Article 22: Participants and Institutional Beneficiaries’ Protection and Data Confidentiality

Participants and Institutional Beneficiaries’ Protection and Data Confidentiality 1- The Debt-Based Crowdfunding Company shall establish a function for handling complaints and set clear procedures for receiving, documenting, reviewing, and responding to the complaints of Participants and Institutional Beneficiaries within the period specified by SAMA. Such complaints shall be kept in special records that also include all necessary details in relation to the complaint and the procedures taken. 2- All employees of the Debt-Based Crowdfunding Company shall maintain the confidentiality of data and transactions related to the Participants and Institutional Beneficiaries and shall not disclose them to other parties even after the end of service for employees or revocation of license, except in accordance with the relevant laws, regulations and instructions. 3- The Debt-Based Crowdfunding Company shall take all necessary measures to ensure the confidentiality of information and transactions related to Participants and Institutional Beneficiaries.