This privacy policy (the “Privacy Policy”) pertains to all the information we gather, utilize, and handle concerning you—whether you are a current or prospective customer, or a third party—with respect to the products or services provided by Ersal Money Transfer Company (referred to as "Ersal" within this policy). Ersal acts as a data controller for the personal information we process as part of our business operations, including the products and services we offer. Throughout this policy, "we," "us," and "our" refer to Ersal
The aim of this Privacy Policy is to explain the reasons for collecting personal data, how it is processed, transferred, and secured, the types of personal data gathered, the legal grounds and objectives for its collection and processing, methods and the reasons for transferring customers’ s data outside the kingdom, including the safeguards implemented to protect personal data when it is moved outside the Kingdom of Saudi Arabia. “Personal information” means Any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
- Collection of Personal Data We collect a personal data that is essential for delivering our international remittance services efficiently and in accordance with legal standards. This data encompasses:
- Full name, contact information, and identification documents: We collect these details to verify your identity, ensure security, and comply with legal obligations such as anti-money laundering (AML) and counter-terrorism financing (CTF) regulations and for providing the Ersal transfer service.
- Financial information such as bank details and transaction history: We gather this data to process payments, facilitate the transfer of funds, and keep accurate records of transactions.
- Contact details of recipients for international remittance services: This information is required to ensure that your remittance send to the correct individual and processed efficiently.
- Any other personal information provided to fulfill our remittance services: Additional information may be needed based on the specifics of your transaction or service request, such as details relevant to specific regulatory or operational needs.
This collection of data ensures that we can deliver our services securely and in compliance with Personal Data Protection Law and related regulations
- International Data Transfers
We might need to send personal data outside of Saudi Arabia to facilitate international remittance transactions, all in line with the Personal Data Protection Law and related regulations Furthermore, we make sure that the data receives an adequate level of protection and that the transfer process adheres to legal standards. This involves depending on adequacy decisions issued by the appropriate data protection authority and utilizing standard contractual clauses for transferring personal data.
- Data Retention
We will keep personal data The duration of our banking relationship; and for as long as it is needed to accomplish the purposes for which it was gathered, personal data may be held for a longer duration if required by law
- Data Subject Rights
As a customer of our international remittance services, you are entitled to certain rights regarding your personal data. These rights are designed to give you control over your personal data and provide you with avenues for recourse if you believe your data has been mishandled. Below are the specific rights you have as a data subject:
| Rights | Description |
|---|---|
| Right to Access: | You have the right to request access to the personal data we hold about you. This allows you to understand what data we have collected, how it is being used, and why it is being processed. If necessary, you may also request a copy of this data. |
| Right to Rectification | If any of the personal data we hold is inaccurate or incomplete, you have the right to request corrections. This ensures that the information we use to provide our services is accurate and up to date. |
| Right to Deletion | You may request the deletion of your personal data. you can request deletion when your data is no longer necessary for the purposes for which it was collected or if you withdraw your consent for processing (where consent is the legal basis for processing) |
| Right to Withdraw Consent | If you have given consent for the processing of your personal data, you have the right to withdraw that consent to process personal data such as used for direct marketing; you have the right to object to direct marketing, including any related profiling activities any time. Where we process your Personal Data based on your consent, or where such processing is necessary for entering into or performing our obligations under a contract with you, we will honor such withdrawal requests, but these rights are not absolute: they do not always apply, and exemptions may be engaged. For such requests, please reach out to us on the contact details given below. |
| Right to Lodge a Complaint | If you believe that your personal data has been processed in violation of the applicable laws or your rights have been infringed, you have the right to file a complaint with ErsalCare@ersal.sa |
- Security of Personal Data
we implement appropriate technical and organizational safeguards to protect your personal data from unauthorized access, disclosure, alteration, or destruction. This includes encryption, access controls, and regular security audits. - Disclosure to Third Party
Any third-party access to personal data will be strictly controlled and subject to legal agreements to ensure the protection of your data. We may disclose personal data to:
- Service providers or partners involved in the processing of international remittances.
- Its affiliates send the necessary purposes set forth in the Privacy Policy described here.
- Government-authorized Credit Information Agencies and fraud prevention agencies to comply with the mandatory legal and regulatory obligations.
- Any persons or companies - as may be required - in connection with a potential or actual corporate restructuring, merger, acquisition or acquisition, including the transfer of any of our rights or duties under our agreement with you
- Law enforcement authorities, government bodies, courts, dispute resolution bodies, regulators, auditors, and any party appointed by our regulators to carry out investigations or audits of our activities.
- Background Verification Services, ensuring thorough verification processes for reliable information.
- Risk Assessments for Data Transfers
Before transferring personal data outside the Kingdom, we will conduct risk assessments to evaluate the potential impact on data subjects, including:- The purpose and legal basis for the transfer.
- The security measures in place to protect the data.
- The likelihood of any risks and potential impact on data subjects.
- Amendments to This Privacy Policy
We reserve the right to update this Privacy Policy in accordance with changes in the law and regulation. Any amendments will be published on our website, and we encourage users to review the policy periodically. Your review of this Privacy Policy and continue dealing with Ersal shall constitute your explicit consent to the Ersal with respect to processing your personal data and/or changing the purpose for which it has been collected, including transferring thereof inside or outside the Kingdom. Continue to deal with Ersal, shall also be considered an explicit consent to the Ersal to obtain your personal data from you directly or from others in accordance with the Personal Data Protection Law, its Implementing regulation, and instructions from regulators. - Contact Information
For any questions or concerns regarding this Privacy Policy or the handling of your personal data, please contact us at:ErsalCare@ersal.sa8001111663 or 920033663
- Risk Assessments for Data Transfers