Privacy Policy

Saudi Credit Information Company (hereafter referred to as "we" or “our” or "us" or “organization”) respects your right to data privacy. In this Notice “You” or “Your” refers to data subject whose personal data is processed by Saudi Credit Information Company.

This Privacy Notice (“Notice”) provides information about how Saudi Credit Information Company handles personal information about you and describes the rights you may have regarding your personal information. This Notice applies to Saudi Credit Information Company and its online and offline collection, use and disclosure of personal information.

Saudi Credit Information Company has an obligation to preserve the confidentiality and privacy of the user's data and information.

Saudi Credit Information Company shall not collect, process or disclose any personal data or information except in accordance with the specific controls provided in the Credit Information Law and its Implementing Regulations, the Electronic Transactions Law, the Anti-Cyber Crime Law, the Code of Conducts approved by the Saudi Central Bank (SAMA), instructions and controls issued by the National Cybersecurity Authority from time to time, instructions governing the confidentiality of information issued by the regulatory authorities in the Kingdom, including all amendments applicable to them from time to time.

1. 1. When does Saudi Credit Information Company Collect Personal Information about You?
   • We obtain your personal information from our member organizations to establish a credit report. This is in accordance with the requirements of Credit Information Law.
   • We also obtain some information from you when you utilize our services through online and offline channels at the time of registering for our services and products.
   2. What Types of Personal Information does Saudi Credit Information Company Process and Retain?

   As a Saudi Credit Information Company, we collect and process different types of personal information about you from various sources. The below table chart describes the categories of personal information we may have obtained through different sources.

   Personal Information We Collect And From Whom We Collect It

   1. What We Collect
      • Name (first, last, and\/or maiden name).
      • Demographic Information (age, gender and nationality).
      • Salary information.
      • National address; email address (es); telephone number(s).
      • Date of birth and Employment information.
      • Device identification information used to access the Site.
      • Financial and Credit information of Consumers (individuals).
      • Professional Employment details (Employment Dates, Employer Name, Employer Information).
      • Audio and electronic recording, for example, when you call in with a question to customer service.
      From Whom We Collect It:
      • Information you provide.
      • Member organizations (Banks, Lending organizations, Insurance providers, Telecommunication, Fintech companies etc.)
      • GOSI and Ministry of Finance for Salary Certificate.
   3. Lawful Purpose for Collecting & Processing Personal Information

   We collect and process your personal information for different legal basis as mentioned below:

   • To provide Saudi Credit Information Company services related to credit reporting inquiries, dispute and\/or complaints in accordance with Credit Information Law.
   • To provide value added services in accordance with our legitimate interests.
   • To update our consumer credit records in accordance with Credit Information Law.
   • To verify your identity to provide you services and to protect your vital interests.
   • To record and demonstrate how we have conducted the dispute and complaint resolution process in accordance with Credit Information Law.
   • For product development and improvement, statistical and research purposes, and for any purpose subject to the limitations set forth in this Notice and applicable laws incumbent upon Saudi Credit Information Company. This is in accordance with our legitimate business interests.
   • For the purpose of dispensing Data subject rights in accordance with Saudi Personal Data Protection Law and without any prejudice to Credit Information Law.
   • For the purpose of enabling and digitizing the credit lending process through the Bank, Fintech and other financial institute.
   • For the purpose of informing you about our services through marketing campaigns, which are in accordance with the consent you provided to us.
   4. How Long Does Saudi Credit Information Company Store Personal and Credit Information?

   Your Personal Data is stored securely at our Data centers in Kingdom of Saudi Arabia. We retain your personal data in accordance with timelines associated with our lawful purposes after which we will securely dispose off such data in a manner that prevents access or retrieval. The Retention period for each data type is determined separately within our organization’s Data Retention & Archiving Policy.

   SIMAH-Saudi Credit Information Company has adopted necessary administrative or technical measures and controls in line with Saudi National Cybersecurity Authority (NCA) regulations and SAMA Cybersecurity Framework to protect your personal data from incidents of leakage, damage, illegal access.

   5. With whom does Saudi Credit Information Company share Your Personal Information?

   Saudi Credit Information Company shares your personal information with different member organizations in accordance with the Saudi Central Bank Credit Information Law and for fulfillment of our value-added services.

