Privacy Policy

Saudi Credit Information Company (hereafter referred to as "we" or "our" or "us" or "organization" or "organization") respects your right to data privacy. In this Notice "You" or "Your" refers to data subject whose personal data is processed by Saudi Credit Information Company.

This Privacy Notice ("Notice") provides information about how Saudi Credit Information Company handles personal information about you and describes the rights you may have regarding your personal information. This Notice applies to Saudi Credit Information Company and its online and offline collection, use and disclosure of personal information.

Saudi Credit Information Company has an obligation to preserve the confidentiality and privacy of the user's data and information.

Saudi Credit Information Company shall not collect, process or disclose any personal data or information except in accordance with the specific controls provided in the Credit Information Law and its Implementing Regulations, the Electronic Transactions Law, the Anti-Cyber Crime Law, the Code of Conducts approved by the Saudi Central Bank (SAMA), instructions and controls issued by the National Cybersecurity Authority from time to time, instructions governing the confidentiality of information issued by the regulatory authorities in the Kingdom, including all amendments applicable to them from time to time.

1. When does Saudi Credit Information Company Collect Personal Information about You?
   • We obtain your personal information from our member organizations to establish a credit report. This is in accordance with the requirements of Credit Information Law.
   • We also obtain some information from you when you utilize our services through online and offline channels at the time of registering for our services and products.
   1. What Types of Personal Information does Saudi Credit Information Company Process and Retain?

   ​As a Saudi Credit Information Company, we collect and process different types of personal information about you from various sources. The below table chart describes the categories of personal information we may have obtained through different sources.

   Personal Information We Collect And From Whom We Collect It

   1. What We Collect
      • Name (first, last, and/or maiden name)
      • Demographic Information (age, gender and nationality)
      • Salary information​
      • National address; email address (es); telephone number(s).
      • Date of birth, Employment information
      • Device identification information used to access the Site. ​
      • Financial and Credit information of Consumers (individuals).​
      • Professional Employment details (Employment Dates, Employer Name, Employer Information)
      • Audio and electronic recording, for example, when you call in with a question to customer service.
      From Whom We Collect It:
      • Information you provide
      • Member organizations (Banks, Lending organizations, Insurance providers, Telecommunication, Fintech companies etc.)
      • ​GOSI and Ministry of Finance for Salary Certificate.​
   2. Lawful Purpose for Collecting & Processing Personal Information.

   We collect and process your personal information for different legal basis as mentioned below:

   • To provide Saudi Credit Information Company services related to credit reporting inquiries, dispute and/or complaints in accordance with Credit Information Law.
   • To provide value added services in accordance with our legitimate interests.
   • To update our consumer credit records in accordance with Credit Information Law.
   • To verify your identity to provide you services and to protect your vital interests.
   • To record and demonstrate how we have conducted the dispute and complaint resolution process.
   • For product development and improvement, statistical and research purposes, and for any purpose subject to the limitations set forth in this Notice and applicable laws incumbent upon Saudi Credit Information Company. This is in accordance with our legitimate business interests.
   • For the purpose of enabling and digitizing the credit lending process through the Bank, Fintech and other financial institute.
   • For the purpose of informing, you about our services through marketing campaigns, which is in accordance with the consent you provided to us.
   3. How Long Does Saudi Credit Information Company Store Personal and Credit Information?

   Your Personal Data is stored securely at our Data centers in Kingdom of Saudi Arabia. We retain your personal data in accordance with timelines associated with our lawful purposes after which we will securely dispose off such data in a manner that prevents access or retrieval. The Retention period for each data type is determined separately within our organization’s Data Retention & Archiving Policy.​

   4. With whom does Saudi Credit Information Company share Your Personal Information?

   Saudi Credit Information Company shares your personal information with different member organizations in accordance with the credit information law and for fulfillment of our value-added services.

   Disclosure for Legal reasons: We may share personal data to third parties subject to Saudi Central Bank approval or to comply with valid legal requirements such as a Saudi law, regulations, search warrant, subpoena, court order, or other legal process.​

   Consumer Credit Reporting: Our member organizations collect, use, and process personal data in accordance with Saudi Arabia's Credit Information Law. This collection of personal data is done to determine your creditworthiness, credit standing, credit capacity and this information is shared with credit providers and other entities when they make decisions to extend credit or enter into transactions with you, assist lenders and other creditors.​

   Commercial Credit Reporting: Our member organizations collect, use, and process personal data as part of our commercial credit reporting services. These services permit them to make informed decisions regarding providing credit to or investing in businesses. Commercial credit reports may contain the names and other personal data of owners, principals, guarantors, or agents of the businesses.​

   5. Will We Inform You Of Changes To This Privacy Notice?

   If we change this Privacy Notice, we will let you know about the changes by publishing the updated version at all applicable communication channels. SIMAH is committed to protecting and respecting your privacy.

   6. Your Rights Regarding Processing of Your Personal Data:

   The owners of personal data are entitled to the below rights. However, the rights to the data subject shall be disbursed in accordance with the different legal basis/lawful purpose of processing incumbent upon Saudi Credit Information Company.​

   1. Right to be informed: about the legal basis and the purpose of the collection of your personal data. We dispense this right through this Privacy Notice.
   2. Right of Access to Your Personal Data, you may exercise this right by signing in to MOLIM and accessing your data.
   3. Right to Request Access to Your Personal Data: You are entitled to request access to your Personal Data held by the Saudi Credit Information Company in a readable and clear format. You may download such data through MOLIM.
   4. Right to Request Correction of Your Personal Data. You are entitled to request correction of your Personal Data that you believe is inaccurate, incorrect or incomplete. You may do so by logging into MOLIM → See More → Support. You can raise a dispute case at MOLIM and tell us specifically why you think it’s inaccurate or incomplete. We request you to read dispute instruction and tips, fill all needed field and attach supporting documents then submit your dispute.
   5. Right to Request Destruction of Your Personal Data. You are entitled to request destruction of your Personal Data in certain circumstances which are dependent on the legal basis of personal data processing.
   6. Right to Withdraw Your Consent for Processing Your Personal Data: You are entitled to withdraw your consent for processing related to marketing and advertising campaigns. You can exercise this right by logging to MOLIM → Settings → Notification Settings → Others → Marketing – Promotions.
   ESTABLISH CREDIT REPORT:

   I acknowledge that I have read this Privacy Notice, and I agree to establish my credit record with the Saudi Credit Information Company “SIMAH”. I also agree to inquire about it, and I authorize SIMAH to obtain all my previous, current, and future credit information. I further authorize SIMAH to disclose and exchange that information with its members, in accordance with the provisions of the Credit Information Law, its implementing regulations, and other related regulations.

   For further details regarding the processing of your Personal Data and how to exercise your rights, you can contact the Personal Data Protection Officer at ​SIMAH at
   dpo@​simah.com