Privacy Policy

Tameed Debt Crowdfunding Platform Company

We thank you for your trust in the Tameed platform, and we confirm the platform's commitment to protecting your personal data in accordance with the regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law and the standards and controls of the Saudi Data and Artificial Intelligence Authority (SDAIA), in addition to the instructions of the Saudi Central Bank.
This policy has been prepared to help the client understand the nature of the data that the platform collects during their use of the platform's services — whether through the website, the smartphone application, phone calls, or registration forms — and how the platform handles this personal data.
We also wish to inform you of the platform's personal data protection policy.

Who We Are

Company name: Tameed Debt Crowdfunding Platform Company

Commercial Registration No.: 1010615903

Registered address: Riyadh, Al Malqa District, Anas bin Malik Road, Synergy Center, West Building, 13524, Kingdom of Saudi Arabia.

Phone number: 8001110121

Contact email for the Personal Data Protection Officer: PDP@tameed.sa

For the purposes of this privacy notice, Tameed Debt Crowdfunding Platform Company is referred to as "the Platform." It is also referred to as "we" throughout this notice regarding the use of your personal data.

Personal Data We Collect

Personal data is any data that could lead to the identification of a specific person, or that could directly or indirectly contribute to identifying a person's identity, including name, national ID number, addresses, contact numbers, license numbers, records, personal assets, bank account and credit card numbers, personal photos and videos, and any other data of a personal nature.

Tameed Debt Crowdfunding Platform Company collects and stores the following personal data:

  • Personal data used for registration (name, date of birth, ID number, etc.).
  • Contact data (mobile phone number, email, national address).
  • The user's geographic location data.
  • Communication information such as phone calls, conversations, call dates and durations, and emails.
  • Financial data related to transactions carried out through the platform, such as IBAN, deposits, withdrawals, and others.
  • Credit data of the financing applicant.
  • Other information entered by the user, such as filling out a complaint form or using other electronic services that collect the information necessary for processing.

Please note that providing personal data is a prerequisite for benefiting from our services, in compliance with legislative requirements. Accordingly, if the necessary personal data required by the platform is not provided, this may affect our ability to provide the services you requested, and may lead to the termination of those services.

Sources of Personal Data Collection

Some of your personal data that we process is obtained directly from you while visiting the company's digital platforms through the website, or through other direct customer interactions such as: filling out a form to apply for the company's services, creating an account on its digital platform, benefiting from the company's services, participating in surveys conducted by the company, providing feedback, or contacting the entity by any means to submit an inquiry or complaint, and so on.

We may also obtain some personal data indirectly from third parties, such as obtaining information from publicly available sources or government databases, for purposes such as credit verification, identity verification, updating/correcting your personal data, and fraud prevention.

We may also collect and process data through cookies, the platform's website, the mobile application, phone calls, email, and device identifiers.

Purpose of Collecting and Processing Personal Data

We use personal data only for the purposes for which it was collected. These purposes include:

  • Managing accounts and providing services, including processing investment, financing, and financial transactions.
  • Customer support and communication regarding your account and services.
  • Compliance with applicable legislative, legal, and regulatory requirements in the Kingdom's financial services sector.
  • Verifying your identity and complying with "Know Your Customer" (KYC) and Anti-Money Laundering (AML) requirements.
  • Assessing and studying creditworthiness.
  • Direct marketing, with your consent, and providing platform advertisements.
  • Combating fraud and ensuring security.
  • Awareness activities.
  • Improving and developing the service.

Purpose and Legal Basis for Collecting Your Personal Data

We collect personal data based on the following bases:

  • Contractual basis: Processing necessary to fulfill and provide any of the services contracted between Tameed and its clients, such as conducting credit checks before processing a financing application.
  • Legal basis: For the purpose of complying with the rules and regulations in the Kingdom of Saudi Arabia imposed by regulatory bodies (such as the Saudi Central Bank "SAMA") and all regulatory requirements governing the platform's operations.
  • Legitimate interests: When processing is necessary to achieve the platform's legitimate interest, without prejudice to the rights and interests of the data subject, provided that no sensitive data is processed. Examples include:

     Allowing the use of analytics to improve customer experience and predict trends and patterns that in turn enable new innovative ways to improve our services and provide you with a unique set of products and services.

     Ensuring the highest level of service and information accuracy for our clients.

     Better understanding our clients' perspectives and acting appropriately on any feedback provided.

     Protection against fraud through the use of tools or systems dedicated to that purpose.

  • Consent-based use: When the client gives explicit consent to allow the processing of their personal data. The client has the right to withdraw that consent at any time without affecting the lawfulness of prior processing, and this right can be exercised through the platform and the mobile application.
  • Automated processing: We may make decisions based on automated processing of your personal data to improve the marketing communications you receive.
  • Public interest: For processing based on requests from official authorities for purposes of achieving public interest, public health, or public safety.
  • Preserving the interest of the data subject: Such as when it is necessary to carry out an action that would achieve a realized benefit for the data subject (whether material or moral) and contacting them is impossible or difficult to achieve.

With Whom Do We Share Your Personal Data, and Why?

