Privacy Policy

Introduction:

At Eddekhar, your privacy is our priority. This Privacy Policy explains how we collect, use, store, disclose, and safeguard your personal data in compliance with the Personal Data Protection Law (PDPL) issued in the Kingdom of Saudi Arabia.

We commit to transparency, user rights, and data protection principles and ensure that your personal data is only processed for lawful and specific purposes.

Personal Data We Collect

To deliver our services effectively and ensure a personalized and secure experience, Eddekhar may collect various types of personal data. Below is a detailed overview of the categories of data we collect and how they are typically used:

1. Identification & Contact Data

This includes information that allows us to identify and communicate with you. It is typically required when creating an account or engaging with our services.

Examples:

• Full Name
• National ID number
• Phone Number
• Email address

Purpose:

• User authentication
• Secure access to services
• Communication (e.g., service alerts, account updates)

2. Account Data

Information related to your registered account on our platform.

Examples:

• Email
• Encrypted password
• Login and logout timestamps
• Account status and activity history

Purpose:

• Platform access
• Account management
• Monitoring unauthorized access attempts

3. Behavioral Data

Information about how you interact with our platform and services.

Examples:

• Pages visited
• Time spent on specific features
• Clicks or taps
• Form inputs (non-sensitive)

Purpose:

• Improve usability and user experience
• Tailor recommendations and content
• Analyze engagement trends for service improvement

4. Technical Data

Automatically collected data related to the device and technology you use.

Examples:

• IP address
• Browser type and version

Purpose:

• System diagnostics
• Troubleshooting technical issues
• Enhancing platform security

5. Location Data

Collected with your consent through your device settings or IP-based location detection.

Examples:

• Approximate location via IP address
• Precise location if GPS permission is granted (on mobile apps)

Purpose:

• Enhance localization of content or services
• Detect and prevent fraud based on geographic anomalies

6. Cookies & Analytics Data

Collected via your browser during visits to our website.

Examples:

• Session cookies (for keeping you logged in)
• Preference cookies (e.g., language settings)
• Analytics cookies
• Heatmaps or interaction logs from analytic tools

Purpose:

• Maintain session integrity
• Understand how users navigate our site
• Collect metrics to improve site performance

Mandatory vs Optional Data

To clarify:

- Mandatory Data:

This includes data necessary to create and maintain your account, process transactions, and comply with legal requirements (e.g., name, national ID, email, bank details). Without this information, we may be unable to provide our services to you.

- Optional Data:

This includes data such as preferences, behavioral analytics, or location (if enabled). These enhance your experience but are not required to use our core services. We only collect this data with your explicit consent, and you may withdraw that consent at any time through your settings.

How and Why We Collect Your Personal Data

Eddekhar collects personal data through direct and indirect methods. The goal is to provide you with secure, efficient, and personalized financial planning services. Here's how we gather your data and the reasons behind it:

- Direct Collection

We collect data that you voluntarily provide while interacting with our platform. This may occur in various scenarios such as:

- Indirect Collection

In addition to the data you provide, we automatically collect data during your interaction with the platform through the following methods:

- Purposes of Personal Data Collection

Your personal data is collected to enable us to fulfill our obligations to you as a platform user. Here are the main purposes:

1. To Provide Platform Features and User Accounts

We use your personal data to create, manage, and secure your Eddekhar account. This includes authenticating your login, enabling dashboard access, and maintaining user preferences.

2. To Process Payments and Manage Financial Services

Your financial and transaction data is used to facilitate fund transfers, manage savings or retirement plans, and issue receipts. It is also used for reconciliation, fraud detection, and financial reporting.

3. To Enhance Platform Security and Detect Fraudulent Activity

We use technical and behavioral data to monitor suspicious activity, block unauthorized access, and apply risk-based controls. Device data and IP logs help detect misuse or violations of terms of service.

4. To Communicate Updates, Offers, or Service Notifications

We may send you:

• Transactional emails (e.g., account confirmation, password reset)
• Important updates (e.g., changes to terms, policy updates)
• Optional marketing messages (e.g., investment tips, promotions), only with your prior consent

How We Process Your Personal Data

Your data is processed in a secure environment and used only for specified, legitimate purposes. We take measures to ensure minimal data collection and restrict access to authorized personnel only.

Sharing Your Personal Data

We may share your personal data with:

1. - Third-party service providers who support our operations (e.g., payment processors).
2. - Legal or regulatory authorities upon lawful request.
3. - We do not sell your personal data to third parties.

Data Storage, Retention, and Destruction

Your data is stored securely in cloud infrastructure within or outside the Kingdom, in compliance with PDPL. We retain personal data only as long as necessary for the purpose collected, after which it is securely destroyed.

Your Rights Under PDPL

You have the following rights:

1. - Right to be informed about how your data is used.
2. - Right to access your personal data.
3. - Right to request correction or deletion of your data.
4. - Right to request correction or deletion of your data.
5. - Right to file a complaint with the Competent Authority.

Complaints and Objections

You may submit complaints or objections regarding data processing by contacting:

[email protected] or https://app.getsahl.io/request-form/8bdc14af-6990-49aa-a306-32742167b562

If unresolved, you may escalate your complaint to the Saudi Data and AI Authority (SDAIA)

https://sdaia.gov.sa

Access and Updates to Privacy Policy

This privacy policy is available at https://eddekhar.com/en/Privacy and may be updated periodically. Users will be notified of significant changes via email or platform notifications.

Amendments

Eddekhar have the right to modify this Privacy policy periodically, and in case of material change Eddekhar shall provide a written notice to the user via the registered contact information provided, and they shall give the user the right to review the changes and amendments. and If the user object to any change they have the right to close or cancel the profile and/or the service.The user acknowledge that in case of continue to use the service they shall be considered as accepting the updated Privacy Policy, therefor the collection, use and processing of the data shall be subject to the updated Privacy Policy, as of its effective date.