Hedge Structuring & Restructuring

Privacy Policy for Ehata Financial

In this policy, the pronouns ("we", "us", "our") refer to: Ehata Financial. We are committed to respecting and protecting your privacy. This Privacy Policy outlines how we collect, use, store, and disclose your personal data.

By providing your personal data to us, you consent to its collection, use, and disclosure in accordance with this Privacy Policy and any other arrangements applicable between us. We may update this policy from time to time in accordance with applicable laws and regulations, and we encourage you to periodically review our website to stay informed of the latest version. This policy may also be supplemented by additional privacy statements, terms, or notices provided to you.

"Personal Data" includes any information or opinions that allow for the reasonable identification of an individual (e.g., name, age, gender, postal code, and contact details). In the event of any conflict between this Privacy Policy and any specific privacy notice we issue, the terms of the specific notice shall prevail and take precedence.

1. Definitions and Terms

In this Privacy Policy, the terms defined below carry the meanings assigned to them:

• Applicable Data Protection Laws: Means and includes the privacy laws and regulations applicable to you and us, including, but not limited to, the Saudi Personal Data Protection Law (PDPL).
• Anonymized / De-identified Data: Bears the same meaning assigned to it in the Applicable Data Protection Laws.
• Contact Details: Means the contact information outlined in Section (14) below.
• Non-Personal Information: Means information that is not linked to a natural person and/or cannot be used to identify them.
• Personal Data Protection Law (PDPL): Means the Personal Data Protection Law in the Kingdom of Saudi Arabia issued by Royal Decree No. (M/19) dated 09/02/1443 AH, its amendments, and executive regulations.
• Personal Data / Personal Information: Bears the same meaning assigned to it in the Applicable Data Protection Laws.
• Services: Means the provision of our services via the Website or any other services (digital or non-digital), bearing the same meaning defined in the "Terms of Service".
• Website: Means our website (EhataFinancial.com.sa) or any landing page, application, platform, or other user interface we provide, including, but not limited to, surveys, correspondence, and marketing activities.
• Terms: Means the Terms of Service applicable to users and available via the Website.
• User (or "You"): Means you and/or any user of the Services, including any commercial entity you work for, are affiliated with, or contracted by, along with any employee, officer, agent, contractor, or consultant affiliated with that entity.
• Other Terms: Any terms defined in the "Terms of Service" and not defined herein bear the same meaning assigned to them in the Terms.

2. What Personal Data Do We Collect?

2.1 Collection Mechanism

We may collect your personal data when you use the Website, communicate with us, obtain Services, or interact with us in any manner.

2.2 Information You Voluntarily Provide to Us

We collect all information voluntarily provided by users while using the Website or requesting Services. This includes information collected or uploaded:

• During the browsing and usage process.
• While providing and benefiting from the Services.
• Through correspondence, inquiries, technical support requests, phone calls, and customer surveys.
• Any data entered or uploaded to the Website by any means.

This data includes, but is not limited to:

• Basic data (such as first name, last name, and the name of the company you represent).
• Contact information (such as email address and phone number).
• Demographic data (such as age and gender).
• Information related to the Services you use or inquire about.
• Geographical location.
• Any other personal information obtained through your use of the Website that allows for your identification.

2.3 Data We Collect Automatically

We automatically collect certain technical data transmitted to us from the computer, mobile device, or browser you use to access the Website (Automatic Data). This includes:

• The unique identifier associated with your device or browser (such as IP address).
• Device and browser characteristics, and Website activity statistics.
• Details of the Services we provided to you or that you inquired about, and the information necessary to provide them.
• The method by which you accessed the Website, and timestamps (date and time) of usage.

Note: We may work with third-party partners to apply technologies (including statistical modeling tools) that allow us to recognize and contact you across multiple devices. This Automatic Data is collected based on your consent granted to us when browsing or using the Website and accepting the Privacy Policy.

2.4 Non-Personal Information

When interacting with the Website, we may collect non-personal information. The restrictions and requirements set forth in this policy do not apply to this type of information. However, if we combine non-personal information with your personal data, we will treat the combined data as personal data as long as it can be used to identify you.

