Privacy Poilcy

Personal data: Any data -regardless of its source or form- that can lead to the identification of an individual directly or indirectly. This includes: names, personal identification numbers, addresses, contact numbers, license numbers, records, personal property, bank account numbers, credit card numbers, photographs of the individual (whether static or dynamic), and any other data with a personal nature.
Processing: Refers to any operations performed on personal data using any manual or automated means. This includes: collection, recording, storage, indexing, arrangement, coordination, retrieval, modification, updating, integration, recovery, use, disclosure, transfer, dissemination, sharing, linking, blocking, erasure, and destruction.
Collection: Acquiring personal data through control mechanisms in accordance with legal provisions, whether directly from the data subject or from their representative or legal guardian, or from another source.
Destruction: Any action taken on personal data that makes it impossible to access or retrieve it in the future or for the data subject to identify it.
Disclosure: Allowing any person -other than those responsible for controlling or processing the data, as per the circumstances- to obtain, use, or access personal data for any purpose.
Transfer: Moving personal data from one location to another for the purpose of processing it.

Al Thaneyan Insurance Brokers Company may collect only the necessary personal data to provide our services at the highest possible quality and to enhance the customer experience. This data includes, but is not limited to:
User Data: When visiting Al Thaneyan Insurance Brokers website without registering, such as network server information (servers), the domain name used to access the internet, the user’s Internet Service Provider, and the user’s previous and subsequent locations.

• Registration Data: Personal data used during registration, such as full name, date of birth, national ID number/Iqama number.
• Geolocation Data: Geographic data that may be necessary for certain services.
• Contact Information: National or business address, email address, and phone number.
• Banking and Financial Data: Bank account information and financial data related to the services provided.
• All documents submitted by the client when requesting a quote or issuing an insurance policy.
• Compliance Information: Information required by Al Thaneyan Insurance Brokers to comply with laws and regulations issued by the Saudi Central Bank (SAMA), the Insurance Authority (IA), and other regulatory bodies, such as anti-money laundering (AML) regulations and Know Your Customer (KYC) principles.
• We use cookies to study how clients use our website.
• Other User-Entered Information: Such as information provided when filling out a “Contact Us” form or using other electronic services that collect the necessary information for processing

We process personal data obtained from the following sources:
Data Provided Directly by the Client.

• Information available to the public or accessible through commercial means.
• Databases available from government authorities or government-authorized sources for updating or verifying client documents.
• Authorized Representatives: Such as lawyers or legal guardians appointed to act on behalf of the client.
• During Visits to Al Thaneyan Digital Platforms: Information collected during visits to our website or through direct interactions such as filling out a “Contact Us” form or using the company’s services.
• When Providing Feedback or Contacting the Company: Information gathered when clients provide feedback, file complaints, or make inquiries.

The collection of personal data is not limited to electronic transactions but also includes all manual interactions between the company, beneficiaries, and relevant parties.

Client personal data is processed in accordance with the principles outlined in the Saudi Personal Data Protection Law (PDPL) and may be used for the following purposes:

• To deliver and enhance the insurance products and services offered by Al Thaneyan Insurance Brokers.
• To comply with legal and regulatory requirements set forth by regulatory authorities, including the Saudi Central Bank and the Insurance Authority.
• Enhancing information security and ensure the safety of personal data.
• For security or legal purposes or to meet judicial requirements.
• Explicit Client Consent: For purposes explicitly approved by the client.

We may share client personal data with third parties only when necessary:

• With Explicit Client Consent: When we have the client’s explicit approval.
• When processing is necessary to fulfill legal or regulatory obligations.
• With Service Providers: Such as licensed insurance companies in Saudi Arabia that assist us in delivering our services, provided they implement appropriate data protection measures and with the client’s explicit consent.
• With Government and Regulatory Authorities: Upon request or to comply with relevant laws and regulations.

Al Thaneyan Insurance Brokers is committed to retaining personal data only when necessary, according to legal requirements. This includes retaining data to meet operational obligations, fulfill regulatory or judicial requirements, or for security procedures, with all appropriate safeguards in place to protect the data. In all cases, the company is committed to storing personal data in accordance with Personal Data Protection Law (PDPL) and regulations issued by the Insurance Authority.When the purpose of collecting the data no longer exists or if the data subject requests its destruction, the company is obligated to securely destroy such data. If the company becomes aware of any non-compliance in the processing of personal data, it will take the necessary corrective actions to rectify the situation and ensure compliance with the relevant laws and regulations.

Retention of Data: Personal data is stored electronically through secure databases or data storage systems, or through paper documents protected by strict measures.

Disposal of Data: When disposing of data, it involves destroying paper documents and ensuring that they are completely deleted from databases and systems used, in accordance with the regulatory requirements of the insurance authority and related regulations.

There are several rights under the Personal Data Protection Law, as follows:

• The right to be informed, which includes being made aware of the legal basis for collecting your personal data and the purpose of its collection.
• The right to access personal data.
• The right to request personal data.
• The right to request correction or updating of data.
• The right to request deletion of personal data when it is no longer needed.
• The right to know how data is processed.
• The right to withdraw consent for processing their personal data at any time.

This policy is updated from time to time in response to legal, regulatory, or operational requirements. Any changes to the privacy policy will be published, and you will be notified before they take effect.

This Policy was last updated on September 10, 2024

If you have any questions about this Privacy Policy, or to request make a request related to your data, please contact us:

• By email: privacy@thaneyan.com
• By Phone: +966-11-476-0313 (in Arabic, English)
• By Fax: +966-11-476-1744
• By Mail: P.O Box 62471, Riyadh 11585