Alistithmar Capital is committed to protecting your personal information and maintaining your privacy. This policy outlines how we collect, use, and protect your data in accordance with the laws of the Kingdom of Saudi Arabia, including CMA and Tadawul regulations. By using our services, you agree to the terms of this policy.

• Services: Online platforms including the official website and the ICAP TRADE mobile/desktop applications.
• You/Your: Any former, existing, or potential client using our online services.
• We/Us/Ours: Alistithmar Capital.
• Personal Information: Data that identifies or relates to an identifiable individual.
• Personal data processing: In order to provide you products and services, we may process your Personal Data. Processing means operations performed on Personal Data, e.g., collecting, recording, saving, organizing, formatting, storing, modifying, updating, consolidating, retrieving, using, disclosing, sharing etc.
• Controller and Processor: ICAP is the Data Controller and Processor in respect of the Personal Data that we collect and process about you. This is because the ICAP in most cases determines why and how your Personal Data is collected and processed.
• In some cases, the ICAP may also act as additional Data Processor when processing your Personal Data on behalf of Parent entity or its subsidiaries. In these cases, the ICAP carries out the processing of Personal Data under specific instructions from the entity or its subsidiaries acting as a Data Controller.

We will use a legal basis to process your Personal Data. This means we will have a legal justification to use your Personal Data, as required by the Law. 

• Identification details (name, date of birth, nationality, qualifications, certifications, emergency contact, photos, video recording, passport, visa or work permit, national ID or Iqama, gender details, location data and publicly available data)
• Contact information including address, phone numbers, and email.
• Employment and financial data (assets, income, etc.) Contact information: including address, phone numbers, and email.
• Family information: including marital status, spouse details, and children details.
• Financial information: such as financial transaction, bank account details, investment portfolio details, and tax identification details
• Professional information: covering employee details, career history, and salary records.
• Website technical data: comprising IP addresses and browser details and marketing preferences
• Sensitive data: Any personal information that includes references to an individual's racial or tribal origin, religious, intellectual, or political beliefs, or indicates their membership in associations or civic institutions. This also includes criminal and security data, biometric data that identifies the individual, genetic data, credit data, health data, location data, and data that indicates the individual is an orphan or has an unknown parent or parents.
• Information from third-party sources (e.g., credit bureaus, government agencies)
• Opinions or feedback related to our services

All other information you share with us from time to time

• Online and Offline forms you submit
• Phone or electronic communications
• Your use of our online services
• Third-party sources (e.g., affiliates, regulators, agents)

1. Process service requests
2. Assess service eligibility
3. Process and fulfil transactions such as Buy /Sell Shares, mutual funds or use any ICAP product or service.
4. Know Your Customer (KYC) update: We may process your Personal Data to identify and verify your identity while account opening and periodically over time.
5. Business operations: We may process your Personal Data to manage business operations related activities including changes to the business, legal and regulatory compliance reporting, auditing, monitoring communications and activities related to your account, anti-money laundering checks, protecting the safety and welfare of individuals, ICAP’s property and assets, monitoring unauthorized access or activities on our systems, detecting fraudulent transactions and others
6. Respond to inquiries from customers
7. Manage and improve operations
8. Market services (as per your consent)
9. Evaluate creditworthiness
10. Prevent fraud or illegal activities
11. Comply with laws and regulations (e.g., anti-money laundering)
12. Produce anonymized statistical report

It is not mandatory for you to provide us with your Personal Data. However, failure to do so may result in us being unable to open or maintain your account, provide services and/or products to you or your organisation, discuss any other opportunities with you or deal with other matters.

• In line with your signed agreements
• When it is required to provide you services that you have requested
• As permitted or required by Saudi laws

• Authorized representatives or agents
• Parent or holding company
• Payment processors and service providers
• Advertising partners (under agreement)
• Auditors, legal advisors
• Any applicable regulatory authorities (governmental, statutory, regulatory, executive, law-enforcement, investigating or judicial/ quasi-judicial authorities, departments, instrumentalities, agencies, ministries, institutions, boards, commissions, courts, tribunals, etc.) or other third parties as could be required by Law or in accordance with other regulatory obligations or policies applicable to us or to you
• Credit bureaus or collection agencies
• Any other Individuals/entities with your prior consent

• Access & Updates: You may review or update your personal information via online services or by contacting us directly through our contact us page.
• Accuracy: It's your responsibility to ensure your data is accurate and up-to-date.

• Firewalls, encryption, antivirus software
• Secure authentication procedures
• Access restrictions based on roles
• Regular audits and monitoring

This policy may be amended without prior notice. Continued use of our services implies your acceptance of any changes. Please visit our website frequently to see any updates or changes to our Notice.