2.5 Aggregated Information

Personal Data does not include aggregated or anonymized information (which cannot be linked to a specific individual). We reserve the right to use this data for various business purposes, including the development and updating of Services.

2.6 "Do Not Track" Signals

Some browsers may transmit "Do Not Track" signals. Please note that our Services and Website are not currently configured to respond to these signals.

2.7 Data Accuracy and Validity

You bear sole and full responsibility for the accuracy and legality of the personal data you share with us. We have no prior knowledge of or control over the validity of this data, and we disclaim any responsibility for any consequences arising from its inaccuracy or illegality, while remaining committed to processing it in accordance with Applicable Data Protection Laws.

3. Why Do We Collect, Use, and Disclose Personal Data?

We collect, retain, and use your personal data for the following purposes:

• To enable you to access the Website and fully utilize the Services.
• To send service messages, technical support, administrative notices, security alerts, and requested updates.
• To address information security, privacy, and network operations issues, and to resolve technical malfunctions (Troubleshooting).
• To send marketing and promotional communications that may interest you (after obtaining your explicit consent), including special offers from our business partners.
• To administer rewards, surveys, contests, or other promotional activities managed by us or sponsored by our partners.
• To comply with our legal and regulatory obligations, investigate claims or violations of our policies, resolve disputes, and enforce our agreements with third parties.
• To prevent, investigate, and take necessary actions regarding fraudulent or illegal activities (actual or suspected) to protect the integrity of the Website.
• For administrative, operational, and internal corporate analytics purposes.

Explicit Commitment: Your data is never distributed, sold, or leased to third parties for commercial purposes, except to provide the Services you have requested, when we obtain your explicit permission, or when we are legally and regulatory bound to do so.

4. Analytics

We may use third-party web analytics services, such as Google Analytics, to help us analyze how visitors use the Website and to display advertisements on our behalf across the internet. We may enable Google Analytics advertising features such as behavior reporting, user segment analysis, and device reporting.

• To learn how Google uses data, please visit: Google Partner Policy.
• To opt-out of Google Analytics cookies, please visit: Google Ads Settings or use the browser opt-out add-on.

5. To Whom Do We Disclose Your Personal Data?

We may share your personal data for the purposes described in this policy with the following parties:

• Our employees, corporate entities, and subsidiaries within our corporate group.
• Third-party vendors, suppliers, and service providers (including website operators, server hosting, and technical support providers).
• Professional and legal advisors, agents, and distributors.
• Our current or prospective business partners.
• Any entity that acquires ownership of our assets or business (whether wholly or partially) as a result of a merger, acquisition, restructuring, or liquidation, including the negotiation and evaluation phases of such transactions.
• Any third party you explicitly authorize us to share your data with.
• Government, regulatory, and law enforcement agencies in the following cases:
  • If required or permitted by applicable laws and regulations in the Kingdom.
  • If we deem disclosure necessary to comply with a judicial request or legal process.
  • To protect our legal rights, property, or the safety of our employees, customers, and others.
  • To detect, prevent, and address fraud, security, and technical issues.

6. Website Use and Cookies

We may record information about your use of the Website (such as pages visited, date and time of visit, and the IP address associated with your device) for internal evaluation and performance development purposes, without using it to directly identify you.

We use Cookies and Web Beacons to track usage and save your preferences. These technologies allow us to recognize your device across different sessions to provide a personalized user experience.

If cookies contain data that allows for your identification, they will be treated as personal data and protected in accordance with this policy. You can refuse cookies via your browser settings, but this may affect your ability to fully use some of the Website's features.

7. Security Measures and Data Protection

We maintain your personal data in a secure electronic format and take all reasonable and appropriate physical, administrative, and technical measures, as well as personnel safeguards, to protect it against loss, misuse, interference, unauthorized access, suspension, or modification.

However, no security system on the internet is 100% immune. In the event of a security breach that compromises data under our control, we will take immediate necessary steps to investigate the incident and notify affected individuals and relevant regulatory authorities in accordance with the requirements of Applicable Data Protection Laws.

