At Banque Saudi Fransi (“BSF”,” Bank”, “us”, “we”, “our”) we value your privacy and value the trust you place in us when you share your Personal Data. This Privacy Notice (the “Notice”) outlines how we Collect, Process, use, manage, disclose and protect your Personal Data. This Notice is framed according to the applicable regulations including the Personal Data Protection Laws and Regulations in the Kingdom of Saudi Arabia (“PDPL”).
We may use your Personal Data to provide you with our services including:
At BSF, we prioritize transparency in our dealings, especially when it comes to managing and utilizing the Personal Data you entrust us with. We gather and use your data based on the following lawful purposes:
When you are a customer or legal guardian of our customer or related party (including, who fully or partially lack legal capacity, corporates, enterprises, and other legal entities.), to provide you with our services, products, we may collect the following data:
| Type of Personal Data | Description | |
|---|---|---|
| Personal Data | Full name, gender, nationality, citizenship, National/Residency ID, passport, mobile number, email address, telephone number, age, birth date, birth place, marital status, national address, personal assets, account number, credit/debit cards numbers, account balance, account transaction data, education level, and any relationship with politically exposed person and relevant data. | |
| Credit Data | Personal income, credit record, property, assets (financial, real state, stock, etc.,) investment, tax identification number, SIMAH report, and any other data relevant to personal credit status. | |
| Biometrics Data | Signature, handwriting, fingerprint, voice, and face recognition data. | |
| Health Data | In some conditions we may collect medical reports, health condition, whether physical, mental or psychological conditions. | |
| Other Data |
Personal Data for compliance with laws and regulations and regulatory requirements, or for delivering online services. Such as, location (including geographic location and network IP address), cookies, communication records (including video or audio records).
Personal data arising from customer investigation, e.g., Personal Data collected during customer due diligence, sanction or anti-money laundering checks. |
|
Your Personal Data will be stored and retained securely to the extent necessary or as required by the law, and for a minimum of ten years or for the duration necessary to fulfill the outlined purposes in this Notice. This duration might be changed or extended based on your continued usage and benefiting of our services and products, and/or based on regulatory requirements for the retention of Personal Data or connected information. At the lapse of such duration(s) or upon your request to the extend technically applicable and legal permissible, such data will be destructed securely.
Your data security is important to us. We deploy both organizational and technical measures, including periodic audits, staff training, and strict policy and procedures for protection against unauthorized data access or processing. Rest assured, BSF stores your Personal Data with appropriate security measures, such as encryption, masking, and restricted access mechanisms.
Although we do our due diligence, we make no warranties, towards the security of third-party links in our websites. BSF assumes no responsibility for the completeness, accuracy, reliability, nor the protection from third-parties (including without limitation software, websites, etc.,), if any, which may be linked to our websites.
Your Personal Data may be shared:
BSF maintains the utmost confidentiality of all collected data. Data disclosure occurs only under legal mandates or to enhance our services, in accordance with this Notice.
In the case of transferring Personal Data outside the Kingdom, or sharing it with external entities, is carried out judiciously, adhering to the Personal Data Protection Law of the Kingdom of Saudi Arabia.
When you visit our website or our application, we use cookies to enhance your experience and improve the functionality of our services. Cookies are small text files that are stored on your device. They help us understand how our applications or website are being used and to enhance your experience when you allow us.
For customers who fully or partially lack legal capacity, we require legal guardian Consent before Processing any Personal Data.
1. Right to be Informed
You have the right to be informed about the legal basis and the purpose of the Collection and Processing of your Personal Data.
2. Right to Access Personal Data
You have the right to access or receive a copy of your Personal Data through the channels provided by BSF in a structured, commonly used, and readable soft or hard copy format if possible.
3. Right to Access
You have the right to access your Personal Data through the channels provided by BSF.
4. Right to Request Correction
You have the right to request correction, completion or updating of your Personal Data available to BSF.
5. Right to Destruction
As long as there is no legal requirement or legitimate interest to Process or retain the data, you have the right to request Destruction of your Personal Data available to BSF, if it is no longer needed for the purpose it was originally collected.
6. Right to Withdraw Consent
You have right to withdraw your Consent as long as there is no legal requirement to Process the data.
BSF may update this Notice occasionally, especially to stay compliant with new laws. Always refer to this section for the latest version. The current version was last updated on September, 2024 .
Maintaining the privacy and trust of our customers data is of utmost importance to BSF, and for any queries or to exercise any of the rights mentioned, please contact our Data Privacy Office at DPO@bsf.sa.
BSF is under the control and supervision of the Saudi Central Bank (SAMA).
| Term | Explanation | |
|---|---|---|
| PDPL | Personal Data Protection Law. | |
| Personal Data | Any element of data, regardless of its source or form, that independently or when combined with other available information could lead to the identification of an individual specifically, or that may directly or indirectly make it possible to identify an individual, including but not limited to name, personal identification number, addresses, contact numbers, license numbers, records, personal assets, bank and credit card numbers, photos and videos of an individual, and any other data of personal nature. | |
| Collection | The collection of Personal Data by BSF by the provisions of this Law, either from the Data Subject directly, a representative of the Data Subject, any legal guardian over the Data Subject, or any other party. | |
| Destruction | Any action taken on Personal Data that makes it unreadable and irretrievable, or impossible to identify the related Data Subject. | |
| Processing | Any operation carried out on Personal Data by any means, whether manual or automated, including collecting, recording, saving, indexing, organizing, formatting, storing, modifying, updating, consolidating, retrieving, using, disclosing, transmitting, publishing, sharing, linking, blocking, erasing and destroying data. | |
| Consent | Consent is a crucial concept that refers to the Data Subject’s freely given, specific, informed, and unambiguous agreement to the Processing of their Personal Data. It's a fundamental requirement for organizations to collect, use, or share Personal Data lawfully and transparently. | |
| Data Subject | The individual to whom the Personal Data relates (also referred to as “you” or “customer(s)” in this Notice). | |
