Privacy Policy

The Cashin website at (www.cashin.sa) is owned and operated by Cashin Information Technology Company, Unified Number (7025675583). Cashin ("Cashin" or "we") respects the privacy of visitors to its website and is committed to protecting personal data collected or processed through the website in accordance with the provisions of the Personal Data Protection Law in the Kingdom of Saudi Arabia, its Implementing Regulations, and related laws and directives.

This Policy explains the types of personal data we may collect when you visit the website or contact us, the purposes for which it is used, how it is protected and retained, the entities that may process it, and your rights in relation to it.

This Policy applies to Cashin’s public website at the domain: www.cashin.sa.

This Policy does not cover data processed through Cashin’s technology or operational platforms, customer portal, applications, or systems and services provided to customers. Such data may be subject to separate privacy notices or policies, depending on the nature of each service.

For the purposes of the Personal Data Protection Law, Cashin Information Technology Company is the controller of personal data collected directly from website visitors for the purposes set out in this Policy.

Headquarters: Riyadh, Kingdom of Saudi Arabia
Email: info@cashin.sa
Phone: 920023389

3.1 Data You Provide Directly to Us

When you use the contact form or contact us through the website, we may collect the following data:

1. Full name;
2. Email address;
3. Contact number;
4. Name of the company, establishment, or fuel station;
5. Type of request or inquiry;
6. Content of the message or inquiry you choose to send us;
7. Any other information you voluntarily provide when contacting us.

Some data, such as your name, email address, and contact number, is necessary for us to receive your request and contact you about it. Other data is optional, depending on the nature of the request.

3.2 Technical Data and Website Usage Data

When you use the website, certain technical data may be collected automatically to the extent necessary to operate and secure the website and improve its performance. Examples include:

• Internet Protocol address (IP Address);
• Device type, browser, and operating system;
• Date and time of your visit to the website;
• Pages visited and how you interact with them;
• Performance data and technical error data;
• Data from cookies and similar measurement technologies, depending on the website’s settings.

We seek to limit the technical data collected to what is necessary to fulfil the website’s legitimate purposes.

3.3 Data We Do Not Request

The public website is not intended to collect sensitive data, financial data, official documents, or system login credentials.

Please therefore do not send information such as:

1. National ID, residence permit, or passport numbers;
2. Bank account or card details;
3. Passwords or login credentials;
4. Health or biometric data;
5. Confidential documents that are not necessary for the inquiry;
6. Any personal data relating to other individuals, unless you have a lawful basis for sharing it.

Cashin may process personal data collected through the website for the following purposes:

1. Receiving and responding to inquiries and contact requests.
2. Contacting individuals or establishments interested in a demonstration of Cashin’s services.
3. Reviewing requests for partnerships or business collaboration.
4. Following up on requests to implement or activate Cashin solutions at establishments or fuel stations.
5. Providing support and information relating to Cashin’s products and services.
6. Referring requests to the relevant team or department within Cashin.
7. Managing and following up on the potential business relationship with the requester.
8. Operating the website and maintaining its security and stability.
9. Detecting faults, unlawful use, or attempted security breaches.
10. Analysing website performance and improving the user experience and digital services.
11. Meeting legal, regulatory, or judicial requirements applicable to Cashin.
12. Protecting the legitimate rights and interests of Cashin or website users to the extent permitted by law.

We will not use personal data for purposes that conflict with the purpose for which it was collected, except where permitted by law.

Depending on the nature of each processing activity, Cashin relies on one or more of the lawful bases established under the Personal Data Protection Law, including:

1. Your consent, where consent is the appropriate basis for processing;
2. Cashin’s legitimate interests, such as responding to inquiries, securing the website, preventing its misuse, and improving its services, provided that this does not prejudice the rights and interests of the personal data subject and does not involve sensitive data;
3. Fulfilling existing contractual obligations or arrangements, where processing is necessary to perform an agreement to which the data subject is a party;
4. Compliance with a legal obligation applicable to Cashin.

Cashin will not use personal contact details to send direct marketing messages unless the necessary consent has been obtained in accordance with applicable laws. If you consent to receive marketing messages, you may withdraw your consent or unsubscribe at any time using the mechanism described in the message or by contacting us.

Declining marketing messages does not affect your ability to submit an inquiry or request a service through the website.

The website may use cookies or similar technologies to help:

1. Operate the website’s essential functions;
2. Maintain website security;
3. Measure page performance;
4. Understand how visitors use the website;
5. Improve the user experience.

Where the use of a particular type of cookie requires your consent, it will only be enabled in accordance with the consent and settings you select. You can also control certain cookies through your browser settings.

