• Use of cookies

Log Files: Log information is data about your use of the service, such as IP (Internet Protocol) address, browser type, referring/exit pages, operating system, date/time stamps, and related data, which is stored in log files.

Cookies: To improve Mora’s customer experience, Mora’s websites use a standard technology called “cookies” to collect information about how Mora’s websites are used, which may include your data. The use of cookies is essential for the operation of Mora’s websites.

Cookies may be used for many purposes, including to enable certain features of Mora’s service and remember your preferences, your equipment, browsing actions, and patterns, to understand better how you interact with Mora’s service, to provide you advertising on and off the service, and to monitor usage by visitors and online traffic routing. You may be able to instruct your browser, by changing its options, to stop accepting cookies or to prompt you before accepting a cookie from the online services you visit. If you do not accept cookies, however, you may not be able to use all portions of Mora’s service or all functionality of Mora’s service.

Third parties or publicly available sources

Mora collects personal data from trusted third parties – as mentioned below: 

• Governmental third parties, e.g. Elm. Yakeen. NFATH and SIMH. 
• Analytics providers such as Google and Facebook.
• Social media platforms such as Facebook, Twitter, Instagram or LinkedIn

What Personal Data do Mora collect?

All data required for the execution and fulfillment of contracts, including but not limited to full name, ID number or residence number, place of residence, workplace, financial and credit information.

• When using the Mora app, creating an account, applying for products, or contacting us, we reserve the right to collect a range of data and information, including the following:
• Account information: Email address, registered devices, account status, and age.
• Device information: Data that can identify your device, such as the device’s serial number or information about your device.
• Contact information: Data such as name, email address, physical address, phone number, or other contact details.
• Payment information: Data related to billing address and payment methods.
• Fraud prevention information: Data used to help detect and prevent fraud.
• Location information: Your current location only.
• Financial information: Details including salary and income information.
• Government identity data: Legally, we are required to collect your national ID information.
• Other information you provide to us: Interactions with customer support and contact through social media channels.
• Data related to your products and transactions with us: Such as account activity and product usage.

How and why does Mora use your Personal Data?

There are many contact points that help us collect your data. Below are a few examples:

• During onboarding and service utilization – When you use Mora’s services, become a customer, and benefit from Mora’s products.
• Information exchange – When you complete and upload a form to Mora’s website, mobile apps, email, or social media posts, call the customer center, or participate in promotional campaigns.
• Interaction (social media) – Any posts, messages, or interactions you carry out with us directly on Mora’s social media channels.
• Browsing patterns – Data on how you explore Mora’s website, the timing of your visits, the types of internet browsers you use, and how you were referred to Mora’s website.
• Surveys – Online web surveys that enable us to gather feedback on topics, such as what you like and dislike about the look of Mora’s website and mobile apps. Your valuable feedback enables us to improve the quality of the experience Mora provided to you.
• You personally or your authorized agent or legal representative.
• In legally accepted cases, from third parties and public sources. This includes government entities and credit information companies and agencies.

Mora may also use your Personal Data in the following situations, which are likely to be rare:

• Where Mora needs to protect your interests (or someone else’s interests);
• Where it is needed in the public interest or for official purposes, and legal purposes.

Legal Basis and Purposes for the Collection and Use of Your Personal Data

Mora’s purpose for collecting data is to execute and fulfill contracts licensed by the Saudi Central Bank. This includes purposes such as evaluating your application or carrying out your instructions, or otherwise as specified in these terms, or as notified to you in any terms, agreements, or other notices (whether in written, verbal, or electronic form) provided to you. For example, but not limited to:

• Complying with any obligations and requirements issued by legal and regulatory authorities within the Kingdom of Saudi Arabia.
• Providing products or services.
• Protecting you against fraud by conducting identity, credit, and conflict checks.
• Improving Mora’s products, services, and your experience across Mora’s channels.
• Understanding your needs as a customer and your eligibility for products and services.

