Type of Personal Data we collect

Tamam Finance may also collect Non-identifying Data such as your operating system, hardware version, browser type, device settings, the name of your mobile operator or internet service provider, area code, language, time zone and information about user activities on TamamApp, such as how often pages are visited, etc.

  • Tamam Finance may collect identification data from the devices on which you install or access TamamApp, such as the location of your devices, including specific geographic areas, such as through GPS, Bluetooth, or Wi-Fi signals and your IP address.
  • Tamam Website may use browser cookies to maintain information about your site session; most notably, the ‘state’ of your current web session. Cookies help us identify you; this in-turn enhances your experience at TamamWebsite. These cookies contain no personal and confidential information.
  • TamamApp may access your device camera and photo library, for example, to enable you to scan your credit card.
  • TamamApp keeps a record of all your activities undertaken in TamamApp to help improve future product performance and user experience.
  • When you execute transactions using TamamApp, Tamam Finance will generate and maintain records of those transactions.
  • In line with SAMA’s directives, Tamam Finance must determine the maximum loan amount that you are eligible for, before granting any loans. To do so, Tamam Finance collects relevant information about you from the General Organization for Social Insurance (GOSI) (www.gosi.gov.sa) and from the Saudi Credit Bureau (SIMAH) (www.simah.com) to compute your debt-burden ratio (DBR) and deductible ratio (DR). SAMA mandates that all financial services institutions must collect these metrics as set out in SAMA’s official circular No. 46538/99, dated 02/09/1439H (corresponding to 17/05/2018) entitled “Responsible Lending Principles for Individual Customers”. Articles 15, 16 and 17 of this circular mandate specific limits which all financial institutions, including Tamam Finance, must abide by in providing loans to individual customers.
  • TamamApp also collects financial Identification Data when you link payment cards (such as your credit or debit card) to your Tamam Finance account.
  • The information you provide is validated using verification information sourced by Elm (www.elm.sa), through its Yakeen service, from the Absher data platform developed by the Ministry of Interior of the Kingdom of Saudi Arabia (www.moi.gov.sa).
  • TamamApp collects specific Identification Data when you register for personal uses, such as name and mobile phone number, among others.

Legal basis and purposes for collection and the use of your personal data

We collect and use data for what is required by our business functions and services. In most cases, our legal basis and purposes include, but are not limited to:

  • Compliance with legal obligations: as a finance company we are subject to several regulatory obligations that may require us to process your personal data (e.g., AML and KYC) purposes.
  • We also need to process your personal data to comply with any obligations issued by governmental, legal or regulatory authorities within the Kingdom of Saudi Arabia.
  • Performance of a contract: it may be necessary to process your personal data in order to perform a contract with you relating to the following purposes:
    • a) To allow us to provide you with our products and services.
    • b) For the purpose of identity management and when you sign-in to your Tamam website account.
  • Legitimate interests: where necessary we process your personal data for our legitimate interest. Examples of where we rely on legitimate interests includes:
    • a) Understanding your needs as a customer and your eligibility for our products and services and to understand how you use and interact with our products and services.
    • b) Promote new financial products and services that may be of interest to you.
    • c) Administer our services, including troubleshooting and testing purposes.
    • d) To contact you for your opinions about our products and services, including surveys and other market research.
    • e) To enhance our products, services and your experience across our channels and to inform you about key updates and changes to our channels including Privacy Notice, Data Subject Request and other terms and policies.
  • Consent: if we need to process your personal data in a way not covered by the legal justifications above, we will do so based on your consent. Please note that your consent withdrawal shall not affect the legality of what we have processed prior to your withdrawal request.
  • We may need your consent for the following purposes:
    • a) To protect you against fraud by conducting identity and conflict checks.
    • b) To send you marketing and advertising communications. Please note that you may opt out of marketing offers at any time by contacting us on the details provided at the end of these notice or via the Tamam application through the following steps (1- Main Menu, 2- Explore, 3- Account Settings, 4- Receive Promotional and Awareness Messages).
  • Any personal data received by us will be used for the purpose indicated in this Privacy Notice or in separate notice provided to you, except for were permitted by law, we will not process your personal data in a manner that is inconsistent with the collection purposes identified.
  • We may process your personal data by automated means, including automated decision-making processes to assess eligibility for financing or providing personalized services. These decisions are made based on algorithms and objective criteria to ensure fairness and transparency.

