Introduction
At Shurfat we believe your privacy is a fundamental right. We meet the highest data-protection standards under the Saudi Personal Data Protection Law (PDPL) and its implementing regulations.
Data we collect
Registration data
- Full name
- National ID
- Phone & email
- Date of birth
- National address
Financial data
- Bank account details
- Deposit & withdrawal history
- Investments & returns history
Browsing data
- IP address
- Browser & device
- Pages visited and times
How we use data
We use your data only for the following purposes:
- Executing investments and managing your account.
- Verifying your identity and AML compliance.
- Transferring profits and returns to your bank account.
- Sending important notifications about your investments.
- Improving user experience and developing new services.
- Responding to your inquiries and requests.
Data security
We apply strict technical and organisational measures to protect your data:
- SSL/TLS encryption for all connections.
- Encryption of sensitive databases.
- Mandatory two-factor authentication for sensitive operations.
- Regular independent security audits.
- Regular, encrypted backups.
Your rights
Under the Personal Data Protection Law, you have the following rights:
Data retention
We retain your data only for the periods needed for service and regulatory compliance. See the table in "Data we collect" for detailed periods.
After the retention period, we securely delete the data or anonymise it.
Minors’ privacy
If you become aware that a minor has created an account, please notify us immediately and we will delete the account and its data.
Policy updates
We may update this policy from time to time. You will be notified of material changes by email and in-platform notice 30 days before they take effect.
Privacy contact
The Shurfat Data Protection Officer is available to answer your queries:
- Email: [email protected]
- Phone: +966 92 000 0000 ext 2
- Hours: Sun - Thu, 8am - 5pm
