Last Updated: 18 September 2024

Overview

This Privacy Policy applies to anyone whose Personal Data is provided to us. It sets out how and why we collect, store, use, and share your Personal Data. It also tells you about your privacy rights and how the law protects you.

“We” or “us” means Saudi Re and/or (depending on the context) Authorities that sit within Saudi Re.

We may sometimes Process Personal Data as a joint Controller, for example where we make joint decisions about Processing Personal Data with other authorities, or as a separate Controller, for example where we share Personal Data with other authorities. Where this happens, we will, if necessary, notify or redirect individuals to the other authority or Controller, in relation to exercising their individual rights as given under the Saudi Personal Data Protection Law (PDPL).

This privacy notice is following the requirements mentioned in such regulations the Saudi Data & Artificial Intelligence Authority (SDAIA) unveiled the Implementing Regulations to the Personal Data Protection Law (PDPL).

1- Information we collect

We may collect and process the following data about you:

Personal Data: Name, email address, contact information, and any other details you provide through our forms or when subscribing to our services.
Usage Data: Information about how you use our website, including IP address, browser type, pages visited, time and date of visit, and other diagnostic data.
Cookies and Tracking Technologies: We use cookies, beacons, tags, and similar technologies to collect and track information.

We don’t collect and process data of Minors (i.e., individuals under the age of 13) and hence they should not provide us with their Personal Data – if necessary, it should be provided via their parent or guardian. Where we receive Personal Data relating to a minor, we will assume it has been appropriately provided.

We may receive Personal Data from entities in connection with their registration or licensing in the Kingdom or by any Authority, including in relation to officers, directors, and approved individuals. We expect anyone who provides us with Personal Data to do so in compliance with all applicable laws including the PDPL and implementing Regulations.

2- Ways we use your personal Data

We may use the Personal Data that you provide to us, or we collect from you to:

Provide and maintain our website and services.
Respond to your inquiries and provide customer support.
Send you newsletters, marketing, or promotional materials (with your consent).
Improve, personalize, and expand our website.
Analyze how you use our website to enhance user experience.
Comply with legal obligations (such as data protection regulations).

3- Lawful basis for collection and processing of Personal data

We collect Personal Data only where it is relevant to and necessary for specified, explicit and legitimate purposes determined at the time of collection.

Under PDPL, we rely on the following legal bases for processing your data:

Consent: Where you have given us explicit consent to process your personal data.
Contractual Necessity: Processing is necessary for the performance of a contract with you.
Legal Obligation: We are required to process your data to comply with legal obligations.
Legitimate Interests: Processing is in our legitimate interests (e.g., to improve our services) and does not override your rights.

PDPL identifies certain Personal Data Processing which leads to a high risk to the rights and freedoms of individuals by virtue of the nature, scope, context, and purposes of the Processing of their Personal Data and imposes specific requirements concerning such activities.

We do not ordinarily undertake any of the high-risk Processing activities as described in the PDPL and Implementing Regulations.

Unless we explicitly tell you on a case-by-case basis, we do not engage in automated decision making when Processing Personal Data.

4- Sharing personal data

We may share Personal Data between the SUAID RE and the relevant Authorities (including Saudi Insurance Authority).

We may share Personal Data in the following circumstances:

any person to whom information is required or requested to be disclosed by any governmental, taxation or other regulatory authority or similar body or pursuant to any applicable law or regulation; and
third parties in an aggregated and/or anonymized form which cannot reasonably be used to identify you.

We may also share your Personal Data with our third parties for business needs, primarily for business and perational purposes.

5- Where we store your personal data

The Personal Data that we collect from you may be securely transferred to and securely stored on our databases, located on our secure servers locations in the Kingdom of Saudi Arabia.

6- Data security

We store Personal Data in electronic, digital and paper format. We have put in place appropriate security measures to prevent your Personal Data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed, this is in compliance with Insurance Authority Cyber Security Framework (CSF).

In addition, we limit access to your Personal Data to those employees, agents, contractors, and other third parties who have a business need to know. They will only Process your Personal Data on our instructions, and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected or actual Personal Data breach and will notify you and any applicable regulator of a breach where we are legally required to do so. Where direct communication to you will involve disproportionate effort, we may instead inform you via public communication or other similar measures that are equally effective.

