Skip Ribbon Commands
Skip to main content

Privacy Notice

SIMAH, Saudi Credit Bureau (hereafter referred to as "we" or “our” or "us" or “organization” or “organization”) respects your right to data privacy. In this Notice “You” or “Your” refers to data subject whose personal data is processed by SIMAH.

This Privacy Notice (“Notice”) provides information about how SIMAH handles personal information about you and describes the rights you may have regarding your personal information. This Notice applies to SIMAH and its online and offline collection, use and disclosure of personal information.

SIMAH has an obligation to preserve the confidentiality and privacy of the user's data and information.

SIMAH shall not collect, process or disclose any personal data or information except in accordance with the specific controls provided in the Credit Information Law and its Implementing Regulations, the Electronic Transactions Law, the Anti-Cyber Crime Law, the Code of Conducts approved by the Saudi Central Bank (SAMA), instructions and controls issued by the National Cybersecurity Authority from time to time, instructions governing the confidentiality of information issued by the regulatory authorities in the Kingdom, including all amendments applicable to them from time to time.


  1. When does SIMAH Collect Personal Information about You
    This information is collected when you utilize our services through online and offline channels including the conditions when your personal information is shared by members with SIMAH.
  2. What Types of Personal Information does SIMAH Collect and Retain
    • When you interact with us we may collect information to help identify and contact you, including, but not limited to, your name, email address, physical address, telephone number (landline and/or mobile), and ID Number.
    • If you create an account, we will collect your username, password, date of birth, National Identification information to provide you our services.
    • We also collect information about the device you use to access our online services. This includes device ID, advertising ID, your browser, while using our online services.
    • We collect your IP address and information related to that IP address, such as, geographical information, domain information.
    • As a Saudi Credit Bureau, we collect different types of personal information about you from various sources. The below table chart describes the categories of personal information we may have collected through different sources
  3. Personal Information We Collect And From Whom We Collect It

    1. What We Collect
      • Name (first, last, and/or maiden name)
      • Demographic Information (age, gender and nationality)
      • National address; email address (es); telephone number(s).
      • Date of birth, Employment information and credit card information.
      • Date of birth, Employment information and credit card information.
      • Information collected via cookies.
      • Financial and Credit information of Consumers.
      • Professional Employment details (Employment Dates, Employer Name, Employer Information)
      • Audio and electronic recording, for example, when you call in with a question to customer service.
      • Video recording for service delivery purposes.
    2. From Whom We Collect It:
      • Information you provide
      • Member organizations (Banks, Lending organizations, Insurance providers, Telecommunication companies etc.)

  4. Purpose for Collecting & Processing Personal Information.

    We collect your personal information for different purposes as mentioned below:

    • To provide SIMAH services related to credit reporting inquiries, dispute and/or complaints.
    • to update our consumer credit records;
    • to verify your identity;
    • to prevent fraud and unauthorized disclosures of your personal information;
    • To record and demonstrate how we have conducted the dispute and complaint resolution process and arrived at a resolution.
    • To comply with business, legal and regulatory requirements incumbent upon SIMAH.
    • For product development and research, and for any purpose subject to the limitations set forth in this Notice and applicable laws incumbent upon SIMAH.
    • For fulfillment of your requests, transactional and other communications about our websites and the online services.
  5. How Long Does SIMAH Keep Personal and Credit Information?

    We will keep your information for as long as we need it for the business, legal and regulatory purposes it is being processed for.

    We will actively review the information we hold and delete it securely, when there is no longer a legal, business or regulatory need for it to be retained.

  6. With whom does SIMAH share Your Personal Information?

    SIMAH shares your personal information with different member organizations to whom you consent to disclosing your personal data. Prior to sharing personal data with these member organizations, we review the services performed by such member organizations and require that the member organizations to keep personal data confidential and secure and not use it for any purpose except performing the services.

    Disclosure for Legal reasons: We may share personal data to third parties to comply with valid legal requirements such as a Saudi law, regulations, search warrant, subpoena, court order, or other legal process.

    Consumer Credit Reporting: Our member organizations collect, use, and process personal data in accordance with Saudi Arabia's Credit Information Law. This collection of personal data is done to determine your creditworthiness, credit standing, credit capacity and this information is shared with credit providers and other entities when they make decisions to extend credit or enter into transactions with you, assist lenders and other creditors.

    Commercial Credit Reporting: Our member organizations collect, use, and process personal data as part of our commercial credit reporting services. These services permit them to make informed decisions regarding providing credit to or investing in businesses. Commercial credit reports may contain the names and other personal data of owners, principals, guarantors, or agents of the businesses.

  7. Will We Inform You Of Changes To This Privacy Notice?

    If we change this Privacy Notice, we will let you know about the changes by publishing the updated version at all applicable communication channels. SIMAH is committed to protecting and respecting your privacy.

    Under the Saudi Arabia's Personal Data Protection Law, the owners of personal data are entitled to the below rights. However the rights to the data subject shall be disbursed in accordance with the regulatory and legal obligations incumbent upon SIMAH.

    1. Right to request information on the processing activities carried out with their personal data.
    2. Right to request access to their personal data.
    3. Right to request correction, updating or completion of their personal data.
    4. Right to request erasure of personal data in specific cases.
    5. Right to withdraw consent in specific cases.

    For any queries and complaints, you can send email to or call us at 8003010046.


    If you believe any information on your personal credit report is inaccurate or incomplete you can raise a dispute case and tell us specifically why you think it’s inaccurate or incomplete

    Log through your personal account in SIMAH website under Dispute, make sure that you read dispute instruction and tips, fill all needed field and attach supporting documents then submit your dispute.​​