We collect your personal data directly (such as electronic forms, drop-down lists, radio buttons) and indirectly (such as cookies, automatic information collection, website analytics and all supporting documents and documents obtained for specific purposes).

We will collect, use, store and transfer various elements of your personal data through different channels, including the following:

• When you apply for our products or services, visit our website, our application, communicate with us, submit a request or provide a comment electronically or in person, or through external sources as permitted by applicable laws and regulations.
• When you apply to open an investment account or implement transaction services such as trading services, fund services, or executing transactions, or services provided by Mulkia Investment Company.
• When requesting information from our customer service regarding inquiries and complaints.
• In the event that you provide investment account information such as your personal data or information related to your identity.
• When you use your login credentials for online services or the application.
• When necessary to verify information about your credit history from credit bureaus.
• In the event of conducting necessary investigations, such as due diligence checks, anti-money laundering and counter-terrorist financing checks, to obtain the information we need to support our regulatory obligations, for example, information about transaction details, and to detect any suspicious and unusual activities.
• If you subscribe to our service or publications.
• If you enter a promotion or survey.

How do we use your personal data?

We use your personal data when we have a legal basis or when applicable laws require us to do so, for example:

To protect the public interest, detect and prevent financial crime, including fraud, terrorist financing, money laundering or other illegal activities.

We use the personal data we collect to provide our customers with investment and marketing products and services, manage our business and customer relationships, and provide a rich and improved customer experience.

When applying for a job, your personal data will be processed upon submitting your application, in accordance with our Candidate Privacy Policy.

For complaints or reports of violations, your personal data will be processed upon submitting your application.

Sometimes we may collect, use and share aggregated data such as statistical data. Non-personal data may be extracted from your personal data, but it is not considered personal data for the purposes of the law, as it does not directly or indirectly reveal your identity in any way.

For security and safety purposes, we may use closed-circuit television (CCTV) cameras and surveillance systems in our buildings. The recorded footage may be used to monitor and investigate security incidents, prevent fraud, and ensure the safety of our customers, employees and assets.

To ensure quality control, assurance, training and compliance, we may monitor and record telephone calls, including customer service calls and calls to our representatives, as well as record electronic communications, such as emails and instant messages, between you and our representatives.

We will notify you if a call is recorded, and recorded calls will be moderated in accordance with applicable data protection laws and regulations.

These measures are taken to ensure the security of our systems, prevent fraud and maintain compliance with regulatory laws and regulations.

We may interact with you on social media platforms to provide information, respond to inquiries and promote our products and services.

Please also note that any information you post or disclose on our social media pages may be publicly visible, and you should exercise caution when sharing personal data or sensitive personal data, as defined in the Personal Data Protection Law in the Kingdom of Saudi Arabia.

When we obtain your consent, we may use your personal data for business or marketing purposes

What types of personal data we may collect include:

Individual identity data: such as full name, gender, date and place of birth, country of residence and identification information such as photo ID, passport details and information, national ID/residence card and citizenship.

Contact information: such as home or work address, proof of address, email address and telephone numbers.

Financial data: such as credit information, financial and banking information and information obtained from other financial institutions.

Family information: such as number of children, marital status and individual data.

Income and employment data: such as annual income, monthly salary, and net worth.

Technical/Technical Information: This includes your IP address, login information to our website/app, browser type and version, time zone and location settings, operating system, platform, and other technology on the devices you use to access this website. We use this information for system administration or for our business purposes.

Profile Data: This includes your username and password, your orders, preferences, comments, and survey responses.

Usage Information: This includes information about how you use our website, app, and various services.

Marketing and Communication Information: This includes your preferences in receiving marketing from us and any third party companies on our behalf and your communication preferences.

How do we disclose your personal data?

We will disclose your personal data to third parties, under the following circumstances:

• When we need to perform certain internal purposes such as providing products or services, for administrative purposes, billing purposes and other business and support purposes.
• When the disclosure is based on a request from the Capital Market Authority or the Securities Dispute Resolution Committees under the Law, its implementing regulations, or related regulations, or based on a request from the General Administration of Financial Investigations or the competent government agencies in accordance with the provisions of the Money Laundering Law and the Anti-Terrorism Crimes and Financing Law and their implementing regulations or to the Zakat, Tax and Income Authority within the framework of joint cooperation with the Capital Market Authority.
• When providing instructions to service providers inside or outside Mulkia Investment Company, locally or internationally, to process personal data for permitted purposes on our behalf and in accordance with our instructions, ensuring the existence of agreements, as applicable and for the relevant procedures according to the law.
• When we require services from companies in the field of information technology, platform management and document translation, customer support, marketing and promotion of our services and products, internal and external audits, storage and payments, and when we deal with banks and other investment companies.
• When dealing with courts, law enforcement authorities, legislators, lawyers or other parties to determine, exercise or defend a legal or equitable claim or for the purposes of alternative dispute resolution.
• To companies that may act as data processors or controllers participating in financial transactions, such as service providers or financial institutions, and regulatory bodies.
• In general, we will disclose your personal data when you indicate or authorize us to do so, or when we are permitted or required to do so in accordance with legal, legislative or official requests, or when the data is no longer confidential.

Why do we store your personal data?

We retain your personal data for a period of ten years under the rules and regulations of the Capital Market Authority and for as long as is necessary to achieve the purposes set out in this Privacy Notice and unless a longer retention period is required or permitted by applicable laws and regulations. We will retain and use your personal data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our agreements and legal policies.

Minimum Data:

We anonymize the data we hold on your behalf when it is no longer necessary to identify you from the personal information we hold.