Unfortunately, no data transmission over the internet can be guaranteed to be 100% secure. Therefore, Saudi Re cannot guarantee the security of any Personal Data you transmit to us over the Internet.

If at any point you suspect or become aware of a security incident (e.g. you receive a suspicious
communication from someone holding themselves out to be our employee or from an
unauthorized website claiming to be affiliated with us), please share the communication with us by
reporting the incident by email to DPO@saudi-re.com, or calling phone number +966 (11)510-2000, as soon as possible.

7- Data retention

We Process Personal Data for such periods as is necessary to fulfil our statutory functions and for the purposes set out in this Policy, unless a longer period for the retention of Personal Data is required by law.

We may retain your Personal Data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

Personal Data Processed based on consent will be retained for the period specified in the consent, or where not specified, until you withdraw your consent.

8- Cookies & third-party websites

Our website uses cookies. For more information, please refer to our COOKIE POLICY

9- Your rights

Right to know: Know how your personal data will be used.
Right to access: Saudi Re is processing your personal data and you may request access to that data.
Right to correction: you may request correction or completion of any inaccurate or outdated information Saudi Re has about you.
Right to deletion: you may request deletion or destruction of any personal data Saudi Re has about or from you.

Saudi Re can restrict a personal data subject’s request to exercise their rights if it is to protect the individual or others from harm, maintain security, or fulfill another law or judicial requirement.

10- Changes to our privacy policy

Saudi Re may amend this notice (Policy) from time to time to meet changes in the regulatory environment, business needs, or to satisfy the needs of our customers and service providers.

Any changes we make to this Policy will be posted on our website and date stamped so that you are always aware of the latest update. You should check this page from time to time to ensure you are updated with any changes.

Cookie policy

This Cookie Policy sets out how and why we handle your personal data through the use of cookies.

Saudi Re respects the privacy of individuals that it deals with and is committed to protecting it. This Cookie Policy explains the manner in which SAUID RE uses cookies and how you can disable them if you choose to do so.

This Cookie Policy should be read alongside our Privacy Policy.

Saudi Re wishes to help you make informed decisions, so please take the time to read this policy carefully.

For the purposes of this Cookie Policy, “we”, “our”, and “us” refer to Saudi Re.

1- Policy objective

A cookie is a small piece of data that a website stores on a visitor’s computer or mobile device. The information in this Cookies Policy will explain why we use cookies, and the different types of cookies used.

We use different types of cookies on our website for different reasons, but we primarily use cookies for technical reasons to improve the user experience, or for analytics of website traffic. Cookies can improve the user experience, for example, by storing user preferences about our website.

The data we collect using cookies helps us understand our customers better so that we can provide a more focused user experience. By using the knowledge of your previous visits to our website we can enhance your subsequent visits by suggesting content to match your requirements.

2- First-party and third-party cookies

Cookies are classified on the basis of who creates them, as first-party cookies or third-party cookies.

First-party cookies are created by the host domain and are used to add to the user experience. These cookies contain only the information that you enter on the host website and your IP address. Importantly, the data collected by first-party cookies is only available to the website owner.
Third-party cookies are created by parties other than the website owner. These cookies tend to be more commercial and are used for cross-site tracking, retargeting, and ad serving.

We use both first-party cookies and third-party cookies on our website. We use third-party cookies on our website to assist with analytics and communication activities but do not use these cookies for advertising purposes.

3- What types of cookies do we use

The types of cookies we use fall into one of the categories listed below.

Necessary Cookies: Essential for the website to function. These cannot be disabled in our systems.
Performance Cookies: Help us understand how visitors interact with the website, allowing us to improve its performance.
Functionality Cookies: Enable enhanced functionality and personalization, such as remembering your preferences.
Marketing Cookies: Track your online activity to help us drive more traffic to our website.

How to Manage Cookies

You can control and/or delete cookies as you wish. Most web browsers allow you to manage your cookie preferences. Please refer to your browser’s help section for more information on how to disable cookies. However, disabling cookies may affect your experience on our website.

4- Changes to our cookie policy

We may amend this Cookie Policy from time to time due to technological changes, or in order to meet changes in the regulatory environment, business needs, or to satisfy the needs of our customers and service providers. Any changes we make to our Cookie Policy will be posted on our website and date stamped so that you are always aware of the latest update.