Privacy Policy
DATA SUBJECT REQUEST FORM
Saudi Industrial Development Fund (SIDF) is committed to protecting the personal data of our customers, employees, and partners. In accordance with the Personal Data Protection Law (PDPL) of Saudi Arabia, we recognize the rights of data subjects and are dedicated to ensuring that their rights are respected and protected. This form outlines the data subject rights that individuals can exercise in relation to their personal data.
Saudi Industrial Development Fund (SIDF) is committed to protecting the personal data of our customers, employees, and partners. In accordance with the Personal Data Protection Law (PDPL) of Saudi Arabia, we recognize the rights of data subjects and are dedicated to ensuring that their rights are respected and protected. This form outlines the data subject rights that individuals can exercise in relation to their personal data.
Saudi Industrial Development Fund (SIDF)
SIDF was established in 1394 AH as a government financial institution to realize the objectives, policies, and programs of industrial development in Saudi Arabia. Such objectives are aimed at supporting the private sector in various industrial fields, financing and developing the industrial sector in conjunction with government entities. SIDF paves the way for the private sector to engage in constituting and sustaining a national industrial base effectively and adequately.
Contact
- Attention of: Data Management & Privacy Office (SIDF)
- Address: 3015 King Abdullah Financial District – Al-Aqeeq. Unit Number:2, Riyadh 13519 - 6483
- Telephone: 8001160004
- Email: dpo@sidf.gov.sa
By using our website and providing us with your personal data, you acknowledge that you have read, understood, and consent to the terms of this privacy policy.
Date of Last Update:
This Privacy Policy may be updated periodically to reflect changes in our practices, technologies we use, or the systems we operate. We will post the updated version of the Privacy Policy on our website and notify our users of any critical changes made to it.
Effective date
This policy is effective as of December 30th 2024, and replaces any previous privacy policies.
Introduction
The Saudi Industrial Development Fund (“SIDF", “we," “us," or “our") is committed to protecting the personal data of our website visitors, clients, sponsors, representatives, and users. This privacy policy outlines how we collect, process and protect personal data in accordance with the Kingdoms Personal Data Protection Law (PDPL) and its regulations.
Scope
This privacy policy applies to all personal data collected through our website https://www.sidf.gov.sa/ as well as any other means of collecting personal data, such as online forms, email, or social media.
Definitions
For the purpose of this privacy policy, the following definitions shall apply:
- Personal Data: Any information related to an identified or identifiable natural person, including but not limited to name, address, phone number, email address, IP address, and any other information that can be used to identify an individual.
- Data Subject: The individual to whom the personal data relates.
- Controller: The entity responsible for determining the purposes and means of processing personal data.
- Processor: The entity that processes personal data on behalf of the controller.
Personal data that is collected:
The Saudi Industrial Development Fund collects and processes the following data when requesting a service through our website
Identification Data:
- Name
- Email
- National ID
- Address
- Contact Number
- Technical data: “Cookies" that are used to allow our website to function.
The Saudi Industrial Development Fund collects your personal data when you visit our website. We do not collect personal data, unless you know and choose to provide this data. The Saudi Industrial Development Fund uses your personal data to help provide services to its users. By using our website and its affiliated platforms, you agree and consent to the privacy policy and its continuous amendments.
Methods of collecting personal data and the purpose of collecting it:
We collect personal data through various means, including:
- Directly from the Data Subject: When you provide personal data to us through our website.
- Indirectly: Through cookies and other technologies used on our website.
The Saudi Industrial Development Fund collects personal data for the following purposes:
- Providing Services: To provide you with our services, including responding to your inquiries, processing transactions, maintaining your loan and other services.
- Improving Our Services: To improve our website, services, and overall user experience.
- Compliance with Laws: To comply with applicable laws, regulations, and court orders.
- Personal data is collected and processed based on the consent of the personal data subject.
- The Saudi Industrial Development Fund is committed to collecting the minimum necessary requirement that is closely and directly related to the purpose of collecting and processing personal data.
How your personal data is used:
The Saudi Industrial Development Fund is committed to use the personal data collected directly or indirectly, for the purposes of providing services, completing transactions, managing loans and other services.
How your personal data is disclosed:
The Saudi Industrial Development Fund reserves the right to share personal data with government entities, private organizations within the Kingdom of Saudi Arabia, or internal departments within the Fund, with the aim of providing more effective services to users. Personal data will not be shared with any entities outside the Kingdom of Saudi Arabia. The Saudi Industrial Development Fund also reserves the right to share user's personal data with authorized entities or those assigned to perform specific governmental services. Furthermore, the Fund retains the right to disclose any information to relevant or concerned authorities when necessary to comply with any regulations or legal requirements.
The submission of personal data by its data subject to the Fund through any official channels, including electronic platforms, or email, is considered explicit consent for the Saudi Industrial Development Fund to store, process, and use personal data.
Personal data is handled in accordance with the highest standards of privacy and security. All personal data sharing is carried out in compliance with legal obligations and privacy requirements, with all necessary measures taken to protect the data and ensure it is only used for its intended purposes.
The submission of personal data by its data subject to the Fund through any official channels, including electronic platforms, or email, is considered explicit consent for the Saudi Industrial Development Fund to store, process, and use personal data.
