Privacy Policy

Definitions

App / Platform: The BNC investment electronic channels, including the web portal, mobile application, and any associated digital interfaces through which BNC provides investment and financial services.
Personal Data: Any information relating to an identifiable individual, including but not limited to identification, contact, financial, or transactional information.
Access Code: A unique personal identification element (e.g., password, passcode, PIN) used to access the BNC App.
Client / Investor: Any user registering, accessing, or transacting through the BNC App.
Authorized Person: Any individual authorized by the Client to act or communicate on their behalf.
Data Controller: Bayt Alnomow Capital, responsible for determining the purposes and means of processing your personal data.

Purpose of This Policy

Enim, lacus, sed interdum tellus ullamcorper adipiscing. Aliquam est rhoncus a leo risus sit nulla facilisi. Nulla cursus tortor velit vitae molestie magnis quis. Velit elit augue nulla etiam. Dui dui augue egestas convallis eleifend neque, amet lacus. Condimentum sapien ut neque, sit. Dui pellentesque nec sed at eu sit sodales commodo, euismod. Pretium purus elit mattis duis. Vitae sit nunc amet nunc. Scelerisque morbi malesuada libero at massa ac. Nisi et, et pellentesque at arcu. Congue orci cras mauris mauris sed etiam. Vulputate morbi hac est est ut volutpat. Rhoncus habitant scelerisque vulputate rhoncus. Arcu neque, est, ut mauris pulvinar elementum.

How long do we keep your information?

This Privacy Policy aims to ensure:

• Transparent and fair treatment of your personal information.
• Safe access to BNC’s digital investment services and products.
• Your awareness of how data is collected, used, stored, updated, and deleted.
• Compliance with PDPL, CMA, and SAMA regulatory requirements for financial institutions.

How We Collect Your Data

We may collect your personal data through various methods, including account registration, transaction records, customer support calls (which may be recorded), site analytics, cookies, social media interactions, surveys, KYC/AML documentation, and CCTV for visitors at BNC premises.

Types of Personal Data Collected

Identification details (name, ID/Iqama, nationality).
Contact details (mobile number, email, address).
Financial and transactional data (bank accounts, investment records, income).
Device and digital identifiers (IP address, browser type, cookies).
Geolocation data (if enabled through your device).
Communication and correspondence records.

Purpose of Processing

We process your personal data to register and manage your investment account, verify identity, execute transactions, provide support, send notifications, improve user experience, and comply with legal and regulatory obligations.

Legal Basis for Processing

Processing is performed on one or more lawful bases:
- Your explicit consent.
- Performance of a contract between you and BNC.
- Compliance with legal and regulatory requirements.
- Legitimate business interests, provided they do not override your rights.

Use of Cookies and Digital Tools

We use cookies and similar technologies to analyze usage trends and enhance your experience. Cookies store limited data, such as session preferences, but do not personally identify you. You can disable cookies in your browser settings; however, some features may not function properly.

Disclosure of Personal Data

BNC will not share your personal information with third parties except as permitted by law or with your consent. Disclosure may occur to regulators and authorities, financial institutions, third-party service providers, professional advisers, and law enforcement upon valid requests.

Data Storage, Retention, and Location

All data is securely stored within the Kingdom of Saudi Arabia. Retention follows legal and regulatory requirements; data is kept only as long as necessary for service provision, compliance, or legal defense. Once no longer required, data will be securely deleted or anonymized.

Security Measures

BNC employs comprehensive technical, administrative, and physical safeguards to protect your data, including encryption, role-based access control, secure servers, continuous monitoring, and staff confidentiality agreements. However, data transmitted over the Internet carries inherent risks.

Client Responsibilities and Internet Risks

To enhance your personal data security:
- Keep your access codes and passwords confidential.
- Avoid using public or unsecured devices for financial transactions.
- Update antivirus software and browsers regularly.
- Immediately report any suspected data breach or unauthorized access to BNC Support.

Your Data Protection Rights

Under the PDPL, you have the following rights: Access, Correction, Deletion, Withdrawal of Consent, Portability, and Objection. Requests should be sent to support@bnc-ksa.com. BNC may require identity verification before processing any request.

Complaints and Resolution

If you believe your privacy rights have been violated, contact our Data Protection Officer (DPO) at support@bnc-ksa.com. We aim to resolve all complaints within three (3) business days. If unresolved, you may escalate to the Saudi Data and Artificial Intelligence Authority (SDAIA).

Disclaimers

Accessing or using BNC’s App constitutes consent to this Privacy Policy. BNC is not liable for damages resulting from unauthorized access, transmission errors, or malware on user devices. Links to external websites are provided for convenience; BNC is not responsible for their privacy practices.

Policy Updates

BNC reviews and updates this Privacy Policy periodically. Updates are effective immediately upon publication in the App or on our website. Continued use constitutes acceptance of the revised terms.

Contact and Data Protection Officer

Bayt Alnomow Capital (BNC)
Olaya Road - Olaya District Building No. 6217, second floor
Office No. 201 & 205  Riyadh, Saudi Arabia
Tel: +966 0112696825
Mob: +966 542973713
Email: support@bnc-ksa.com

Governing Law

This Privacy Policy and all related matters are governed by the laws and regulations of the Kingdom of Saudi Arabia. All disputes shall fall under the exclusive jurisdiction of the competent Saudi courts and regulators.