Privacy Policy

Introduction

At Eddekhar, your privacy is our priority. This privacy policy explains how your personal data is collected, used, stored, disclosed, and protected, in compliance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia. We are committed to transparency and user rights, and we ensure your personal data is processed only for lawful, specific purposes.

Personal Data We Collect

We may collect identification and contact data such as full name, national ID number, phone number, and email address for user authentication, secure access, and communication. We also collect account data such as email, encrypted password, login/logout history, and account status for account management and monitoring unauthorized access attempts.

We may also collect behavioral data including pages visited, time spent, clicks, and non-sensitive form inputs to improve the user experience, personalize content, and analyze trends.

We collect technical data such as IP address, device type, and browser version for diagnostics and security support.

We may also collect approximate location data via IP address, or precise location where permission is granted, to improve service personalization and fraud detection.

We use cookies and analytics data to maintain session integrity and user preferences and to analyze platform performance.

Mandatory vs. Optional Data

• Mandatory data is necessary for account creation, transaction processing, and legal compliance — such as name, ID, email, and bank details; failure to provide it may prevent use of the service.
• Optional data includes location, preferences, and analytics; it is collected only with your consent and can be withdrawn at any time.

How and Why We Collect Your Data

We collect data directly through registration, support forms, profile updates, and financial transactions. We also collect it indirectly via cookies, analytics tools such as Google Analytics, and third-party integrations such as third-party sign-in or payments.

Data is used to create, manage, and secure accounts; process payments and manage savings or retirement plans; detect fraud and strengthen security; and communicate via transactional messages, updates, or — with your consent — marketing messages.

Data Processing

Data is processed in a secure environment; access is limited to authorized staff and to the minimum necessary.

Sharing Your Personal Data

We may share your data with technology service providers, payment providers, analytics providers, and government authorities upon lawful request. We may use device identifiers and cookies, and share location data based on device settings.

Data Storage, Retention, and Destruction

Your data is stored in secure cloud infrastructure inside and outside the Kingdom in accordance with the Personal Data Protection Law (PDPL). We retain data only for as long as necessary for the purpose it was collected for, after which it is securely destroyed.

Your Rights under the PDPL

You have the right to know how your data is used, to access it, to request its correction or deletion, to request restriction of or object to processing, and to file a complaint with the competent authority. We may disclose your data where there is a lawful request, to investigate illegal activity, or to protect users’ rights.

Complaints and Objections

For inquiries or complaints, you can reach us through the following channels:

[email protected]

Data subject rights form

Escalation to the Saudi Data & AI Authority (SDAIA) — sdaia.gov.sa

Accessing and Updating this Policy

This policy is available on the Eddekhar website and may be updated periodically; users will be notified of material changes.

Amendments

This policy may be amended, and users will be notified of material changes. Continued use constitutes acceptance of the updated policy.