Ask us what we hold on you.
You have rights over your personal data, and using them is free. This page is how you use them — what you can ask for, who reads it, and how long we take.
What you can ask for
A copy of your data
Everything we hold about you, and confirmation that we processed it lawfully.
A correction
Fix anything inaccurate or incomplete — including adding a missing detail.
Erasure
Delete your data where there is no lawful reason left to keep it.
To object
Stop processing that relies on our legitimate interest, or any direct marketing.
To restrict
Pause processing while we check accuracy, or instead of deleting it.
Portability
Receive your data in a structured, machine-readable format, or have it sent on.
To withdraw consent
Where we relied on your consent, take it back at any time.
To pay nothing
No fee for any of the above. We may decline only a request that is clearly excessive or repetitive.
Who reads it
Cyber Security Specialist
We will check it is you
Before we release anything we confirm your identity. We are holding debt records — handing them to the wrong person would be the very harm this page exists to prevent. If what you send is not enough to be sure, we will come back and ask.
How long we take
3 working days
We acknowledge the request and tell you if we need anything else.
30 days
We answer in full. If a request is complex and needs longer, we tell you before the thirty days are up, and why.
If you are not satisfied
Come back to us first — say so in writing and it goes to a reviewer who was not involved. If you are still not satisfied, the Saudi Data and AI Authority (SDAIA) supervises personal data protection in the Kingdom and accepts complaints directly.
One thing this page is not
This is for your data. If your complaint is about how you were treated, or you think the amount is wrong, that is a different route and a faster one.
Raise a complaint