Notice Data Protection and Privacy

Introduction

DERAYA Insurance Brokers Company is committed to protecting your privacy and the security of your personal data. We are dedicated to processing your data in a lawful, secure, and transparent manner, in accordance with the highest industry standards and applicable data protection laws in the Kingdom of Saudi Arabia.
This notice aims to explain how we collect, use, and protect your personal information. In this privacy notice, we will provide you with information about the processing of your personal data and your rights as a data subject in the context of the steps DERAYA has taken to process your request. Please read the following carefully to understand our views and practices regarding your personal data and how we will handle it.

Information We Collect

We collect various types of personal data about you, including:

  • Contact Information: Name, address, phone number, email.
  • Identity Information: National ID number, date of birth, nationality. For individuals. CR details for Corporate
  • Insurance Information: Information about current and previous insurance policies, claims, beneficiaries.
  • Payment Information: Payment information, including credit card details.
  • Other Information: We may collect other data when you interact with us, such as information you provide when submitting a request or inquiry.

Reasons for Data Collection

We collect your personal data for the following purposes:

  • Providing Insurance Services: To assess insurance applications, support with issuing insurance policies from insurance companies, and claims processing.
  • Communicating with You: To respond to your inquiries, provide support, and send important notifications.
  • Marketing: To inform you about new products and services that may interest you, with your prior consent.
  • Improving Our Services: To analyze data to understand our customers’ needs and improve the quality of our services.

How We Use Data

We use your personal data only for the purposes for which it was collected. We may share your data with insurance companies we deal with to provide the requested services, but we ensure that these companies adhere to data protection standards.

  • Service providers who provide information technology systems, payment systems, and customer management systems that will process your data in accordance with the terms of our data processing agreements as concluded with them.
  • Insurance companies.
  • Competent authorities and regulatory/supervisory bodies.

Data Protection

We are committed to implementing strict security measures to protect your personal data from unauthorized access, disclosure, loss, alteration, or destruction. These measures include:

  • Cybersecurity: Using the latest technologies to protect personal data.
  • Encryption: Using encryption technologies to protect your sensitive data.
  • Firewalls: Using firewalls to prevent unauthorized access to our systems.
  • Verification Procedures: Verifying user identities before granting them access to data.
  • Employee Training: Training employees on the importance of data protection and following best practices.

Your Rights

You have the right to:

  • Access Your Data: You can request a copy of the data we hold about you.
  • Correct Data: You can request the correction of any inaccurate or incomplete data.
  • Delete Data: You have the right to request the destruction of data collected about you. Reasons can range from the user withdrawing their consent for data collection to the data no longer serving the purpose for which it was collected.
  • Object: You have the right to limit or refuse the processing of your personal data by DERAYA for specific cases and for a limited period. This right is not explicitly stipulated under the Personal Data Protection Law; however, the regulatory authority has issued a set of FAQs that provide details about this right.
  • Contact Us: If you have any questions or concerns about this notice or our data privacy practices, you can contact us via info@derayaksa.com. 

Privacy Notice Update

The effective date of this notice is 01/08/2024, Any updates or changes to this notice will be posted on this website with a statement of the new revision date, which is the effective date of the changes. Your continued use of this website constitutes your acceptance of any changes to this notice.