Privacy Policy
How we collect, use, and protect personal data.

Effective date: August 1, 2026. This Privacy Policy explains how NeoTech Solutions (“NeoTech,” “we,” “our,” or “us”) collects, uses, stores, and protects personal data when you interact with us through our website (neotechsolutions.sa), corporate communications, event registrations, contact forms, and business development activities.

Important notice about enterprise software and client data: This Privacy Policy applies primarily to personal data we collect from website visitors, prospective clients, business partners, and other professional contacts where NeoTech Solutions acts as the Data Controller.

When NeoTech Solutions provides enterprise lending platforms, loan origination systems, decisioning solutions, collection platforms, or other financial technology solutions to institutional clients, NeoTech Solutions may act as a Data Processor or Data Intermediary.

In these situations, the collection and processing of borrowers’ or end customers’ personal data is primarily controlled by the relevant institutional client. Such processing is governed by the applicable client privacy policy, Master Services Agreement (MSA), Data Processing Addendum (DPA), and other contractual arrangements between NeoTech Solutions and the client.

NeoTech Solutions is a financial technology software company headquartered in Riyadh, Kingdom of Saudi Arabia. We provide technology solutions to financial institutions, lenders, and other organizations.

Legal entity: NeoTech Solutions Company. Commercial Registration (CR): 7054194183. Headquarter: 2930 Northern Ring Branch, 6137 Al Wadi District, KSA. Contact: info@neotechsolutions.sa.

We collect information that is reasonably necessary to respond to business inquiries, provide our services, communicate with prospective clients, and maintain the security and performance of our website and systems.

A. Information you provide to us: When you contact us, request a demonstration, submit a form, or communicate with our team, we may collect information such as:

• Contact and professional information: Your name, job title, organization, business email address, and phone number.
• Business and project information: Details about your requirements, project scope, software needs, and other information you choose to share with us.
• Communications: Information contained in emails, messages, meeting requests, or other communications you have with NeoTech.

Please note: Our website is not intended to collect individual consumer banking credentials, payment card information, or national identity documents.

B. When you visit our website, certain technical information may be collected automatically, including:

• IP address
• Browser type and version
• Operating system and device information
• Network and connection information
• Time zone and general location settings
• Pages visited and time spent on the website
• Referral sources and navigation paths
• Interactions with website features and content

Where applicable, NeoTech Solutions processes personal data in accordance with the Kingdom of Saudi Arabia Personal Data Protection Law (PDPL) and its applicable regulations.

Depending on the circumstances, we may process personal data on the following grounds:

• Contractual and pre-contractual purposes: We may process information when it is necessary to respond to your inquiry, arrange a product demonstration, discuss your requirements, or prepare a proposal at your request.
• Legitimate business interests: We may process information where necessary for legitimate business purposes, such as maintaining website and system security, improving our services, understanding business requirements, and developing our B2B relationships.
• Consent: Where required, we may ask for your consent before sending marketing communications, newsletters, regulatory updates, or other optional content. You may withdraw your consent at any time.
• Legal and regulatory requirements: We may process or disclose personal data where necessary to comply with applicable laws, regulatory requirements, court orders, or other lawful requests from competent authorities in the Kingdom of Saudi Arabia.

We may use the information we collect to:

• Respond to business inquiries and requests for proposals (RFPs).
• Understand your organization’s requirements and determine how our solutions may support them.
• Schedule and conduct product or technical demonstrations.
• Communicate with you about our products, services, and business activities.
• Share relevant technical information, industry insights, and regulatory updates where you have requested or consented to receive them.
• Monitor website performance and improve our digital experience.
• Detect, prevent, and respond to security threats or unauthorized activity.
• Meet applicable legal, regulatory, contractual, and audit requirements.

NeoTech Solutions does not sell or rent your personal data.

