Loop Company is a digital payments company in the Kingdom of Saudi Arabia, committed to providing secure and innovative payment solutions to its customers.
By accessing or using Loop’s services, you acknowledge and agree to the practices described in this Privacy Notice.
If you have any inquiries or need further information regarding our privacy practices, you may contact us using the details below.
________________________________________
Contact Details
Department/Team:
Cybersecurity Department
Address:
7071 Al Thumamah, Al Rabee District – Unit No. 7071, Riyadh 3672 – 13315
Phone Number:
8001222228
Email:
dataprotection@loop.sa
Commercial Registration or License:
7002793649
Last Updated:
The Privacy Policy was updated on 01/04/2026
________________________________________
1. What is the purpose of this Privacy Notice?
This Privacy Notice aims to inform you how Loop Company, as the controller of your personal data, collects, manages, protects, and processes your data.
This notice applies to personal data collected through various service interactions, whether online or through in-person dealings. It covers data related to customers, business partners, and third-party suppliers. This policy applies to you whether you use Loop’s e-wallet services as a consumer or a merchant, and also applies to any authorized person who accesses and manages a merchant wallet account and related services within Loop’s electronic payment platform.
This notice complies with the regulations set forth in the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia, issued by Royal Decree No. (M/19) dated 16/09/2021 and amended by Royal Decree No. (M/148) dated 27/03/2023.
________________________________________
2. Who is the controller of your personal data?
Loop Company is the legal entity responsible for collecting, using, and protecting your personal data. As the data controller, the company determines the purposes and means of processing your personal data.
________________________________________
3. What personal data do we collect about you?
Personal data is collected when you download the application, create an account, submit forms, enter information into designated fields, upload documents, or contact us.
A. From Customers:
• Personal Information:
Full name, date of birth, nationality, email address, phone number.
• Financial Information:
IBAN numbers, bank account details, wallet balance, and payment information such as billing records and transaction history.
• Transaction Details:
Payment information and transaction records.
• Location Data:
Geographic locations collected for payment processing and fraud prevention.
• Online Interaction Data:
Browsing history, preferences, and interactions with our digital platforms.
• Device Information:
Types and specifications of devices used to access our services.
• Survey Responses and Feedback:
Customer responses and feedback provided through surveys and feedback mechanisms.
• Security Information:
CCTV recordings to ensure the safety and security of our premises and customers within company facilities.
• Customer Service Interaction Records:
Details of interactions with customer service, including email correspondence and calls.
• Social Media Interactions:
Data related to your interactions with our social media channels.
B. From Suppliers, Contractors, and Third Parties:
• Professional Information:
Job titles, roles within the organization, and professional qualifications.
• Financial Information:
Financial transaction details and banking data.
• Legal Data:
Contracts, compliance documents, and other legal information.
C. Methods of Data Collection:
We may collect the following personal information directly when you create or access a wallet:
• Identification and organizational data such as commercial registration, national ID, registration with the General Organization for Social Insurance (where applicable), tax numbers, and basic identification data of the merchant’s authorized representative.
• Financial information such as bank account data and financial product data (available on the website).
• Transaction and account-related data such as wallet account details and information you enter or provide when using the wallet.
Automatically Collected Personal Data (Indirect Collection):
Some personal data is collected indirectly when interacting with the website or our digital channels. This may include:
• Device and Technical Information:
IP addresses, device type, operating system, and geolocation data for fraud prevention, session management, and service optimization.
• Usage and Behavioral Information:
Generated by analytics tools to improve customer experience.
• Cookies and Similar Technologies:
Used to recognize your device and remember your preferences.
• System Logs:
Record actions within the application for security, monitoring, and troubleshooting.
• Data from Secure Integrations:
Data received through secure integrations with approved government platforms (such as the National Information Center and Elm) for identity verification and maintaining accurate records.
________________________________________
4. How do we use your personal data?
The personal data we collect is used to support our business operations, enhance user experience, and ensure compliance with laws and regulations.
Main purposes include:
• Managing business operations and processing payments.
• Customer service.
• Business development and behavioral analysis.
• Achieving operational efficiency and compliance.
• Enhancing security and safety.
________________________________________
5. Legal bases for processing your data:
We process your data based on:
• Consent.
• Contractual necessity.
• Legal obligation.
• Legitimate interests.
________________________________________
6. How do we protect your personal data?
We implement technical and organizational security measures to ensure your data is protected from unauthorized access, alteration, or misuse.
________________________________________
7. With whom do we share your data?
Loop shares your personal data with specific categories of recipients to facilitate business operations and comply with legal requirements.
These include:
• Service providers and professional partners:
Such as IT providers, cloud services, logistics partners, and professional firms such as financial auditors.
• Government authorities and regulatory bodies:
To meet legal obligations or respond to lawful requests.
• Financial institutions and payment processors:
To process transactions and manage financial operations.
Data Transfer to Third Parties:
We ensure that data sharing with third parties is governed by agreements that protect privacy and comply with Loop’s data protection standards.
We may need to share data outside the Kingdom.
When transferring your personal data internationally, Loop takes the following precautions:
Personal data may be shared outside the Kingdom of Saudi Arabia for providing our payment services and other purposes outlined in this Privacy Policy, provided that:
1. Transfers are conducted in accordance with applicable regulations; and
2. Recipients act as data processors or independent controllers.
In such cases, we ensure an adequate level of protection and that all transfers are conducted lawfully. This includes reliance on adequacy decisions issued by the competent authority and the implementation of standard contractual clauses governing personal data transfers.
________________________________________
8. How long do we retain your personal data?
Loop retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, in line with legal and regulatory requirements.
Retention criteria include:
• Operational necessity: Data is retained as long as required to provide services and manage operations efficiently.
• Legal compliance: Certain types of data are retained according to legal requirements.
• Marketing and communications: Data is retained for marketing purposes until you request to stop receiving communications.
After the retention period ends, personal data is deleted or anonymized so it cannot be linked to any individual.
________________________________________
9. How do we use cookies?
Loop uses cookies to improve your website experience, ensure functionality, and enhance services.
Types of cookies used:
• Essential cookies: To manage legal compliance and store your preferences.
• Performance cookies: To track website performance and improve experience.
• Advertising cookies: To support marketing efforts by delivering relevant ads.
Managing cookie preferences:
You can manage cookie settings through your browser settings or via cookie settings available on our website.
________________________________________
10. What are your rights regarding your personal data?
Loop respects your rights and enables you to exercise them in accordance with the Personal Data Protection Law in Saudi Arabia.
Your rights include:
• The right to be informed.
• The right to access your personal data.
• The right to correct data.
• The right to request deletion.
• The right to withdraw consent (unless another legal basis applies).
• The right to lodge a complaint.
• The right to claim compensation for damages.
Exercising your rights:
You can contact us via email:
dataprotection@loop.sa
We will respond within 30 days from the date of receiving the request.
________________________________________
11. What if you have questions or need more information?
For more details about processing your personal data or exercising your rights, you may contact the Data Protection Officer at Loop:
dataprotection@loop.sa
Submitting a complaint or objection:
If you wish to file a complaint regarding how we handle your personal data, you may contact Loop at:
Phone: 8001222228
Email: customercare@loop.sa
You may also contact the Data Protection Office at:
dataprotection@loop.sa
You can also contact the Saudi Central Bank (SAMA) through:
Phone: 8001256666
Website: https://e.sama.gov.sa/
________________________________________
12. Changes to the Privacy Notice
Loop reserves the right to update or modify this Privacy Notice at any time to reflect changes in data processing practices, laws, or business operations.