Privacy Policy

Who We Are

Waypoint Systems Arabia for Insurance Claims Settlement LLC, the Third-Party Administrator for insurance claims registrations / settlement, licensed and regulated by the INSURANCE AUTHORITY (IA) under the Insurance Law (Royal Decree No. M/32 of 1424H). For the purposes of the PDPL, Waypoint Arabia acts as the Data Controller with respect to personal data collected through our website, insurance application processes, and customer service interactions.

Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity Data: Full name, national ID (Iqama / Saudi National ID), date of birth, nationality
• Contact Data: Email address, mobile number, postal address
• Financial Data: Vehicle finance agreement details, outstanding loan balance, bank name
• Vehicle Data: Vehicle registration, make, model, VIN/chassis number, purchase price
• Insurance Data: Existing motor insurance policy details, insurer name, policy number, cover dates
• Technical Data: IP address, browser type, device identifiers, pages visited, cookies (see Cookie Policy)
• Communications Data: Records of correspondence, call recordings (where applicable), enquiry details

We do not collect sensitive personal data as defined in Article 6 of the PDPL unless strictly required for service delivery and with your explicit consent.

How We Use Your Personal Data

Data Sharing and Disclosure

We may share your personal data with the following categories of third parties, strictly as necessary:

• Insurance underwriters and reinsurers for policy placement and claims settlement
• The Saudi Central Bank (Insurance Authority) and other regulatory authorities as required by law
• Claims management and loss adjustment firms
• IT service providers and cloud hosting partners under strict data processing agreements
• Legal and professional advisors where required

We do not sell, rent, or trade your personal data to any third party for commercial purposes.

Cross-Border Data Transfers

Where personal data is transferred outside the Kingdom of Saudi Arabia Waypoint Arabia ensures that appropriate safeguards are in place in accordance with Chapter 6 of the PDPL Implementing Regulations, including contractual protections and, where applicable.

Data Retention

Personal data is retained for a minimum of 10 years from the date of last activity or policy expiry, in accordance with Insurance Authority Insurance Law retention requirements and the Saudi Anti-Money Laundering Law. After the retention period, data is securely deleted or anonymized.

Your Rights Under the PDPL

• Right of Access: Request a copy of the personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of data where no legal basis exists for continued processing
• Right to Restriction: Request that processing be restricted in certain circumstances
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time
• Right to Object: Object to processing based on legitimate interest, including direct marketing

To exercise any right, submit a written request to our Data Protection Officer. We will respond within 30 days in accordance with PDPL timelines.

Security

Waypoint Arabia employs industry-standard technical and organizational security measures including TLS/SSL encryption, access controls, regular security assessments, and staff training. In the event of a personal data breach, we will notify the SDAIA and affected individuals in accordance with PDPL breach notification obligations.