This Data Protection Notice (“Notice”) sets out the basis which Shari Finance Loan's (“we”, “us”, or “our”) may collect, use, disclose or otherwise process personal data of our clients in accordance with the Personal Data Protection Act 2025 (“PDPA”). This Notice applies to personal data in our possession or under our control, including personal data in the possession of organisations which we have engaged to collect, use, disclose or process personal data for our purposes.
Personal Data:
- 1. As used in this Notice: “client” refers to our current or prospective customer, account holder, borrower, guarantor or surety or person furnishing any security for a customer, account holder or borrower.
“personal data” means data, whether true or not, about an individual who can be identified: (a) from that data; or (b) from that data and other information to which we have or are likely to have access. - 2. Other terms used in this Notice shall have the meanings given to them in the PDPA (where the context so permits).
Collection, Use And Disclosure Of Personal Data:
- 3. Depending on the nature of your interaction with us, some examples of personal data which we may collect from you include name, identification numbers such as NRIC, FIN, work permit and birth certificate numbers, residential address, email address, telephone number, nationality, gender, date of birth, marital status, employment information, financial information, thumbprint and specimen signature. We generally do not collect your personal data unless (a) it is provided to us voluntarily by you directly or via a third party who has been duly authorised by you to disclose your personal data to us (your “authorised representative”) after (i) you (or your authorised representative) have been notified of the purposes for which the data is collected, and (ii) you (or your authorised representative) have provided consent to the collection, use and/or disclosure of your personal data for those purposes, or (b) the collection, use and/or disclosure of personal data without consent is permitted or required by the PDPA or other laws. We shall seek your consent before collecting any additional personal data and before using or disclosing your personal data for a purpose which has not been notified to you (except where permitted or authorised by law).
- 4. From time to time, we may require you to supply personal data of third parties which may be relevant, including personal data of the guarantors, legal or beneficial owners, family members, managers or directors (e.g. information about whether any immediate family members has/have been entrusted with prominent public functions, or whether you have been served with any statutory demand under the Insolvency, Restructuring and Dissolution Act 2018 etc.). If you refuse or are unable to provide such personal data for our use and disclosure as described in this Notice, or if subsequently any action taken results in us ceasing to be entitled to collect, use or disclose such personal data as described in this Notice, we may not be able to open or maintain accounts or begin or continue to provide a product (or part thereof) or other facilities or services to you – where possible, we will inform you of the relevant consequences prior to taking any action thereof.
- 5. If you are required to supply such personal data to us, or if you have provided such personal data to us, we expect you to have informed each individual whose personal data is supplied or provided to us that we may use their personal data for one or more of the purposes described in this Notice. Unless you notify us in writing otherwise, you additionally confirm, for and on behalf of each such individual, that we may collect, use and disclose all or any part of such personal data for any of the purposes described in this Notice. By supplying or providing such personal data, you agree that you have obtained such consent from such individuals, and further undertake to provide evidence of such consent to us upon reasonable request.
- 6. We may collect and use personal data (including personal data of third parties provided by you) for any or all of the following purposes:
- the processing, daily application, and provision of products, accounts, facilities and/or services;
- to respond to your (or your authorised representative’s) requests, questions, queries or feedback;
- to carry out Prevention of Money Laundering and Countering the Financing of Terrorism checks, as well as complying with laws, regulations, notices, circulars, guidelines, industry codes and materials circulated by any association or body of which we are a member or subscriber and directions or requests (by whatever name called) received from any Government department or regulatory body or statutory authority or body to which we are a member or subscriber, including where relevant the Land Transport Authority of UK, the Hire Purchase, Finance and Leasing Association of UK and any stock exchange, clearing house or central depository;
- for the conduct of credit checks or the collection or payment of debts;
- where a product or facility involves a share loan, for any purpose relating to administering, exercising rights in or otherwise dealing with such shares, which may involve disclosure to the corporation to which any of the shares pertain;
- to carry out risk analysis, statistical analysis and for other general data processing relating to the products, accounts, facilities and/or services;
- to market our products, accounts, facilities and/or services through voice calls, SMS/text message, fax, email and other method of communication, where permissible under law or upon client request;
- to continue to provide information and materials as provided prior to 2 July 2024 where such provision of information or material continues to be part of the provision of our products, accounts, facilities and/or services;
- to enable our actual or proposed assignee or participant, sub-participant or transferee of our rights in respect of a client to evaluate the transaction intended to be the subject of the assignment, participation or sub-participation;
- to enforce or defend our rights and our employees, officers and agents, contractual or otherwise; and
- other purposes directly or indirectly relating to any of the above, including disclosure to persons authorised by any entity mentioned in this paragraph for the purposes for which the disclosure to that entity was initially made by us,
- 7. Personal data may be transferred and subsequently used and disclosed by service providers, agents and other organisations we have engaged. In particular, for products or facilities which involve the charge, assignment or other security over assets given by you to us, relevant personal data may be disclosed by us, and collected, used and disclosed by a nominee (including where relevant Shari Finance Loans for any of the purposes as listed in clause 6 above.
- 8. Where the disclosure involves the transfer of your personal data outside UK and UAE, a standard of protection that is comparable to that under this Notice shall be provided.
- 7. The purposes listed in the above clauses may continue to apply even in situations where your relationship with us has been terminated or altered in any way, for a reasonable period thereafter (including, where applicable, a period to enable us to enforce our rights under a contract with you).
applyunit@sharifinance.com