Privacy Policy

1. Information we collect

We collect personal information you provide directly to us when you apply for financing, create an account, or interact with our services. This includes:

• Identity and contact data (name, national ID, date of birth, phone, email)
• Financial data (income, employment, banking details, transaction history)
• Health-related data (treatment description, healthcare provider, treatment cost)
• Technical data (IP address, device information, browser type, usage logs)

2. How we use your information

We use your information to:

• Process and review your financing application
• Communicate with you about your account, applications and payments
• Comply with legal and regulatory obligations under Saudi law
• Detect and prevent fraud and other unlawful activity
• Improve our services and develop new features

3. Sharing your information

We may share your information with:

• Your authorised healthcare provider (clinic), for the purpose of payment and care coordination
• Credit bureaus and SIMAH for credit assessment and reporting
• Government and regulatory authorities, where required by law
• Service providers who assist us in operating our business under appropriate confidentiality obligations

4. Data retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, comply with our legal obligations, resolve disputes and enforce our agreements.

5. Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your data, subject to legal and contractual requirements
• Withdraw consent for non-essential processing at any time
• Lodge a complaint with the relevant supervisory authority

6. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration, including encryption in transit and at rest. No method of transmission over the internet is fully secure, however, and we cannot guarantee absolute security.

7. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and, where appropriate, by other means.

8. Contact us

If you have questions about this Privacy Policy or wish to exercise any of your rights, please contact us at info@fidat.sa.