rights by specifying the obligations of controllers and processors regarding the transfer of personal data outside the Kingdom. The provisions of this document apply to all entities (public, private, and non-profit) in the Kingdom that transfer personal data to other parties outside the geographical borders of the Kingdom for the purpose of processing.
Unused applications on the network, and make sure that your antivirus software is always up to date.
If you have any inquiries or opinions about privacy principles, you can contact us through the page Contact us
Do you have any questions?
If you have any questions, please contact us.
Comments
No Comments
Rating