Updated on: 24 November 2025
Your Privacy Matters
Al Olou Financial Company (Rize Platform) is committed to protecting your personal data and ensuring its security. We adhere to the Personal Data Protection Law (PDPL) issued in the Kingdom of Saudi Arabia and its executive regulations. This policy aims to explain how your personal data is collected, processed, used, stored, and destroyed, as well as to outline your rights and how to exercise them
Accessing or using Rize Platform services constitutes your consent to this Privacy Policy and any updates made to it from time to time. This Privacy Policy is an integral part of the Platform’s Terms and Conditions.
1. What personal data do we collect?
Rize Platform ensures that the personal data collected and processed is limited to the minimum necessary to perform its functions and provide its services. Examples of collected personal data include, but are not limited to:
- Personal identification data: such as full name, date of birth, National ID or Iqama number, gender, and other personal identifiers.
- Contact details: mobile phone number, email address, and national address.
- Income and employment information: such as full salary, employer, work experience, and employment status.
- Credit information: including credit data to assess user eligibility for our services and products.
- Financial data: bank account numbers, credit cards, etc.
- Commercial registration and licenses, ownership deeds.
- Cookies data: data collected via website logs, cookie technologies, including your IP address used to connect your device to the Internet.
The data subject is responsible for the completeness and accuracy of all data shared through the Platform and for maintaining the confidentiality of their password and account information.
2. How do we collect your personal data?
Personal data is collected through multiple direct and indirect methods, including the following:
2.1 Direct methods
You may provide identity, contact, financial, and other information when performing any of the following actions:
- Creating or updating an account on Rize Platform.
- Submitting a service request via Rize Platform.
- Using Rize Platform services.
- Communicating with us through phone calls, chat, emails, digital forms, or social media platforms.
All data you provide voluntarily is part of the information processed in accordance with this Privacy Policy.
2.2 Indirect methods
We may collect data about you through third parties or data collection technologies, including:
- Third-party service providers, governmental authorities, or credit information entities, such as the Saudi Credit Bureau (SIMAH).
- Cookies, web beacons, and other tracking tools used on our websites or applications.
3. What are your rights regarding your personal data?
Under the PDPL, you are entitled to exercise the following rights:
- Right to be informed: to be informed of the legal basis for collecting your personal data and all details related to its processing.
- Right to access personal data: to request access to your personal data and receive a clear, readable copy—where technically feasible—in accordance with applicable regulations.
- Right to rectify personal data: to request correction or updating of inaccurate, incomplete, or incorrect personal data.
- Right to request erasure of personal data: to request deletion of personal data when it is no longer necessary, unless a legal basis exists for retention as stipulated in Article 18 of the PDPL.
- Right to withdraw consent: to withdraw your consent for data processing, unless legitimate interests or legal obligations require otherwise.
- Requesting your rights and filing complaints؛ You can submit a request to exercise your rights or file a complaint if you are unable to exercise your rights, or if you notice any violation of the law, via email: dpo@rize.sa, we will respond within a maximum of thirty (30) business days from receipt.
4. Retention period of your personal data
Your personal data will be stored as long as necessary to achieve the purpose for which it was collected, unless a longer retention period is required to comply with a law, legal obligation, or regulatory requirement applicable to the Company.
5. How we store your personal data
- When storing data, Rize Platform takes all necessary steps to protect your personal data from misuse, loss, unauthorized access, alteration, or disclosure. Personal data is archived in a secure environment, applying the best practices and security standards to ensure data protection.
- Data is retained only for the necessary period until the purpose of processing is completed, after which it is securely destroyed so that it cannot be accessed or restored, in compliance with Article 18 of the PDPL.
6. Purpose of collecting personal data
- To allow you to access Rize Platform services and perform transactions.
- To understand your usage of the site and services, ensuring the platform meets user needs.
- To improve user services.
- To send alerts, messages, and notifications to platform users via SMS, email, or app notifications.
- Automatic login to Rize Platform.
- Monitor website usage to identify threats.
- Create statistics, research, and reports about services provided by the Platform.
7. How we use your personal data
We process personal data based on the following legal bases:
- Consent: when you provide explicit consent for processing for specific purposes, represented by your consent to this Privacy Policy.
- Contracts: when processing is necessary to execute a contract to which you are a party.
- Legal obligation: when processing is necessary to comply with a legal requirement.
- Legitimate interests: when necessary for our legitimate interests (or those of a third party) without conflicting with your interests.
8. Sharing your personal data
When necessary, we may share your personal data with:
- Our investors and service partners.
- Relevant tax and regulatory authorities.
- Judicial authorities, courts, and/or other third parties related to legal proceedings.
- Public authorities for security purposes.
- For credit verification, similar checks, or other purposes necessary to provide our services.
9. Cookies
The Company uses cookies to distinguish you from other users. This helps us provide a better experience when visiting our site and develop the website. By continuing to browse the site, you consent to Rize Platform’s use of cookies. You can block cookies through your browser settings, but blocking all cookies may limit access to some or all parts of the site.
10. External links
The website may contain links to other websites for user convenience. Those websites may have separate privacy policies. Rize Platform is not responsible for the content of these websites or for any issues arising from their use. Users are responsible for their actions while using any external websites accessed through links on this site.
11. Privacy Policy Updates
Users acknowledge that Rize Platform has the full right to modify or update this Privacy Policy at any time. Users are responsible for reviewing policies before using any services. Continuing to use the Platform after an update constitutes explicit consent to the revised Privacy Policy.
Cookies and Privacy
This website uses cookies to ensure ease of use and to improve your browsing experience. By continuing to use this website, you agree to the use of cookies and our Privacy Policy and Terms & Conditions.
