Arabian Shield Cooperative Insurance Company

Arabian Shield Cooperative Insurance Company (hereinafter referred to as "Arabian Shield", "we", "us" or any other conscience thereof) is committed to respecting your privacy and protecting your personal data. This notice applies to all employees, customers, visitors, third parties and others ("you" or "user") who use or access our digital platforms, including our websites, employee and customer portals and social media pages.
This Notice (together with the Terms of Use and any other documents referred to therein) sets out the legal basis for processing any personal data we collect from you or that you provide to us, and how we process it. We will process your personal data in accordance with the legal provisions of the Personal Data Protection Law (PDPL) in force in the Kingdom of Saudi Arabia. In this notice, we will also explain to you how your data and rights as the data subject are processed as part of the steps Arabian Shield is taking in relation to your application. Please read the following carefully to understand the destinations of our consideration and practices regarding your personal data and how we treat it.
The protection of your personal data is our primary concern, so we follow the physical, electronic and procedural safeguards that comply with applicable laws and regulations to protect your information from unauthorized access or illegal use, as well as to protect it from accidental or unlawful modification, destruction or any other unauthorized processing. We are committed to continuously training our employees on best administrative and control practices related to personal data. The Arabian Shield has adopted a Code of Conduct by Its management, which includes a special section for the confidentiality of information, requires each of our employees to maintain the confidentiality of commercial and internal information that is viewed or dealt with within the scope of their daily work.
The controller of the processing in accordance with data protection laws is:
Arabian Shield Cooperative Insurance Company
P.O. Box. 61352, Riyadh 11565- Kingdom of Saudi Arabia
Tel: +966 (11) 250 5400- Fax: +966 (11) 463 1294
Toll Free: 800 124 7247

COLLECTED INFORMATION

Arabian Shield is committed to collecting the minimum amount of your personal data required to provide products and services of high standards, and in compliance with relevant regulations and laws. Failure to provide us with some information may affect your ability to use our site and benefit from our services.
We collect different types of information about you as described below. In some cases, this information may not appear to be personal per se, but if it is associated with other data that may reveal your identity, we treat it as personal data. These data include:

Identifying information: such as first and last name, job position, gender, job title, and the establishment you represent (if any).
Contact information: These include billing address, email address, and phone numbers.
Financial information: This includes your bank account information and payment card details.
Transaction Information: includes details of payments made to and from you, any other details of services you have obtained from us, as well as previous medical/insurance history with other insurance companies.
Technical information: includes your Internet Protocol (IP) address, login data for our website or application, browser type and version, time zone and location settings, operating system and platform, and any other technologies you use to access this website.
Profile information: such as your username and password to access the security portal.
Usage Information: This relates to how you use our websites, apps and services.
Marketing and communications information: includes your preferences regarding receiving marketing materials from us and your communication preferences.
Employment information: This may include date of birth, gender, country of residence, nationality, proof of eligibility for employment (including documents required to verify this), skills, qualifications and employment history, as well as your personal photos and any personal data that appears on your resume or job application.

Furthermore, we may collect certain sensitive data about you, especially those we need to process insurance claims. These include but are not limited to:

Medical reports, death certificates, details of previous medical claims, and any information related to physical or mental health or medical conditions.
In addition, we may obtain information regarding your criminal record or judicial background where necessary, as part of our efforts to prevent, detect and investigate fraud.

PROCESSING OF YOUR PERSONAL DATA

We use your personal data as part of the delivery of our products and services, and we process your requests and instructions related to the provision of online insurance services, as well as any other products or services associated with them. Here are some of the purposes for which we use your data:

Delivery of products and services: We use your information to enable you to benefit from our services and fulfill your requests, including issuing and processing insurance policies.
Contacting you: We send you messages regarding greetings, billing reminders, and various information about your insurance contracts.
Marketing and promotions: With your consent, we may use your personal data (such as your email, mobile phone number and postal address) to inform you about special advertisements, offers and promotions that may be of interest to you, whether via direct means of communication or through our websites.
Regulatory obligations: We may share your data with the systems and software of the relevant government agencies, such as the Najam platform, which enables verification of the status of vehicle insurance policies to meet legal or regulatory requirements.
Recording communications: We may record conversations you have with us, including phone calls, face-to-face meetings, emails and any other communication channels, to verify your instructions and improve our services.
Public interest: We may use your personal data (including sensitive information) for purposes in the public interest, such as investigating fraudulent claims or claims from policyholders, including large-scale/regulated fraudulent claims, medical errors, as well as anti-money laundering checks.
Device data collection: We may collect data related to your mobile phone (such as location information, IMIN number, or operating system), or your computer (such as an IP address) for system administration purposes or to achieve our business objectives. This data is used for statistical purposes related to usage and browsing patterns and does not enable the direct identification of a particular user.

