Skip to content
US
icn-search
  • English

Privacy Notice

Who we are and what we do?

First Capital ("FABC”, “we”, “us”, or “our”), is a listed joint stock company incorporated in the Kingdom of Saudi Arabia (“Kingdom”), bearing commercial registration no: 1010448608 and with its registered address at FAB Capital - 3rd Floor, 7756 King Fahad Road, Riyadh, 13524, Kingdom of Saudi Arabia. For the purposes of applicable data protection laws and regulations in the Kingdom, FABC head office and its branches in the Kingdom are controllers of your personal data.

FABC along with its subsidiaries, affiliates and related entities (“FAB Group”) are committed to providing the highest level of protection to your personal data in accordance with applicable data protection laws and regulations in the Kingdom.

What is the purpose and scope of this Privacy Notice?

The purpose of this Privacy Notice is to inform you about how we collect, use, store, make available, disclose, update, safeguard, destroy or otherwise deal with (process) your personal data and also to explain your rights relating to the privacy of your personal data and how the law protects you.


What is Personal Data and what Personal Data do we collect:

Personal data refers to any data, regardless of its source or form, that may lead to identifying an individual specifically, or that may directly or indirectly make it possible to identify an individual, including name, personal identification number, addresses, contact numbers, license numbers, records, personal assets, bank and credit card numbers, photos and videos of an individual, and any other data of personal nature”.

The personal data we collect will vary based on the purpose it is used for. However, below are examples of personal data we collect:

  • Identity Data: your title, full name, gender, nationality, National ID/ Iqama number, passport details, and related documentation, and the date and place of birth.
  • Contact Data: your email address, National Address or business address, contact telephone numbers and preferences regarding marketing communications.
  • Transaction Data: data about your transactions and our products that you use, including account activity and product use and any details pertaining to payments to and from your accounts, including repayments of any loans or credit facilities or other products.
  • Technical Data: collected from your use of our services, websites, or mobile apps (such as cookies). This may include;
    • Login information
    • IP Address
    • Mobile Number
  • Usage Data: Collected during your website visits (“Clickstream Data”). Clickstream Data includes information about how you use our website, application, platforms, and other sites visited from our website.
  • Interaction Data: This includes records of phone calls between you and us and customer support requests and feedback that we receive from you either through our websites, mobile apps, and social media accounts, or any channels we use to communicate with our customers.

Why do we process your personal information?

In order for us to provide you with our products and services need to process your personal data and also for the reasons set out below. Any personal data received by us will be used for the purposes indicated in this Privacy Notice or in a separate notice provided to you. Except for where permitted by law, we will not process your personal data in a manner that is inconsistent with the defined purpose for which it was collected.


Legal basis and purposes for collection and the use of your Personal Data:

We only collect and use personal data as required by our businesses to provide you with products and services. In most cases, our legal basis and purposes include, but are not limited to:

  • Performance of a contract: It may be necessary to process your personal data in order to perform a contract with you relating to the following purposes:
    • To create your FABC bank account;
    • To allow us to provide you with our products or services;
    • Enhance our products, services, and your experience across our channels and to inform you about key updates and changes to our channels including Privacy Notice and other terms and policies;
    • For the purposes of identity management and when you sign-in to your bank account.
  • Compliance with a legal obligation: as FABC we are subject to a number of statutory and regulatory obligations that may require us to process your personal data (e.g., AML/KYC purposes). We also need to process your personal data to comply with any obligations and requirements issued by governmental, legal and regulatory authorities within the Kingdom. Examples of processing based on legal obligations includes:
    • Compliance with legal and regulatory requirements and related disclosures;
    • Establishment and defence of legal rights;
    • Activities relating to the prevention, detection and investigation of crime; and
    • To verify your identity for fraud prevention and anti-money laundering checks in accordance with applicable laws.
  • Legitimate Interests: Where necessary we process your personal data in the regular management of our business and to protect FAB Group interests, the interests of our clients, shareholders, employees and other third parties, including our business partners and members of the general public. Examples of where we rely on legitimate interests includes:
    • To understand your needs as a customer and your eligibility for products and services and to understand how you use and interact with our products and services and the people or things you are connected to and interested in. To contact you for your opinions about our products and services, including through surveys and other market research.
    • Respond to enquiries and communications and to record these interactions for the purpose of analysis and improvement;
    • Design, develop and test products, services and solutions for clients, which may include combining sources and types of your personal data across multiple legal entities and countries, subject to compliance with applicable laws.
  • Consent: In addition to the reasons above, we may process your personal data if we have specific consent for a defined purpose. We will also obtain your consent where we are required to do so under applicable laws. We will rely on your consent for the following purposes which may include:
    • To send you marketing and advertising communications via (please note that you can opt-out of receiving such communications at anytime by contacting us at the details provided below);
    • Promote new financial and investment products and services that may be of interest to you.
    • To evaluate your profile and consider your application for a job at FAB.

