Home/Legal/Privacy notice
Legal
Privacy notice
Your money is personal, and so is the information behind it. This notice explains what we collect, why we use it, who we share it with and what you can ask us to do. We've kept it as short and as plain as we can.
1. Who we are
Yusr Bank is a Saudi Joint Stock Company, licensed and supervised by the Saudi Central Bank (SAMA) to operate as a digital bank in the Kingdom of Saudi Arabia. Our registered office is at King Fahd Road, Al Olaya, Riyadh, Kingdom of Saudi Arabia, and our commercial registration number is 1010584772.
When you open a Yusr account, apply for one, or use any of our services, Yusr Bank decides what personal data is needed and what it is used for. In this notice, "we", "us" and "Yusr" mean Yusr Bank. "You" means the person the data is about.
This notice covers the Yusr mobile app, our website at yusr.com.sa, and the servicing you receive by phone, chat, email or post. It sits alongside our terms & conditions and our cookie policy, which explains what we use cookies and similar technologies for on our website.
2. The personal data we collect
We collect only what we need to run your account properly, meet the rules that apply to us as a licensed bank, and keep your money safe. It comes to us in four ways.
Information you give us
Most of this is collected when you apply, and updated from time to time afterwards:
- your full name, national ID or Iqama number, date of birth and nationality;
- your national address and contact details, including mobile number and email address;
- employment and income information, including your employer, occupation, income range and the source of the funds you expect to pay into the account;
- anything else you choose to tell us — for example the reason for a payment, the details of a complaint, or a message you send our team.
Identity documents and images
To confirm that you are who you say you are before we open an account, we collect identity documents and images. This is a requirement for any bank operating in the Kingdom, and we cannot open an account without it.
Information generated by your use of the service
- your transactions and balances, including who you paid, when, where and how much;
- your card activity, including purchases, refunds, declines and cash withdrawals;
- device and login information, such as the device you use, its settings, your app version and the times and locations of your sessions;
- records of your contact with us, including chats, emails and calls.
Information from others
We also receive information about you from sources outside Yusr. That includes government and national registries used to confirm identity and address, other banks and payment providers involved in a payment you make or receive, and credit reference agencies where you apply for a product that requires a credit check.
3. Why we use it, and our basis
We use your personal data for the purposes below, and nothing else. Each purpose has a basis behind it.
| What we use it for | Our basis |
|---|---|
| Operating your account Opening the account, issuing your card, making and receiving payments, showing your balance and statements, and answering your questions. |
Performance of a contract with you |
| Meeting our legal and regulatory obligations Verifying your identity, anti-money-laundering and counter-terrorist-financing checks, sanctions screening, record keeping, tax reporting, and responding to lawful requests from SAMA and other authorities. |
Legal obligation |
| Preventing fraud and financial crime Monitoring accounts and payments for unusual activity, investigating suspected fraud, and protecting our customers and our business from loss. |
Our legitimate interests |
| Marketing Telling you about Yusr products, features and offers by email, SMS, push notification or in the app. |
Your consent, which you can withdraw at any time |
Service messages are not marketing. Fraud alerts, payment confirmations, statements, changes to your terms and anything else you need in order to use your account are sent to you because you hold an account with us, and cannot be switched off while the account is open.
4. Who we share it with
We do not sell your personal data, and we do not share it with anyone who has no reason to have it. We share it with:
- Regulators and authorities where we are required or permitted to do so by law, including SAMA, and law enforcement or judicial bodies acting under legal authority;
- Payment networks, so that your card payments and transfers can be authorised, routed and settled;
- Service providers who help us operate our services, including technology, communications and customer-support providers.
Where we use a service provider, we do so under a written agreement that requires them to use your personal data only for the purposes we set, to keep it secure, and to return or delete it when the work is finished.
We may also share personal data with professional advisers such as auditors and lawyers, and with any party involved in a reorganisation, sale or transfer of part of our business, in which case your data continues to be protected as described here.
5. Sending data outside the Kingdom
We may transfer your personal data outside the Kingdom of Saudi Arabia to countries that provide an adequate level of protection, or where appropriate safeguards are in place.
Any such transfer is made in line with applicable Saudi law.
6. How long we keep it
We keep your account records and transaction history for ten years after our relationship with you ends. We do this to meet the anti-money-laundering and record-keeping obligations that apply to licensed banks in the Kingdom.
Closing your account does not remove those obligations, and we cannot shorten that period on request.
7. Your rights
The information is yours. You can exercise any of the following by contacting us using the details in section 9, and we will not charge you for it.
- Access. You can ask us to confirm what personal data we hold about you and to give you a copy of it.
- Correction. If something we hold is wrong or out of date, you can ask us to correct or complete it. Many details can be updated yourself in the app.
- Objection. You can object to us using your personal data for a particular purpose, and you can withdraw your consent to marketing at any time, in the app under Settings, by using the unsubscribe link in any message, or by telling our team.
- Deletion. You can ask us to delete your personal data at any time and we will do so.
We may need to confirm your identity before we act on a request, so that nobody else can make a request in your name.
8. How we protect your data
Protecting customer data is part of how the bank is built, not something added at the end.
- Personal data is encrypted in transit and at rest.
- Access is restricted to the people who need it to do their job, and every access is logged.
- Everyone who works with customer data is trained on handling it before they are given access, and again every year.
- Our systems are tested regularly, both by our own security team and by independent specialists.
You can read more about how we keep accounts safe on our security page. Yusr will never ask you for your app passcode, your card PIN or a one-time code — not by email, not by SMS, and not on the phone.
9. How to contact us
If you have a question about this notice, or you want to exercise any of the rights in section 7, email hello@yusr.com.sa. We will respond within 30 business days.
You can also write to us:
Yusr Bank
King Fahd Road, Al Olaya
P.O. Box 68142
Riyadh 12214, Kingdom of Saudi Arabia
If you are unhappy with how we have handled your personal data, you can raise a complaint with the competent authority in the Kingdom.
For anything else — a payment problem, a lost card, a formal complaint about a product — our contact page lists the fastest route.
10. Changes to this notice
We may update this notice from time to time, for example when we launch a new product or when the rules that apply to us change. The current version is always published on this page, with the version number and date at the top.
Where a change materially affects how we use your personal data, we will tell you in the app or by email before it takes effect.
The rest of the small print
Two more documents worth five minutes
Between them they cover what we track on the website and what you and Yusr each agree to when you open an account.