LEGAL BASES FOR COLLECTING AND PROCESSING YOUR PERSONAL DATA

In accordance with the Personal Data Protection Law in the Kingdom of Saudi Arabia, the legal basis on which we often collect and process your personal data includes:

Your explicit consent:
when we obtain from your specific consent to use your personal data for a particular purpose, you have the right to withdraw this consent at any time by contacting us via the means of communication described in the "Contact Us" section of the Privacy Notice.

Fulfilling a Contractual Obligation
we use your personal data to perform a contract with you or to take the necessary steps before entering into a contract with you.

Protection of vital interests
We resort to this basis when a certain interest is achieved for you, and it is difficult or difficult to communicate with you for your consent.

Achieving Legitimate Interests
we use your personal data to support sour legitimate interests or those of any third party, provided that such interests do not override your rights to protect your data.

Fulfilling a Legal Obligation
we may need to use your personal data to comply with relevant legal or regulatory requirements.

Public Interest
In some cases, the processing of your personal data is necessary for reasons of substantial public interest, in accordance with applicable laws.

Copying Official Documents that Identify the Data Subject:
We committed to refraining from copying official documents that identify the data subject, except where it is required by law, or when a competent public authority request copying such documents pursuant to the Regulations.

COLLECTION OF YOUR INFORMATION

We may collect your personal data from a variety of sources, whether in connection with services or products we currently offer or have already been offered in the past. These sources include:

Collect data directly from you

Through our digital platforms: such as smartphone apps, websites, registration and claims forms, or through your telephone conversations with our agents.
When you purchase insurance or any products and services associated with us.
Via cookies on our website and digital platforms.
When you request information from our customer service department, including information regarding complaints and disputes.
When you use your login credentials to access your Arabian Shield Insurance Portal, we collect information such as your IP address, operating system and browser type, and we use this data for administrative or commercial purposes.
When using our partner applications, data may be exchanged with third parties associated with Arabian Shield services.
If we need to inquire about your credit history from credit agencies.
When you provide it to us directly by your employer who has an insurance policy issued by us and includes you in its coverage.
From hospitals or medical clinics during the processing of insurance claims.

Other external sources

Online platforms dedicated to insurance brokerage, such as price comparison sites.
Third parties we turn to provide you with additional value-added services.

WHO DO WE SHARE YOUR INFORMATION WITH?

We may need to outsource our products and services to better deliver our products and services, in accordance with relevant laws and regulations. We may also have to share your personal information outside of Arabian Shield if we deem this action necessary for the following purposes:

Providing distinctive services and experiences: to improve the quality of our services and provide the best possible customer experience.
Compliance with legal regulations and procedures: If it is necessary to comply with a law or judicial procedure.
Protecting the rights and property of the Arabian Shield: This includes enforcing and defending our agreements before the concerned authorities.
Urgent Situations: To protect the personal safety of our customers or any other individuals in urgent circumstances.

We may share your personal information with certain third parties, including but not limited to:

Companies that manage internal systems and processes: as data controllers or processors who perform administrative services and provide internal reporting.
Healthcare Institutions: Hospitals, health centers, pharmacies, and medical clinics that may act as data processors or joint or independent controllers in the course of processing insurance claims.
Government or semi-government entities and departments: when we are obliged to provide them with information.
External sales agents: who work on behalf of Arabian Shield to market our products and services.
Technical and administrative service providers: such as providers of information technology, payment and customer management systems, who process your data under data processing agreements with them.
Insurance brokers or other insurance companies: in the course of providing or improving our insurance services.
Supervisory and regulatory bodies: and competent authorities that require the disclosure of data under applicable laws.

COOKIES AND SIMILAR TECHNOLOGIES

We use cookies and similar technologies for a number of purposes, including improving the user experience and analyzing website traffic. Here is some important information about these cookies and technologies:

What are cookies?
- Cookies are small files stored on your computer's hard drive, enabling us to save login sessions, user preferences, and tracking browsing patterns.

The extent of our access to your information
- Regardless of what you choose to share with us, we cannot access your computer or other personal information through cookies alone.

Cookie Control
- Cookies are usually automatically accepted by browsers, but you can modify your settings to disable or reject them.
- Please be aware that disabling these cookies may affect your ability to use the Site and take full advantage of its functionality.