Cashin does not sell website visitors’ personal data.

Access to data within Cashin is limited to employees and teams that need it to carry out the purposes specified in this Policy. Where necessary, Cashin may engage technology service providers that act on its behalf, such as providers of:

1. Website hosting and operation;
2. Cloud infrastructure;
3. Information security;
4. Email and communications;
5. Technical analytics and website performance measurement;
6. Maintenance and technical support.

In such cases, Cashin undertakes to take appropriate measures to ensure that these entities process data only within the scope of their assigned tasks and in accordance with legal requirements relating to personal data protection.

Personal data may also be disclosed where required by law or by an order issued by a competent authority, or in other circumstances permitted by the Personal Data Protection Law.

Cashin takes care to process and store personal data in accordance with the legal requirements applicable in the Kingdom of Saudi Arabia. If any technology services used require personal data to be transferred or processed outside the Kingdom, this will only take place in accordance with the provisions of the Personal Data Protection Law, the Regulation on Personal Data Transfer Outside the Kingdom, and related legal requirements.

Cashin retains personal data for the period necessary to fulfil the purpose for which it was collected.

Cashin may retain certain data for a longer period where retention is:

1. Required by law or regulation;
2. Necessary to provide evidence of a transaction or communication;
3. Related to an existing or anticipated claim or dispute; or
4. Necessary to protect Cashin’s legitimate rights and interests within the limits prescribed by law.

Once the purpose has been fulfilled and there is no lawful basis for continued retention, the data is destroyed or deleted securely in a manner that prevents its recovery or the identification of the data subject.

Cashin takes appropriate organisational, administrative, and technical measures to protect personal data against:

1. Unauthorised access;
2. Unlawful use or processing;
3. Loss or damage;
4. Unauthorised alteration;
5. Disclosure or leakage.

Security controls and procedures are reviewed according to the nature of the data and the risks associated with its processing.

Subject to the provisions, limitations, and exceptions prescribed by law, you have the following rights in relation to your personal data:

A. Right to Be Informed

You have the right to know how your data is collected, the lawful basis for processing it, the purposes for which it is used, how it is stored and destroyed, and the entities to which it may be disclosed.

B. Right of Access

You have the right to request access to your personal data held by Cashin.

C. Right to Obtain Your Data

You have the right to request a copy of your personal data held by Cashin in a clear and readable format, in accordance with the requirements prescribed by law.

D. Right to Rectification

You have the right to request that your personal data be corrected, completed, or updated if it is inaccurate, incomplete, or out of date.

E. Right to Request Destruction

You have the right to request the destruction of your personal data in the circumstances prescribed by law, unless Cashin has a lawful basis for continuing to retain it.

F. Right to Withdraw Consent

If the processing of your data is based on your consent, you have the right to withdraw that consent at any time, unless another lawful basis permits continued processing.

You may submit a request relating to your personal data or exercise any of the rights mentioned above by contacting us at:

Email: info@cashin.sa

We may request appropriate information to verify the requester’s identity before fulfilling the request, to protect personal data against unauthorised access.

Requests are handled in accordance with the timeframes, procedures, and requirements specified in the Personal Data Protection Law and its Implementing Regulations.

If you provide us with personal data relating to another person, you acknowledge that you have the appropriate authority or lawful basis to share that data with us. We advise against including data relating to other parties in the message field unless it is necessary for the inquiry.

The website may contain links to websites or online services operated by other entities. Cashin is not responsible for those entities’ privacy policies or data processing practices. We recommend reviewing their privacy policies before providing any personal data through them.

The website is primarily intended for companies, business owners, professionals, and entities interested in learning about Cashin’s products and services. It is not intended to collect personal data relating to minors or individuals with limited legal capacity. If we become aware that such data has been provided without the required lawful basis or consent, we will take appropriate action in accordance with applicable laws.

If you have an inquiry or complaint about how your personal data is processed, you may first contact us at:

info@cashin.sa

You also have the right, in accordance with the provisions of the Personal Data Protection Law, to submit a complaint to the Saudi Data and Artificial Intelligence Authority (SDAIA) through the channels it provides for this purpose.

Cashin may update this Policy from time to time to reflect legal, technical, or operational changes. The updated version will be published on this page, together with the date of the last update, and the changes will take effect from the date specified in the Policy. We recommend reviewing this page periodically for the latest version of the Privacy Policy.

For any inquiry relating to this Policy or the processing of your personal data, you can contact us via:

Email: info@cashin.sa
Phone: 920023389
Website: www.cashin.sa