Privacy & usage

About NDF:

The National Development Fund (NDF) was established by Royal Order No. (A /13) dated 03/10/2017. It was mandated to advance the performance of development funds and banks as well as to empower development funds and banks to better fulfil development priorities and economic obligations related to the Kingdom’s Vision 2030. This will be achieved by:

Setting the right track for development funds and banks in Saudi Arabia to develop and enhance their performance and effectiveness and reach financial sustainability.
Ensuring that all objectives are aligned with Vision 2030 aspirations.
Minimizing any overlap between development funds and banks.
Fostering coordination between development funds and banks.
Empowering development funds and banks to realize their objectives.

Contact Information:

Responsible department: Data Management Office

To contact us: Select the subject “Data Management Office” from “Contact Us” page on NDF’s website.

Last update date:

The Privacy Policy was last updated on 10 April 2025.

Personal data to be collected:

NDF collects personal data when inquiring through “Contact Us” page to respond to your inquiries based on the inquiry type.

NDF collects and process the following data:

Name
Subject
E-mail
Contact numbers including mobile and landline numbers
Message content
Cookies data (data collected by website logs and cookie technologies or similar technologies)
The geographical location of the user on NDF’s website

Methods of collecting data and the purpose of collection:

Data provided by the user through the page
Technical data collected from “cookies file” by accessing NDF website

NDF is committed to collect the minimum necessary data that is directly related to the purpose of collecting and processing of personal data.

Purpose of collection of personal data:

The main purpose of data collection is to respond to users’ inquiries based on the relevant subjects.

Processing of personal data:

NDF is committed to process personal data based on the purpose of collection and take the necessary measures to safeguard the data as much as possible in accordance with the applicable regulations in the Saudi Arabia. NDF works to apply the best security standards to protect and secure the confidentiality of the data from unauthorized access in accordance with legislative requirements.

Sharing of personal data:

NDF preserves the right to share personal data with government and private agencies in Saudi Arabia, and with relevant departments internally based on business needs in order to provide the best services. NDF preserves the right to disclose any information to regulatory or competent authorities in accordance with the applicable laws and regulations in Saudi Arabia in order to comply with any law or accountability.

When personal data is provided through any NDF’s official communication channels, it is considered an explicit consent to store, process, share and use the data by NDF.

Storage of personal data:

Personal data is stored within the boundaries of Saudi Arabia and in servers belong to NDF that are secured in accordance with the National Cybersecurity Authority (NCA) requirements to ensure its protection from unauthorized access and to mitigate the risks as much as possible and to disclose it – God forbid – in case of data leakage.

The data is retained for a specific period of time in accordance with the applicable legislative, legal and regulatory requirements in Saudi Arabia and NDF.

Data subject rights:

In accordance with the Personal Data Protection Law (PDPL) published by the Saudi Data and AI Authority (SDAIA), the data subject has rights that depend essentially on the purpose of collection and processing of personal data. As part of NDF’s interest in applying best practices to protect personal data and strengthen trust with its beneficiaries, the data subject has the following rights:

Right to be informed: The data subject has the right to be informed about the methods of collecting and processing personal data, the legal basis for it, the main purpose of processing it, how it is stored and destroyed upon request, and to whom it will be disclosed. Contact us for more details about our Data Privacy policy.
Right of access to Personal Data: The data subject can request an access to their personal data by contacting us via Contact Us page and selecting the subject “Data Management Office”.
Right to request access to Personal Data: The data subject has the right to obtain a copy of their personal data in clear and readable format, whenever technically possible, by submitting a request via Contact Us page and selecting the subject “Data Management Office”, and it will be provided through the data subject’s e-mail.
Right to request correction of Personal Data: The data subject has the right to request a correction or amendment for inaccurate, incorrect, or incomplete personal data by contacting us via Contact Us page and selecting the subject “Data Management Office”.
Right to request erasure of Personal Data: without prejudice to the applicable laws and regulations in Saudi Arabia or NDF’s official policies, and without conflict with the purpose of processing and retention, the data subject has the right to request a destruction of their personal data via Contact Us page and selecting the subject “Data Management Office”.
Right to withdraw consent: The data subject has the right to withdraw their consent to the processing of personal data any time, unless there is a legal justification stating otherwise.
Except as stipulated by the law, there will be no claims to pay any fees to exercise these rights, and in the event of a request submission to exercise one of these rights, the response will be within 30 working days from the date of receiving the full form.
We are pleased to be contacted through the below information for more details about the mechanism of data processing and how to exercise your rights.

Data Protection Officer:

Responsible Department/ Team: Data Management Office

To contact us: Select the subject “Data Management Office” from “Contact Us” page on NDF website.

For complaints and objections:

In case of any inquiries or concerns about non-compliance with the Personal Data Protection Law (PDPL), you can contact the Data Management Office at NDF by selecting the subject “Data Management Office” from “Contact Us” page on NDF website.

The Data Management Office at NDF reviews all complaints and inquiries, provides support and answers questions related to the rights of data subject and personal data protection.

In the event of dissatisfaction, the complainant has the right to submit a complaint, after 30 working days, to the competent authority [Saudi Data and AI Authority (SDAIA)] through the websites:

Saudi Data and AI Authority (SDAIA): (sdaia.gov.sa)
National Data Governance Platform: (dgp.sdaia.gov.sa)