Cross-border Data Transfers:

Sometimes we may transfer your personal data to countries outside the Kingdom of Saudi Arabia, for example:

Trading in global markets, some third parties are located outside the Kingdom of Saudi Arabia, so processing your personal data may involve transferring data outside the Kingdom of Saudi Arabia within the permitted purposes.

Please contact us if you would like more information about the specific mechanism we use when transferring your personal data.

We require all third parties to respect the security of your personal data and process it in accordance with the Personal Data Protection Law (PDPL) and we will also obtain your consent where required and ensure that contractual terms are in place regarding the sharing of personal data with the third party. We do not allow third party service providers to use your personal data for their own purposes and only allow them to process your personal data for specific purposes and in accordance with our instructions and in accordance with the personal data protection rules and regulations issued by the Capital Market Authority and the Saudi Data and Artificial Intelligence Authority.

Links to other sites other than the Mulkia Investment website:

Malkia Investment provides links on its website to other suppliers and third parties, and these links are provided to give the customer the opportunity to benefit from the products and services of these parties. Mulkia Investment disclaims any responsibility for how third parties collect or use the customer’s personal identification information. We recommend that you review the privacy policies of all linked sites that you visit. When you visit third party sites, you are not subject to the scope of protection provided by Mulkia Investment’s privacy policies, as the company does not bear any responsibility for the contents of third party sites, and Mulkia Investment does not represent any of the parties if both of them enter into a transaction. In the event that Mulkia Investment seeks external support, it is committed to seeking the assistance of reliable and referenced institutions, and requests and confirms compliance with the confidentiality standards adopted by Mulkia Investment.

Retention of personal data:

We maintain technical, organizational, physical, electronic and procedural measures to ensure the security and confidentiality of your personal data against any unauthorized access, use, disclosure, accidental or unlawful change, destruction, or other forms of unauthorized processing. These measures include data encryption, access controls, firewalls, and regular security assessments. We provide our employees with training on the importance of data privacy and ensure that they comply with the policies and procedures in place at Mulkia Investment Company regarding information confidentiality, which requires every employee or service provider to maintain the confidentiality of internal information obtained during their employment with the company.

Authors:

We may collect and process personal data relating to your authorized representative or representatives (agents) to determine and provide our services if you have authorized another person to act on your behalf in relation to your accounts or transactions with us. It is your responsibility to ensure that you have obtained your representative’s consent to provide us with his or her personal data.

Privacy of Minors and People of Determination:

Our services are not designed for individuals under the age of eighteen (18) years or for people of determination. If you are a resident of the Kingdom of Saudi Arabia and are under the age of eighteen (18) or are a person of determination, or if you are a resident outside the Kingdom and are not of the required age in the place where you reside, we are not permitted to contract with you directly. It is important to note that we only collect personal data through a parent or legal guardian who is authorized to do so.

Updating the Privacy Notice:

We reserve the right to review or update this Privacy Notice from time to time to reflect changes in our privacy practices, legal obligations, or as required by applicable data protection laws and regulations. We will provide notice of any material changes by posting the updated Privacy Notice on our website or by other appropriate means.

Your rights regarding the processing of your personal data:

Under the Personal Data Protection Law, you have the following rights, which depend mainly on the purpose of collecting and processing personal data:

– The right to know: You have the right to know the methods by which we collect your personal data and the legal justification for collecting and processing it, how it is processed, stored and destroyed and to whom it will be disclosed. You can view all the details through the Privacy Policy or you can contact us on the data shown below (clarification of restrictions on the right to know in simplified language).

– The right to access your personal data: You have the right to ask us to view your personal data, by [the means by which the personal data is viewed], (clarification of restrictions on the right to access in simplified language).

– Right to request access to your personal data: You have the right to request access to your personal data held by the controller in a readable and clear format, whenever technically feasible, via [the means by which the personal data subject is provided with his data], (clarifying the restrictions on the right to access in simplified language that apply to the right to access, and other restrictions and exceptions, if any).

– Right to correct your personal data: You have the right to ask us to correct your personal data that you consider to be inaccurate, incorrect or incomplete, via [the means by which the correction can be requested], and it will be reviewed and updated within [number of days], and you will be notified of this via [the means by which the personal data subject is enabled to view his data].

– Right to destroy your personal data: You have the right to ask us to destroy your personal data in certain circumstances (the possible cases are explained in a way that does not conflict with the legal justifications, and the restrictions on the right to destruction).

-The right to withdraw your consent to the processing of your personal data: You have the right to withdraw your consent to the processing of your personal data – at any time – unless there are legal justifications that require otherwise.

Except as stipulated by law, you will not be required to pay any fees for exercising these rights, and if a request is submitted to exercise one of these rights, you will be responded to within [number of days] from the date of receipt of the request in full.

For more details about the processing of your personal data, and how to exercise your rights, you can contact the Personal Data Protection Officer at [Mulkia Investment Company], according to the contact details shown below.

Personal Data Protection Officer

• Customer Service 8001199992 – 920003028:

Fax: +966112932799

• Email: info@mulkia.com.sa

How to file a complaint or objection?

• In case of any concerns or our failure to comply with the Personal Data Protection Law, you can submit a complaint via email to the department responsible for handling complaints: complaints@mulkia.com.sa or using one of the following channels: Customer Service: 8001199992 – 920003028

[If you are not satisfied with our handling of the complaint or if we do not respond within 10 business days], you can submit a complaint to the competent authority [Saudi Data and Artificial Intelligence Authority (sdaia.gov.sa)

Contact us:

Mulkia Investment Company

• Customer Service: 8001199992 – 920003028

Fax: +966112932799

• Email: info@mulkia.com.sa

Customer Service: crm@mulkia.com.sa

Complaints and Feedback: complaints@mulkia.com.sa