   Disclosure for Legal reasons: We may share personal data to third parties subject to Saudi Central Bank approval or to comply with valid legal requirements such as a Saudi law, regulations, search warrant, subpoena, court order, or other legal process.

   Consumer Credit Reporting: Our member organizations collect, use, and process personal data in accordance with Saudi Arabia''s Credit Information Law. This collection of personal data is done to determine your creditworthiness, credit standing, credit capacity and this information is shared with credit providers and other entities when they make decisions to extend credit or enter into transactions with you, assist lenders and other creditors.

   Commercial Credit Reporting: Our member organizations collect, use, and process personal data as part of our commercial credit reporting services. These services permit them to make informed decisions regarding providing credit to or investing in businesses. Commercial credit reports may contain the names and other personal data of owners, principals, guarantors, or agents of the businesses.
   The Company shall not transfer personal data outside the Kingdom of Saudi Arabia except in accordance with the controls and provisions set out in the applicable laws and regulations

   6. How Will We Inform You of Changes To This Privacy Notice?

   If we change this Privacy Notice, we will let you know about the changes by publishing the updated version at all applicable communication channels. The Privacy Notice is published on 17-May-2026 shall be considered active and current until available on our website. Saudi Credit Information Company is committed to protecting and respecting your privacy.

   7. Your Rights Regarding Processing of Your Personal Data

   The owners of personal data are entitled to the below rights. However, the rights to the data subject shall be disbursed in accordance with the different legal basis/lawful purpose of processing incumbent upon Saudi Credit Information Company.

   1. Right to be informed about the legal basis and the purpose of the collection of your personal data. We dispense this right through this Privacy Notice.
   2. Right of Access to Your Personal Data, you may exercise this right by signing in to MOLIM and accessing your data. Your credit report is provided subject to a fee in accordance with the provisions of the Saudi Central Bank Credit Information Law.
      
   3. Right to Request Access to Your Personal Data: You are entitled to request access to your Personal Data held by the Saudi Credit Information Company in a readable and clear format. You may download such data through MOLIM. You may download your credit report through MOLIM subject to a fee in accordance with the provisions of Saudi Central Bank Credit Information Law.​
      
   4. Right to Request Correction of Your Personal Data. You are entitled to request correction of your Personal Data that you believe is inaccurate, incorrect or incomplete. You may do so by logging into MOLIM → More → Support.
      
      You can raise a dispute case at MOLIM and tell us specifically why you think it’s inaccurate or incomplete. We request you to read dispute instruction and tips, fill all needed field and attach supporting documents then submit your dispute.
      
      MOLIM application also enables you to correct any other personal data that may hold about you by logging to SIMAH → Access your Profile → Personal Information.
   5. Right to Request Destruction of Your Personal Data. You are entitled to request destruction of your Personal Data in certain circumstances which are dependent on the legal basis of personal data processing.
   6. Right to Withdraw Your Consent for Processing Your Personal Data: You are entitled to withdraw your consent for processing related to marketing and advertising campaigns. You can exercise this right by logging to MOLIM → Settings → Notification Settings → Others → Marketing – Promotions.
   7. The Right to claim compensation for material or moral damage if the Data Subject is harmed as a result of any violation stipulated in the Saudi Personal Data Protection Law and its implementing regulations
   8. The Right to file any complaint to Competent Authority which is Saudi Central Bank related to applying the provisions of the Saudi Personal Data Protection Law and its implementing regulations.
      
   For further details regarding the processing of your Personal Data and how to exercise your rights, you can contact the Personal Data Protection Officer at the SIMAH at [email protected]

   We will respond to data subject requests within:
   

   • Thirty (30) days from the date of receipt.
   • In cases where the request is complex or requires additional time, the response period may be extended to up to sixty (60) days. In such cases, the data subject will be notified of the extension and the reasons for it prior to the expiry of the initial response period.
   ESTABLISH CREDIT REPORT:

   I acknowledge that I have read this Privacy Notice, and I agree to establish my credit record with the Saudi Credit Information Company, and I agree to inquire about it, and I authorize the SIMAH to obtain all my previous, current, and subsequent credit information, and for SIMAH to disclose and exchange that information with its members in accordance with the provisions of the Credit Information Law, its implementing regulations, and other related regulations