How we collect your personal data:

We will collect personal data directly from you or through our banking channels. We also collect personal information about you from other sources where lawful and reasonable. The ways in which we will collect your personal data are set out in further detail below:

  • During on boarding and service or product use: when you become a customer and use our products and services.
  • Directly from you: this is personal data you provide to us, such as through visiting our website, mobile app or through direct correspondence with us, or via other direct interactions with us such as completing a form on our website, applying for our products or services, creating an account on our website or mobile app, requesting marketing to be sent to you, giving feedback, contacting us by any means to submit an inquiry complaint, etc.
  • Communication exchanges: when you complete a form and upload it on our website or mobile apps, email, social media post, via calling our call centre, or through participation in promotional campaigns.
  • Interactions (social media):  any posts and interactions you have directly with us on social media channels.
  • Browsing Pattern: data about how you are exploring our website, the timings of your visit, Internet Browser types, and how you were referred to our website. Please see section on “Use of Cookies”
  • Surveys:  online web surveys that enable us to gather feedback regarding issues. Such as your likes and dislikes about the look and feel of our website and mobile apps. Your valuable feedback enables us to enhance the quality of experience we provide to you as an organization.
  • Third parties and public sources. this includes credit and government agencies. If you are a third-party service provider, we may collect personal data about you as a data subject in order to ensure that the business relationship and matters relating to the agreement between you and us can be fulfilled. You warrant that, if you provide us with any personal data about other persons, such as employees, shareholders or your directors, you are authorised to share their personal data with us for purposes set out in this Privacy Notice.

Direct marketing

We will not send you any communications for the purpose of direct marketing without obtaining your prior explicit consent. If you consent to receive such direct marketing communications, you have at any time a right to opt out by contacting us via the email INFO@FABCAPITAL.COMor follow the instructions provided in the direct marketing communication.  


Transfer of your personal data cross border:

We may share your personal data with our affiliates or subcontract the processing of your data to, or otherwise share your data with, service providers located inside or outside the Kingdom. Such third parties may be engaged in, among other things, the provision of services to you, the processing of transactions, payments and/or the provision of support services. We will fulfil any requirements in relation to the international transfers of personal data under applicable laws.

How and why do we retain your Personal Data:

We will retain your personal data in an identifiable form only for the period necessary to fulfil the purposes outlined in this Privacy Notice to fulfil our business and operational purposes and in line with our legal and regulatory obligations.

We will only retain your personal data after the purposes for why we collected it no longer exists , in the following cases:

  • If there is a legal or regulatory requirement for retaining your personal data for a specific period, in which case the personal data shall be destroyed upon the lapse of that period or when the purpose of the collection is satisfied, whichever longer.
  • If your personal data is closely related to a case under consideration before a judicial authority and the retention of the data is required for that purpose, in which case the personal data shall be destroyed once the judicial procedures are concluded.

What are your rights to your personal data:

It is important to us that you understand your rights under the law and how you can exercise them. You have the following rights:

  • Right to be informed about the legal basis and the purpose of the collection of your personal data.
  • Right to request access to your personal data that we hold about you.
  • Right to request your personal data from us in a readable and clear format.
  • Right to request corrections to your personal data if incorrect, and/or modifications to your personal data if incomplete or updates where your personal data held by us is out of date. In this instance you may request us to restrict processing of your personal data that is incorrect.
  • Right to object or restrict to processing when you contest the accuracy of personal information held by us.
  • Right to request deletion/destruction of your personal data (this right is not guaranteed and we may refuse this request if there are grounds for us to rely on).
  • Right to withdraw your consent you previously gave us to the extent any of your personal data is collected based on consent. You can exercise your right to withdraw consent as set out below.
  • Right to lodge a complaint with the data protection authority in respect of our processing activities regarding your personal data. 

How do we protect your Personal Data:

We ensure your personal data is appropriately protected by utilizing the necessary physical, technical, administrative, and procedural security measures to prevent unauthorized access, collection, use, disclosure, copying, modification, or disposal. We safeguard and protect your data in a manner that complies with the applicable data protection regulation of the Kingdom.