In accordance with the requirements of the Personal Data Protection Law, the platform may disclose your personal data to a third party in the following cases:

  • When we obtain your explicit consent.
  • When your personal data is already in the public domain and was collected from a publicly available source.
  • When needed for security purposes, compliance with another regulation, or execution of a judicial or legal order, such as sharing with tax authorities and fulfilling judicial requirements.
  • When needed for public health, public safety, and protection of an individual's (or individuals') life/health.
  • If the attributes of the disclosed data are completely anonymized and it is not possible to identify the data subject directly or indirectly — for example, sharing aggregated and anonymized data with our market research suppliers.
  • For the platform's legitimate interests, without affecting your rights and interests, provided the data is not sensitive data.

Please note that the platform provides only the minimum information required to facilitate the purpose of the personal data disclosure.

Where Do We Process Your Information?

We may need to transfer personal data about you to a third party located within the Kingdom. If we send your personal data outside the Kingdom, we will ensure that such transfer is permitted by law and that your personal data is adequately protected as required under the applicable regulation.

How Do We Protect Your Personal Data?

The platform is committed to protecting your personal data by taking strong security and privacy measures to protect your data and personal information from unauthorized access, use, loss, disclosure, or destruction. We maintain an up-to-date and technically and physically current level of security to protect you and the platform from loss or theft. This includes, but is not limited to:

  • Protection against data breaches and hacking.
  • Implementing relevant controls, standards, and rules issued by the National Cybersecurity Authority, which include best practices and cybersecurity standards.
  • Any requirements imposed by the Saudi Central Bank (SAMA).

It should also be noted that the internet is not a completely safe space, and the platform cannot be held responsible for third parties or external links.

Retention and Destruction of Personal Data

The platform is committed to retaining personal data in accordance with the Personal Data Protection Law and the rules and instructions of the Saudi Central Bank. Personal data is retained for specified retention periods consistent with regulatory and legal standards and legislation. We may also retain data even after the end of the client's relationship with the platform in order to fulfill legal, legislative, and regulatory requirements (including statutory retention periods), or to comply with judicial orders.

Tameed is also committed to destroying personal data if the data subject requests it, or if the purpose for which it was collected no longer applies, provided there are no regulatory obstacles preventing the destruction of that data.

Personal data is stored electronically through databases or data stores, or in paper documents protected by strict methods. The means of destroying personal data include paper shredding, and ensuring deletion from the designated databases and systems available at Tameed, in a manner that does not conflict with the Central Bank's regulatory requirements.

Rights of the Data Subject

The platform's client enjoys a number of rights set out in the Personal Data Protection Law, namely:

  • The right to be informed: The data subject has the right to be informed of how their personal data is collected, the legal basis for its collection and processing, how this data is processed, stored, and destroyed, and to whom it is disclosed. You can access all these details through this privacy notice.
  • The right to access your personal data: The data subject has the right to request access to their personal data. You can access your personal data through the platform's website or mobile application.
  • The right to request obtaining your personal data: The data subject has the right to request obtaining the personal data held by the platform in a clear, readable format. You can access your personal data through the platform's website or mobile application.
  • The right to request correction of your personal data: The data subject has the right to request correction of their personal data that they believe is inaccurate, incorrect, or incomplete. You can correct your personal data through the platform's website or mobile application.
  • The right to request destruction of your personal data: The data subject has the right to request the destruction of their personal data if there is no regulatory obstacle preventing this.
  • The right to withdraw your consent to the processing of your personal data: The data subject has the right to withdraw their consent to the processing of their personal data at any time, unless there are regulatory grounds requiring otherwise. Consent to receive marketing messages may also be withdrawn at any time through the notification settings in the application.
  • The right to request compensation for material or moral damage if the data subject is harmed as a result of any violation of the relevant regulations and legislation, through the competent judicial authorities.
  • The right to file a complaint arising from a violation of the Personal Data Protection Law, through the authority supervising the platform (the Central Bank).

The platform will act on any request for these rights within thirty (30) days without delay, and will maintain a record of such requests. This period may be extended by an additional 30 days under certain circumstances, depending on the nature of the request, provided that you are informed in advance of the extension along with the reasons for the delay.

General Provisions

1. This notice was last updated on 31/12/2025. Tameed reserves the right to make any minor or major amendment to the privacy policy from time to time, provided that the platform notifies the user of any amendment to the privacy policy or terms and conditions through one of the communication channels registered with the platform.

2. The regulations of the Kingdom of Saudi Arabia apply to all matters relating to the interpretation of regulatory texts or the settlement of disputes arising from the use of the platform's website. The competent court in the city of Riyadh has jurisdiction to hear and rule on such disputes.

Inquiries and Complaints

If you have any inquiry or request regarding the exercise of any of your rights related to the processing of your personal data, or regarding anything mentioned in the privacy policy in general, you may contact us via the toll-free number (8001110121) or contact the Personal Data Protection Officer via email at PDP@tameed.sa. If you are not satisfied with how your complaint was handled, you may file a complaint with the Saudi Central Bank.

‍