8. Processing and Transfer of Personal Data

Our Website and Services are hosted within the Kingdom of Saudi Arabia. The data we collect is transferred, processed, and stored on our secure servers located within the Kingdom.

Your acceptance of this Privacy Policy and submission of information constitutes your explicit consent to this internal transfer, processing, and storage.

We will not transfer your personal data to any organization or country outside the Kingdom unless adequate and legally compliant controls and safeguards are in place to ensure the security and protection of your data as stipulated by the PDPL.

9. Data Retention

As a general rule, we retain your personal data for as long as you are registered as an active user on the Website, and for a period not exceeding fourteen (14) months from the date of account closure or activity termination, or for the duration required by applicable laws and regulations in the Kingdom (whichever is longer), unless the user requests the destruction of the data prior to that in accordance with available legal provisions.

10. Exceptions

External Links: Our Website may contain links to websites operated by third parties. We are not responsible for the privacy practices, content, or security of those websites, and we strongly recommend that you independently read their respective privacy policies before interacting with them.

11-12. Your Legal Rights Regarding Your Personal Data

Under the Applicable Data Protection Laws in the Kingdom of Saudi Arabia (Personal Data Protection Law - PDPL), you have the right to exercise the following rights at no additional cost by submitting a written request via the contact methods specified in Section (14) below (we may require formal verification of your identity before fulfilling the request to ensure data security):

• Right to be Informed: You have the right to know the legal and legitimate justification for collecting your data, the categories of data we collect, the purposes of collection, and the entities we share it with (we reiterate that we never sell your personal data).
• Right of Access: You have the right to request a written or digital copy of your personal data held by us, inquire about whether we are processing it, and review processing records.
• Right to Erasure (Deletion): You have the right to request the deletion and destruction of your personal data when its purpose has been fulfilled, subject to certain legal exceptions (such as cases where we must retain data to comply with legal, regulatory, or judicial obligations).
• Right to Rectification and Update: You have the right to request the correction, amendment, and immediate update of any inaccurate, incomplete, or outdated data without delay.
• Right to Data Portability: You have the right to obtain your personal data in a digital, structured, and machine-readable format, or request its direct transfer to a third party and another service provider of your choosing, in accordance with regulatory controls.
• Right to Withdraw Consent: In cases where data processing relies on your explicit consent, you may withdraw this consent at any time, without affecting the lawfulness and legitimacy of the processing conducted based on the consent prior to its withdrawal.

13. Submitting Complaints

If you believe we have breached any Applicable Data Protection Laws, or if you wish to file a complaint regarding how we process your personal data, you may contact us using the contact information below. Please provide us with your full name, email address, and phone number, along with a clear and comprehensive description of the nature of the complaint. We will review the complaint and respond formally within the statutory period defined by applicable laws.

14. Contact Us

For more information about our Privacy Policy and practices, to exercise your legal rights, or to submit a complaint, you can contact us via the following methods:

• Email: legal@ehata.com.sa
• Phone Number: +966112255543

Website Terms and Conditions of Use

1. Acceptance of Terms and Conditions

• 1.1 This website, application, and/or any associated digital platform (collectively referred to as the "Website") are owned and operated by Ehata Financial Company (referred to as "we", "us", or the "Company").
• 1.2 Your access to and use of this website is governed by these terms of use (referred to as the "Terms and Conditions"). These Terms constitute a legally binding agreement between you and us. By browsing the website or utilizing any communication forms available herein, you acknowledge and agree to be bound by these Terms and our "Privacy Policy", which constitutes an integral part hereof.
• 1.3 We reserve the right, at our sole discretion, to amend, modify, or update the website, these Terms and Conditions, and/or the Privacy Policy at any time. Such amendments shall become effective immediately upon being posted on the website. Your continued browsing or use of the website following such updates constitutes your explicit acceptance of the amended Terms.

2. Definitions

• 2.1 Website: Means this website, application, or any digital platform provided by Ehata Financial Company.
• 2.2 Displayed Services: Means the services and solutions showcased on the website solely for introductory, promotional, and lead-generation purposes.
• 2.3 Contact Data / User Data: Means any information entered by the user into the website’s forms (including, but not limited to: name, email address, mobile number, company name, etc.).
• 2.4 website Content: Means all texts, designs, logos, and information available on the website, which are the exclusive property of the Company.