Personal data is handled in accordance with the highest standards of privacy and security. All personal data sharing is carried out in compliance with legal obligations and privacy requirements, with all necessary measures taken to protect the data and ensure it is only used for its intended purposes.
Legal Basis for Collecting and Processing Your Personal Data:
In accordance with the Personal Data Protection Law, the legal basis on which we rely in processing such data is:
- Your explicit consent. You can withdraw your consent at any time without affecting processing operations carried out based on other legal bases. To withdraw your consent, you can contact the Saudi Industrial Development Fund's Data Management office and Privacy Office.
How we store your personal data and retention and destruction of Personal Data:
The Saudi Industrial Development Fund stores your personal data securely at the Fund's headquarters in the Kingdom of Saudi Arabia or through secure solutions in cloud computing services.
Personal data is retained for limited periods of time based on legal and regulatory requirements and is only kept for as long as necessary to fulfill the purposes for which it was collected, or as required by the PDPL regulations. We may retain personal data for a longer period, if necessary to resolve disputes, implement our agreements, or comply with the regulatory requirements as mentioned in Article 16 of the Law. After the retention period has expired, a secure procedure is adopted to destroy the data, so that it becomes unrecoverable or inaccessible, in accordance with the Fund's internal controls.
Personal data is retained for limited periods of time based on legal and regulatory requirements and is only kept for as long as necessary to fulfill the purposes for which it was collected, or as required by the PDPL regulations. We may retain personal data for a longer period, if necessary to resolve disputes, implement our agreements, or comply with the regulatory requirements as mentioned in Article 16 of the Law. After the retention period has expired, a secure procedure is adopted to destroy the data, so that it becomes unrecoverable or inaccessible, in accordance with the Fund's internal controls.
Legal Basis for Collecting and Processing Your Personal Data:
We process personal data based on the following legal grounds:
- Consent: When you provide us with your explicit consent to process your personal data.
- Contractual Necessity: When processing is necessary to perform a contract with you or to take steps at your request before entering a contract.
- Legitimate Interest: When processing is necessary for our legitimate interests, such as improving our services and protecting our rights and property.
Your rights regarding processing of your personal data:
Under Personal Data Protection Law, you have the following rights, which primarily depend on the purpose of Personal Data collection and processing:
Click here then send your completed form to dpo@sidf.gov.sa should you wish to exercise any of the following rights as a data subject:
| 1. Right to be informed | Data subjects must be informed about how their personal data is being processed both where they have provided this directly to a data controller and where the controller has obtained it from another source, i.e., a third party. |
| 2. Right to access | Data subjects should be informed when their personal data is being collected and they must be able to obtain (request and be given) information about the processing of their personal data. |
| 3. Right to rectification | Data subjects should have the right to rectify and request the erasure of data processed about them to ensure that such data is accurate, complete, and kept up to date. |
| 4. Right to erasure | Data subjects should have the right to remove data processed about them to ensure that such data is accurate, complete, and kept up to date. |
| 5. Right to object | Data subjects should have the right to object to the data being processed. |
| 6. Right to restrict processing | Data subjects should have the right to restrict and stop the processing of their personal data. |
| 7. Right to data portability | Individuals should have the right to obtain all their personal data from a data controller in a universally machine-readable format or for that data to be ported to another service should they request it. |
Personal Data Protection Officer
If you have any complaints or disputes regarding our processing of personal data, please contact us:
Name: Reem Khoja
Address: 3015 King Abdullah Financial District - Al Aqeeq. Unit No.: 2, Riyadh 6483 - 13519
Telephone: 8001160004
Email: dpo@sidf.gov.sa
By using our website and providing us with your personal data, you acknowledge and agree that you have read, understood, and agreed to the terms of this policy.
Name: Reem Khoja
Address: 3015 King Abdullah Financial District - Al Aqeeq. Unit No.: 2, Riyadh 6483 - 13519
Telephone: 8001160004
Email: dpo@sidf.gov.sa
By using our website and providing us with your personal data, you acknowledge and agree that you have read, understood, and agreed to the terms of this policy.
Complaints and Disputes
If you have any complaints or disputes regarding our processing of personal data, please contact us at dpo@sidf.gov.sa . We will investigate and respond to your complaint in accordance with the PDPL and its implementing regulations.
In case of dissatisfaction with the handling of the complaint or in the event of no response within 30 working days, you can submit the complaint to the competent authority Saudi Data and Artificial Intelligence Authority, in accordance with the mechanisms and channels available to the competent authority according to the address of the Saudi Data and Artificial Intelligence Authority:
Saudi Authority for Artificial Intelligence and Artificial Intelligence (sdaia.gov.sa)
National Data Platform (dgp.sdaia.gov.sa)
In case of dissatisfaction with the handling of the complaint or in the event of no response within 30 working days, you can submit the complaint to the competent authority Saudi Data and Artificial Intelligence Authority, in accordance with the mechanisms and channels available to the competent authority according to the address of the Saudi Data and Artificial Intelligence Authority:
Saudi Authority for Artificial Intelligence and Artificial Intelligence (sdaia.gov.sa)
National Data Platform (dgp.sdaia.gov.sa)
Last Modified Date: 12/12/2025 - 04:54 PM Saudi Arabia Time
Was this page useful?