In order to protect your personal data, FABC has put in place a number of technical and organizational measures. Technical measures include appropriate actions to address online security, risk of data loss, alteration of data, or unauthorized access, taking into consideration the risk presented by the processing and the nature of the personal data being processed. Organizational measures include restricting access to personal data solely to authorized persons with a legitimate need to know for the purposes of the processing operations.

When, how and with whom will we share your Personal Data:

We share your personal data with our own employees who have access to your Personal Data on a need to know basis for the performance of their duties. We may share your personal Data with our FAB Group entities to perform our obligations under our contract with you.

We may also share your personal data with our service providers involved in the provision of the information or services you have requested from us for lawful purposes in order to help us run our business.  We rely on such trusted third parties for a range of our business operations and provision of services. We do not share your personal data with third parties for their own marketing purposes, except with your specific consent.

We may share your data with any of the parties mentioned below, if this is permissible under applicable laws in the Kingdom:

  • Any court, regulatory body, or government authority to comply with any obligations and requirements issued by legal and regulatory authorities within the Kingdom.
  • Any debt collection agency, credit bureau, or insurer.
  • Any professional advisors (e.g. auditors and lawyers)
  • Any agents, service providers and vendors and suppliers (e.g. IT suppliers)
  • Any member of FAB Group or their service providers for the purpose of providing you with the products or services, enhancing our products, services, and your experience across our channels, and promoting new financial investment products and services that may be of interest to you and for the purposes of centralising our business operations.

We take extra care when we transfer or share information and will enter into suitable contracts with the third parties with whom we share your information, thus ensuring your confidentiality is maintained and your rights under the applicable law are upheld.


How to withdraw your consent:

When we rely on your consent (and no other alternate legal bases) you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

If you wish to withdraw your consent, you can do so by contacting our Data Protection Officer (DPO). Please note that even after you withdraw your consent, we may be obliged to keep your personal data due to legal requirements.

FABC’s DPO can be reached at INFO@FABCAPITAL.COM. Please feel free to reach out if you have any questions or concerns about how we handle your data.

What happens if you do not provide us with your Personal Data:

The personal data requested by the FABC is necessary to provide you with our products and services. If it is not provided we may be unable to comply with our legal or regulatory obligations or provide you with our products and services.

Changes to our Privacy Notice:

We reserve the right to amend this Privacy Notice at any time. The Effective date of the Privacy Notice, as stated below, indicates the latest date the Privacy Notice was revised or changed. Checking the Effective date below allows you to determine whether there have been changes since the last time you reviewed the Privacy Notice. Therefore, we recommend you check the Privacy Notice periodically to be aware of the most updated version of this Notice.

Use of Cookies:

In order to improve our customers’ experience, our websites and banking apps use a standard technology called "cookies" to collect information about how our websites are used, which may include your data.  The use of cookies is essential to the operation of our websites. You can access our cookies policy here: https://www.bankfab.com/en-ae/cookie-declaration.

Cookies help to make a website or app function better and make it easier for us to give you a better user experience on our online channels. To use or store cookie types that are not required for the functioning of the website or app and are optional, we will obtain your consent first.

For this reason, we limit our use of cookies to:

  • providing products and services that you request;
  • delivering advertising through marketing communications;
  • providing you with a better online experience and tracking website performance; and
  • helping us make our website more relevant to you.

Communicating with us:

In case of any questions, you can contact us via the email INFO@FABCAPITAL.COM, and social media or through our website and mobile app.

Alternatively, you can reach us through any of our branches listed below:

FAB-KSA (Riyadh Head Office)
First Capital, 7702 King Fahad Road
Riyadh 13524 - 4204, Al Malqa District
Kingdom of Saudi Arabia

If you are unhappy with how we’ve handled your Personal Data, or have further questions on the processing of your Personal Data, our Privacy Notice, and privacy practices, please contact us through this form.

Data Subject Request Form (DSR)

Effective Date

This Privacy Notice was modified on 11/09/2024

Disclaimer

This Privacy Notice is not intended to, nor does it, create any contractual rights whatsoever or any other legal rights, nor does it create any obligations on us in respect of any other party or on behalf of any party. When you log in to third parties’ websites, you will not be subject to or under this Privacy Notice. Moreover, we are not responsible for their websites’ content and we do not represent third parties. Therefore, When you leave our website, we recommend you to review the privacy and security policy of each website you visit.