3. Terms of Use and Service Request Forms (Data Collection)

• 3.1 The website allows you to browse services and request communication or inquiries via electronic forms specifically designed to capture prospective client data.
• 3.2 By submitting these forms, you represent, warrant, and covenant that:
  • (a) You possess the full legal capacity to submit such data, or you are legally authorized and empowered to request services on behalf of your entity.
  • (b) All information and data provided by you (e.g., name, email address, mobile number) is accurate, current, true, and belongs to you personally or to the entity you legally represent.
  • (c) You grant your express consent to the Company to retain, store, and utilize this data to communicate with you (via phone calls, WhatsApp, or email) to respond to your inquiries, provide price quotations, or send marketing materials related to our services, in accordance with our "Privacy Policy".
• 3.3 The Company assumes no liability whatsoever for any errors or inaccuracies in the data you provide (such as entering an incorrect mobile number or email address). We reserve the right to reject or disregard any request that contains fictitious, fraudulent, or incomplete information.

4. Intellectual Property

• 4.1 The Company and its licensors are the sole and exclusive owners of all intellectual property rights in and to the website and all materials published thereon (including texts, designs, logos, graphics, and software). Your browsing of the website does not grant you any right, title, or interest in such intellectual property.
• 4.2 You are strictly prohibited from copying, reproducing, modifying, publishing, data mining, "screen scraping", or exploiting any part of the website’s content for your own commercial benefit or for the benefit of any third party without our prior express written consent.

5. Acceptable Use and Restrictions

• 5.1 When using the website and filling out communication forms, you must strictly comply with all applicable laws and regulations of the Kingdom of Saudi Arabia. You are expressly prohibited from:
  • (a) Submitting false or fictitious data, or impersonating any other individual or entity.
  • (b) Utilizing the website to transmit unsolicited communications (Spam), or any offensive, indecent, defamatory, or unlawful content.
  • (c) Attempting to disrupt, breach, or compromise the website's security, launch Denial-of-Service (DoS) attacks, or introduce viruses, malware, or malicious code.
  • (d) Employing any automated tools, robots, or spiders to harvest or scrape data from the website without authorization.

6. Disclaimer and Limitation of Liability

• 6.1 This website and its content are provided strictly on an "as is" and "as available" basis, solely for introductory and informational purposes regarding our services. Content published on the website does not constitute a binding contractual offer, nor does it constitute legal or financial advice. It is intended for general guidance only. The Company shall not be held liable for any direct, indirect, incidental, or consequential losses or damages arising out of your use of the website or your reliance on any information contained herein.

7. Third-Party Links

• 7.1 The website may contain links redirecting to external websites/platforms or social media accounts. These links are provided solely as a convenience to you. We exert no control over, and assume no responsibility for, the content or privacy policies of such external sites. Accessing any third-party links is entirely at your own risk.

8. Data Protection and Privacy

• 8.1 We are committed to protecting your personal data in strict compliance with the Personal Data Protection Law (PDPL) and applicable regulations in the Kingdom of Saudi Arabia. For comprehensive details regarding how we collect, store, process, and share your data, please review our "Privacy Policy" available on the website.

9. Governing Law and Dispute Resolution

• 9.1 These Terms and Conditions shall be governed by, construed, and enforced in accordance with the laws and regulations of the Kingdom of Saudi Arabia.
• 9.2 In the event of any dispute, controversy, or claim arising out of or relating to these Terms or the use of the website, the parties shall first attempt to resolve it amicably through discussions. Failing an amicable settlement, such dispute shall be subject to the exclusive jurisdiction of the competent courts in the Kingdom of Saudi Arabia (specifically the competent courts in the city of Riyadh).

10. Contact and Notices

10.1 If you have any inquiries regarding these Terms, or wish to amend or delete the contact data you have provided, you may contact us via:

Email: legal@ehata.com.sa

Address: Al Thumamah Rd, Al Rabi Triangles, 2nd Floor, Riyadh 13315