Mora’ may use your personal data to promote new investments and financial products and services that may interest you; however, Mora will request your explicit consent before such promotions.

Mora may also use your Personal Data for other purposes that are not incompatible with the purposes Mora have disclosed to you (such as archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes) if and where this is permitted by applicable laws.

Change of purpose

Mora will only use your Personal Data for the purposes for which Mora collected it unless Mora reasonably considers that Mora needs to use it for another reason, and that reason is compatible with the original purpose. 

Disclosure of Your Personal Data 

• If the owner of the personal data consents to the disclosure in accordance with the provisions of the law.
• If the personal data was collected from a publicly available source.
• If the entity requesting the disclosure is a public authority, for security purposes, to enforce another law, or to fulfill judicial requirements in accordance with the provisions set by the regulations.
• If the disclosure is necessary to protect public health or safety, or to protect the life or health of an individual or specific individual. The regulations outline the controls and procedures related to this.
• If the disclosure is limited to subsequent processing in a way that does not lead to the identification of the personal data owner or any other individual specifically. The regulations outline the controls and procedures related to this.
• Disclosure may be made to a licensed debt collection agency or a credit information service provider or insurance company.
• Disclosure may be made to an affiliate or any related service provider for the purpose of providing you with products or services, improving Mora’s products and services, enhancing your experience across Mora’s various channels, and promoting new financial investment products and services that may interest you.

How does Mora protect your Personal Data?

 Mora ensures that your data is appropriately protected using the physical, technical, administrative, and procedural security measures and precautions required to prevent unauthorized access to or collection, use, disclosure, copying, modification, or disposal of your data.

 Mora protects your data in a manner consistent with the relevant data protection laws and regulations applicable in the Kingdom of Saudi Arabia. However, you should note that the Internet is not completely secure.

Means of Preservation

All data is stored in a digital database by applying security procedures, policies, and measures, where all the information you provide to us is stored on our secure servers behind firewalls in accordance with the relevant regulations.

How is Data Processed?

Data is processed according to the available methods to fulfill the purpose of data collection. For example, decisions may be made entirely based on the automated processing of personal data.

Storage of Your Personal Data

 Your personal data will be:

• Retained for as long as necessary to fulfil the purpose for which it was collected.
• Retained to meet any legal, regulatory and legislative requirements

How to Destroy Data

Data is destroyed in accordance with the provisions of the relevant regulations.

Rights of the Data Owner 

The data owner has rights as determined by the relevant regulations, including the right to modify data, file a complaint, and request data destruction, all in accordance with the provisions of the relevant regulations.

What are your data protection rights?

You must inform us of changes

It is important that the Personal Data Mora holds about you is accurate and current. Please keep us informed if your Personal Data changes and by sharing your updated details with Mora’s Data Protection Officer (DPO) at  on dataoffice@ijarah.sa 

Your Rights Under PDPL

 Personal Data Protection Law (“PDPL”) provides certain rights in relation to your personal data.

• Right to be Informed: Data Subjects have the right to be informed about the legal basis and the purpose of the collection of their personal data.
• Right to Access: The right to access the Personal Data held by Mora.
• Right to Obtain Data in Readable Format: Data Subjects have the right to request obtaining their Personal Data held by Mora in a readable and clear format.
• Right to Data Deletion: Data Subjects have the right to request the destruction of their Personal Data held by Mora when such Personal Data is no longer needed.
• Right to Timely Responses: Mora is obliged to respond to Data Subject requests pertaining to their rights within specified timeframes and using specified methods.
• Right to Rectify Data: Data Subjects have the right to request the correction, completion, or updating of their Personal Data held by Mora. 
• Right to Withdraw Consent: Data Subjects have the right to withdraw their consent for processing their Personal Data at any time, given that it shouldn’t affect processing on a legal basis.
• Right to Complaint: On becoming aware of any privacy incident, the Data Subject may also complain to the competent authority within a period of 90 days from the date of such incident, providing the following information:

• Place and time of the violation.
• Name, identification, address, and telephone number of the complainant.
• Information about the complained entity.
• Clear and specific description of the violation.