We may share personal data with third parties only where reasonably necessary and permitted by applicable law. This may include:

Service providers: We may work with trusted third-party providers that support our business operations, such as cloud hosting providers, IT service providers, CRM platforms, website service providers, and corporate communication or email platforms. Where appropriate, we require these providers to protect personal data and process it only for authorized purposes.

Government and regulatory authorities: We may disclose personal data to competent government, regulatory, judicial, or supervisory authorities where required or permitted by applicable law, regulation, or court order.

Corporate transactions: If NeoTech Solutions is involved in a merger, acquisition, restructuring, financing, sale of assets, or similar corporate transaction, personal data may be disclosed to relevant parties where necessary and subject to appropriate confidentiality and data protection measures.

Data hosting: NeoTech Solutions takes appropriate measures to ensure that data handled through our services is hosted and managed in accordance with applicable Saudi Arabian regulatory and data protection requirements. For enterprise clients, specific data hosting and residency requirements may also be agreed upon contractually.

Cross-border transfers: Some of our technology and service providers may operate outside the Kingdom of Saudi Arabia. Where personal data is transferred outside Saudi Arabia, NeoTech Solutions takes appropriate measures to ensure that such transfers comply with the applicable requirements of the KSA PDPL and its implementing regulations.

Data retention: We retain personal data only for as long as reasonably necessary to fulfill the purpose for which it was collected, meet contractual or business requirements, comply with applicable legal obligations, or resolve disputes. When personal data is no longer required, we take appropriate steps to securely delete, destroy, or anonymize it, where applicable.

NeoTech Solutions takes the security of personal data seriously and maintains appropriate administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, or destruction. While we take reasonable steps to protect personal data, no website, system, or method of electronic transmission can be guaranteed to be completely secure.

Depending on the nature of the information and the services involved, our security measures may include:

• TLS/HTTPS encryption for data transmitted through our website.
• Role-based access controls (RBAC).
• Least-privilege access principles.
• Security monitoring and vulnerability assessments.
• Regular security reviews and audits.
• Access controls designed to limit personal data access to authorized personnel.

Subject to applicable legal requirements and exceptions, you may have certain rights regarding your personal data under the KSA PDPL.

These may include the right to:

Access and information: Request information about the personal data we hold about you, including how and why it is processed, and request access to that data where applicable.

Correction: Request that inaccurate, incomplete, or outdated personal data be corrected or updated.

Deletion: Request the deletion or destruction of personal data where the applicable legal requirements for deletion are met.

Withdrawal of consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

How to exercise your rights: If you would like to exercise an applicable data protection right or have a question about how we process your personal data, please contact our Privacy Office at privacy@neotechsolutions.sa. We will review and respond to verified requests within the timeframe required by applicable law.

If you believe that your personal data has not been handled in accordance with applicable data protection requirements, you may also have the right to submit a complaint to the relevant competent authority in the Kingdom of Saudi Arabia, including the Saudi Data & Artificial Intelligence Authority (SDAIA), where applicable.

Our website may use cookies and similar technologies to support website functionality, understand visitor behavior, and improve the user experience.

Strictly necessary cookies: These cookies are required for basic website functions, security, navigation, and other essential operations.

Analytics and performance cookies: These cookies help us understand how visitors use our website, such as which pages are visited and how users interact with our content. We use this information to improve our website and digital experience.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality or performance of some parts of the website.

We may update this Privacy Policy from time to time to reflect changes in our business practices, technology, legal requirements, or applicable regulatory guidance.

When we make changes, we will publish the updated version on this page and revise the “Last Updated” date above.

We encourage you to review this Privacy Policy periodically so that you remain informed about how we handle personal data.

If you have questions about this Privacy Policy, our data protection practices, or how your personal data is handled, please contact us:

NeoTech Solutions — Data Privacy Office, 2930 Northern Ring Branch, 6137 Al Wadi District, KSA. General inquiries: info@neotechsolutions.sa.

We welcome questions, requests, and feedback regarding our privacy and data protection practices.