Web Beacons
- we may use web beacons or “web bugs". These are small images uploaded via browser or email. Web beacons help us know if you have visited our site or received and opened our emails.
- Sometimes these beacons are used with cookies and are part of a tracking service provided by a third party, allowing us to set detailed profiles of your digital behavior while making use of web server logs.

DIRECT MARKETING

Where we have the appropriate legal basis, we may use your personal data to send you marketing communications or to promote our services and other information that may be of interest to you, whether via email or SMS. You can always unsubscribe from receiving any or all such marketing communications through the "unsubscribe" option or by contacting us directly.
Our marketing messages may include personalized targeted materials as well as general materials. Personalized materials are designed specifically for you based on what we know about you in order to provide you with the content that we believe is most relevant to your interests.

SECURITY PRACTICES AND PROCEDURES

Arabian Shield Company places the security of personal data at the top of our priorities, and we are keen to protect it by physical, electronic and procedural means that comply with applicable laws and regulations. We take reasonable measures to prevent misuse, loss, unauthorized access, modification or disclosure of any personal data belonging to the Customer. The personal data you enter is encrypted using the Secure Socket Layer (SSL) protocol, which means that all your information is sent via a secure "pipe" between you and Arabian Shield, making it unreadable when transmitted.

RETENTION AND DESTRUCTION OF PERSONAL DATA

We retain your personal data only for as long as necessary to achieve the stated purposes or as required by relevant laws and regulations. The data will be deleted or destroyed at the end of the retention period, unless there are legal requirements to retain it for a longer period. We also retain and use your information as required by our legal obligations, including compliance with applicable laws, dispute resolution, and enforcement of our legal agreements and policies. We also comply with any directives issued by regulatory authorities, such as the Insurance Authority and the Saudi Authority. for data and artificial intelligence (SDAIA), and other rules and regulations applicable within the Kingdom of Saudi Arabia.

COLLECTION OF DATA FROM MINORS

If you are a resident of Saudi Arabia under the age of 18, or a resident of any other country and have not yet reached the legal age of majority, we cannot enter into direct contracts with you. In this case, your legal guardian (in accordance with applicable local legislation) must agree to this Privacy Notice and is deemed to have accepted all of its terms on your behalf. If you require your consent to the processing of your personal data for a specific purpose in this notice, your legal guardian must provide this consent on your behalf.

YOUR RIGHTS – LEGAL RIGHTS AVAILABLE TO MANAGE YOUR PRIVACY

We are committed to protecting your personal data and enabling you to exercise your rights set out in the relevant laws and regulations. The most important of these rights are as follows:

Right to know: You have the right to be informed about the collection and use of your personal data. This Privacy Notice aims to provide you with transparent information about how your data is processed.
Right to access personal data: You have the right to request access to the personal data we hold about you. This can enable you to obtain a copy of the personal data we hold.
Right to request personal data: You have the right to request access to your personal data in a commonly used electronic format, if technically feasible.
Right to request updating of personal data: You have the right to request the correction, completion or updating of any inaccurate or incomplete personal data we hold about you.
Right to delete personal data: You have the right to request the deletion or removal of your personal data when there is no compelling reason to continue processing it. However, this right is not absolute and may be subject to certain legal obligations or exceptions that we will inform you, if applicable.
Right to withdraw consent: Where we rely on your consent as a legal basis for processing your personal data, you have the right to withdraw that consent at any time. However, this right is not absolute and may be subject to certain legal obligations or exceptions that we will inform you, if applicable.

OUR COMMITMENT TO YOU

We must clearly inform you of your rights and provide appropriate means to exercise them.
We are required to respond to your requests within thirty (30) days, documenting a record of all data subject requests we receive.

PERSONAL DATA PROTECTION OFFICER

Name: Data Management Office (Arabian Shield)
Email: data@arabianshield.com

CONTACT US

The Personal Data you provide may be used by us, other members of the Arabian Shield and carefully selected Third Parties for research purposes or to inform you of other products or services that may be of interest to you, unless you have advised us otherwise. On each occasion that we contact you for these purposes, you will always be given the option to opt out of any further communication.
If you have provided your contact information to us and would prefer not to receive marketing information, or to participate in research, simply contact us to let us know.

PRIVACY NOTICE UPDATES

This notice shall take effect from March 2025. Any updates or changes to it will be posted on this website with an indication of the new revision date, indicating when the amendments will take effect. Your continued use of this website constitutes your acceptance of such modifications.