Privacy Policy

This Privacy Policy describes how Yaqeen Capital each collect, process, and use Personal Data within the Kingdom of Saudi Arabia.

PRIVACY NOTICE

Yaqeen (hereafter referred to as "we" or “our” or "us" or “organization”) respects your right to data privacy. In this Notice “You” or “Your” refers to the data subject whose personal data is processed by Yaqeen and Personal Data means any data which could lead to the identification of a person, directly or indirectly.

This Privacy Notice (“Notice”) provides information about how Yaqeen handles personal information about you and describes the rights you may have regarding your personal information. This Notice applies to Yaqeen and its online and offline collection, use, and disclosure of personal information.

Yaqeen has an obligation to preserve the confidentiality and privacy of the user's data and information.

Yaqeen shall not collect, process or disclose any personal data or information except in accordance with the specific controls provided in the instructions governing the confidentiality of information issued by the regulatory authorities in the Kingdom like PDPL and NDMO, including all amendments applicable to them from time to time.

By reading and reviewing this Privacy Notice, you consent to the collection, use, and processing of your personal data as described herein.

About Us:

Yaqeen Capital is a Saudi public shareholding company registered under Commercial Registration No. (1010226584) and licensed by the Capital Market Authority under license number (06020-37) to practice dealing services, managing investments, operating funds, custody, arranging and advising its clients who are investors in the Saudi capital market.

Contact Details:

Riyadh – Olaya Main Street

P.O. Box 884, Riyadh 11421 Kingdom of Saudi Arabia

Email: DPO@Yaqeen.sa

Licensing and Commercial Registration: Commercial Registration No. (1010226584) under License No. (06020-37)

Changes to our Privacy Notice

We may update this notice from time to time. Any changes will be communicated through our communication channels. We encourage you to review this notice periodically to stay informed.

This Privacy Policy was last updated on 18/05/2026.

Personal Data We Collect

The data we collect varies depending on the purpose for which it is used. The following are examples of the data we collect:

• Data collected through application forms, questionnaires, or other documents or correspondence, such as your full name and date of birth.
• Data about your transactions and products with us, such as your account activity and use of products.
• Data collected through your use of our services, websites, or mobile applications (such as cookies).
• Data exchanged while we communicate with you, such as customer support requests and feedback, whether through our websites, mobile apps, social media accounts, or any other channels we use to communicate with customers.
• Nafath/Absher: We collect basic information about you from Nafath and Absher when you open your account with us.

When does Yaqeen Collect Personal Information About You

This information is collected when you utilize our services through online and offline channels.

How We Collect your Personal Data

There are several touchpoints that help us collect your data, some examples include:

• During the recruitment and service consumption process – when you use our services, become a customer, and consume products.
• When you exchange information – when you complete a form and submit it via our website, email or by contacting our call center.
• Interactions (social media) – any posts or interactions you make directly with us on social media platforms.
• Browsing Style – Data about how you browse our website, the times you visit, the types of internet browsers used, and how you access our website.
• Questionnaires – electronic questionnaires that enable us to collect your feedback on various aspects, such as your opinions on the design of our website and mobile applications. Your valuable feedback helps us improve the quality of your experience as an organization.
• By you – or by your agent or authorized representative.
• Where legal – from third parties and public sources. This includes credit agencies and government agencies.

Purpose for Collecting & Processing Personal Information

We collect and use data to what is required by our business functions and services. In most cases, our legal basis and purposes include, but not limited to:

• To comply with any obligations and requirements issued by legal and regulatory authorities within the Kingdom of Saudi Arabia.
• To allow us to provide you with the products or services.
• To protect you against fraud by conducting identity, credit, and conflict checks.
• Enhance our products, services and your experience across our channels.
• Understand your needs as a customer and your eligibility for products and services.
• Promote new financial and investment products and services that may be of interest to you.

How Long Does Yaqeen Keep Personal Information?

Your Personal Data will be:

• Retained for as long as necessary to fulfil the purpose for which it was collected.
• Stored within the Kingdom of Saudi Arabia.
• Retained to satisfy any legal and/or regulatory requirements.

With whom does Yaqeen share Your Personal Information?

We may share your data with any of the parties mentioned below:

• Any court, regulatory body, government authority to comply with any obligations and requirements issued by legal and regulatory authorities within the Kingdom of Saudi Arabia.

1. Any service providers associated with Yaqeen Capital for the purpose of providing you with the products or services, enhancing our products, services, and your experience across our channels, and promoting new financial investment products and services that may be of interest to you.

We may contact and/or send notifications to you through different channels such as, email and/or phone with regards to our products and services.

Protection of your Personal Data:

We ensure your data is appropriately protected by utilizing the necessary physical, technical, administrative, and procedural security measurements to prevent unauthorized access, collection, use, disclosure, copying, modification, or disposal. We safeguard and protect your data in a manner that complies with applicable data protection regulation of the Kingdom of Saudi Arabia. However, the Internet is not completely secure.

Usage of Cookies

In order to improve our customers’ experience, our websites use standard technology called "cookies" to collect information about how our websites are used, which may include your data. The use of cookies is essential to the operation of our websites.

Choice Available to Owners of Personal Data

Under Saudi Arabia's Personal Data Protection Law, the owners of personal data are entitled to the below rights. However, the rights to the data subject shall be disbursed in accordance with the regulatory and legal obligations incumbent upon Yaqeen.

• Right to request information on the processing activities carried out with their personal data.
• Right to request access to their personal data.
• Right to request correction, updating, or completion of their personal data.
• Right to request erasure of personal data in specific cases.
• Right to withdraw consent in specific cases.

For any queries and complaints, you can send an email to DPO@Yaqeen.sa

Except as provided in the law, you will not be required to pay any fees for exercising these rights, and if a request is made to exercise one of these rights, you will be responded to within 10 working days from the date of receipt of the request in full.

For more details about the processing of your personal data and how to exercise your rights, you can contact our Personal Data Protection Officer as per the contact details below:

Methods for Accessing, Correcting, or Modifying Personal Information and Withdrawal of Consent

If you believe that any information we hold about you is inaccurate or incomplete, or you wish to withdraw your consent, or if there are some concerns or our non-compliance with the Personal Data Protection System, you can submit your request via email to DPO@Yaqeen.sa and if you have any questions, inquiries or complaints, you can reach us via the Yaqeen branch office, email, chat, social media, or through our website and application.

If you are not satisfied with our handling of the complaint or if we do not respond within 10 days, you can file a complaint with the Saudi Data and Artificial Intelligence Authority

Address of the Saudi Data Authority for Artificial Intelligence:

Kingdom of Saudi Arabia – Riyadh

Website: sdaia.gov.sa

National Data Governance Platform: dgp.sdaia.gov.sa

Disclaimer

This Privacy policy/ Privacy Notice is not intended to, nor does it create any contractual rights whatsoever or any other legal rights, nor does it create any obligations on us in respect of any other party or on behalf of any party. When you log in to third parties’ websites, you will not be subject to or under this Privacy Notice. Moreover, we are not responsible for their websites’ content, and we do not represent third parties. Therefore, we recommend you review the privacy and security policy of each link you log in to.

Effective Date

This policy was approved in November 2024.