Disclosure of Personal Data

We may be required to disclose your personal data to government, judicial, or other regulatory authorities in the Kingdom of Saudi Arabia, as mandated by applicable laws or upon their request, in accordance with prevailing regulations.

Protection of your Personal Data

We ensure your personal data is appropriately protected by utilizing the necessary physical, technical, administrative, and procedural security measures to prevent unauthorized access, collection, use, disclosure, copying, modification or disposal. We safeguard and protect your data in a manner that complies with the applicable data protection regulations in the Kingdom of Saudi Arabia.

To protect your personal data, Tamam Co. has put in place several technical and organizational measures. Technical measures include appropriate actions to address online security, risk of data use, alteration of data, data leakage, or unauthorized access, taking into consideration the risks raised by the processing and the nature of the personal data being processed. Organizational measures include restricting access to personal data solely to authorized persons with a legitimate need to know for the purposes of the processing operations.

Retention of your Personal Data

Tamam Finance has an obligation to retain your Identification data, including transaction records, on a local server, located in the Kingdom of Saudi Arabia, to grant you easy access and to comply with prevailing legislation on retention of your personal data in the Kingdom. Hence, we will retain your personal data in an identifiable form only for the period necessary to fulfill the purposes outlined in this Privacy Notice (unless a longer retention period is required or permitted by the laws).

  • a) If there is a legal basis for retaining your data for a specific period, in which case the data shall be destroyed upon the laps of that period or when the purpose of collection is satisfied, whichever longer.
  • b) If your data is closely related to a case under consideration before a judicial authority and the retention of your data is required for that purpose. In which case the data shall be destroyed once the judicial procedures are concluded.

Your rights regarding your personal data

Based on the personal data protection law, you can exercise the following rights:

  • The right to be informed about the legal basis and the purpose of collecting your personal data.
  • The right to access your personal data held by us.
  • The right to request your personal data in a readable and clear format.
  • The right to request correction and/or modification to your personal data.
  • The right to object or restrict processing when you contest the accuracy of personal data held by us.
  • The right to request destruction of your personal data.
  • The right to withdraw your consent to the processing of your data.
  • The right to lodge a complaint with the competent authority.

The potential consequences and risks that may result if you do not provide your personal data

The personal data requested by Tamam Co. is necessary to perform the services. Hence, we may be unable to comply with our legal or regulatory obligations to provide you with our products and services.

Policy Management

Tamam Finance reserve the right to amend, alter, or change this Policy in whole or part at any time by giving reasonable notice to you. If you do not agree with any change made by Tamam Finance to this Policy, your sole and exclusive remedy is to terminate your use of TamamApp. This will not, however, terminate any existing contract between you and Tamam Finance.

Usage of cookies

In order to improve our customer’s experience, our website use a standard technology call “Cookies” to collect information about how our website is used, which may include your data. The use of cookies is essential to the operation of our website.

Help and Support

In case of any questions, you can contact us via email DPO@tamam.life or through our website and mobile app.

Note: You can exercise your rights guaranteed by the Personal Data Protection Law by filling out the relevant form by clicking on the link below:
Data Subject Request (DSR) Form

Tamam Financing Company
Head Office, Eastern Ring Branch Road
Ash Shuhada, Ghirnatah, Riyadh, 13241
Kingdom of Saudi Arabia

Disclaimer

This Privacy Notice is not intended to, nor does it create any contractual rights whatsoever or any other legal rights, nor does it create any obligation on us in respect of any other party or on behalf of any party. When you log in to third parties’ websites, you will not be subject to or under this Privacy Notice. Moreover, we are not responsible for their websites’ content, and we do not represent third parties. Therefore, we recommend you to review the privacy notice of each website you visit.

This Privacy Notice complies with the laws of the Kingdom of Saudi Arabia and shall not contradict any Saudi Arabian laws.