Time limit to respond

 Mora tries to respond to all legitimate requests within 30 days. Occasionally, it may take us longer than a month if your request is particularly complex or you have made a few requests. In this case, Mora will notify you and keep you updated.

If you wish to exercise any of the rights set out above, please contact us at dataoffice@ijarah.sa

Licensing of Required Mobile Application Privacy Permissions and Their Purpose

Permissions for various mobile privacy features are requested to improve the quality of use, including:

Location – To obtain an accurate location by relying on the global positioning service provider and the telecommunications network provider.

Internet – To access the internet and verify the SSL certificate.

Send SMS – To verify the user’s mobile phone number.

External Storage – The application requests this permission to allow adding the user’s photo to their profile in the application.

Camera – To take a picture to be used in the client’s profile.

Phone Status – To know the serial number of the user’s mobile SIM card and allow sending SMS through SMS service providers.

Fingerprint / Face Recognition – For fingerprint verification when logging into the application.

Phone Call – To make a phone call.

Sharing your Personal Data 

In compliance with the requirements of the Personal Data Protection Law (PDPL) Mora Finance may disclose your Personal Data to third parties in the following scenarios:

1. Where we have your explicit Consent e.g. SIMAH
2. Where your personal data in scope is already in public domain and has been collected from a publicly available source.
3. When needed for security purposes, compliance with another law, or the execution of a court order e.g. sharing with tax authorities, fulfilling judicial requirements.
4. When needed for Public Health, Public Safety, Protecting Individual(s) Lives/Health.
5. If the shared data is completely de-identified and it’s impossible to identify any individual, either directly or indirectly
6. Sharing with a debt collection agency, credit bureau or insurance business to protect the interests of Mora Finance and to prevent instances of fraud or any other illegal practices.

What Mora may need from you?

Mora may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it.

Mora may also contact you to ask you for further information in relation to your request to speed up Mora’s response.

• Indemnity and Limitation of Liability

You agree to defend, indemnify, and hold harmless MORA, its officers, directors, and employees from and against any and all claims, liabilities, damages, losses, or expenses, including settlement amounts and reasonable legal fees and costs, arising out of or in any way connected with your access to or use of this site.

Although the organization shall make every attempt to keep the website free from viruses, it cannot guarantee that it is virus/ malware free. For your own protection, you should take necessary steps to implement appropriate security measures and utilize a virus scanner before downloading any information from the website.

MORA, its officers, directors and employees, shall not be liable in any manner whatsoever for any direct, indirect, incidental, consequential, or punitive damage resulting from the use of, access of, or inability to use the information available on the website or the services provided by the organization. MORA, its officers, directors and employees shall not be liable in any way for possible errors or omissions in the contents in the website.

• Intellectual Property Rights

All information on this website is protected by copyright and other intellectual property rights. No images, text or other content from this website may be distributed or reproduced without prior written approval from the organization.

Changes to the Privacy Notice

Mora Finance reserves the right to amend this Privacy Notice at any time. The effective date of the Privacy Notice, as stated below, indicates the most recent date on which this Privacy Notice was reviewed or modified. Checking the access date below allows you to determine whether there have been changes since the last time you viewed the Privacy Notice. Therefore, Mora advises you to periodically check this Privacy Notice to ensure that you are aware of the most updated version.

This Notice was amended in August 2024.

Contact Us

If you have any questions or concerns about privacy violations, you can contact us through any of Mora’s branches or by email, social media, or through Mora’s website and mobile app.

Disclaimer

This Privacy Notice is not intended to create any contractual rights of any kind or any other legal rights or to create any obligations for us toward any other party or on behalf of any party. When you log in to any third-party website, this Privacy Notice will cease to apply. In addition, we are not responsible for the content of third-party websites and do not represent any third party. Therefore, Mora recommend that you review the Privacy and Security Policy for each link you log in to.