Privacy Policy

1. Introduction

Please read carefully and understand before using our services. This privacy notice aims to clarify the personal data we process, why we process it, who receives your data, and how you can exercise your legal rights under the Personal Data Protection Law in the Kingdom of Saudi Arabia ("PDPL"). In this privacy notice, "Personal Data" means any information that directly identifies you as a person (such as the combination of your full name and address), or can be used to identify you as a person (such as a user ID associated with your identity). Similarly, "Processing" refers to any operation performed on your personal data, such as collecting, storing, using, disclosing, or destroying your personal data. The use of the Platform is considered an acknowledgment by the user that they have reviewed this policy and agreed to its terms.

2. Definitions

• "Personal Data": Any information that directly identifies a natural person (such as a full name combined with an address), or indirectly identifies them (such as a user ID associated with their identity).

• "Processing": Any operation performed on personal data, whether by collection, storage, use, disclosure, destruction, or otherwise.

• "Platform": The Dibrah platform, including all its mobile applications and electronic systems.

3. Service Provider Identity and Contact Information

Approved Technical Models LLC, based in Riyadh, operates the "Dibrah" platform. You can contact them via email at: Admin@dibrahapp.com

4. Categories of Personal Data Processed

When using the Platform, personal data provided voluntarily by the user, collected during their interaction with the Platform and its applications, gathered from their device, or obtained from third parties may be processed, as follows:

• a. Account Data: Name, email address, password, phone number, country, user ID, language, contact data, demographic data, and documents specifying the user category (such as a "student" status) for the purpose of providing tailored offers. Merchants may also be required to provide documents proving the accuracy of store data, such as a commercial register or bank account numbers, to complete payments.

• b. Delivery Data (when requesting delivery service): Delivery details such as delivery address, date, time, and type, order identifiers and history, product names and quantities, and location data.

• c. Device Information: Device identifier, IP address, session information, device configuration settings, operating system, user interactions with the Platform such as items added to the shopping cart, and other data collected through tracking technologies.

• d. Payment Data: Debit or credit card data, payment method data, payment amount, payment recipient details, refund details, and bank receipts.

• e. Customer Support Data: The content of customer support requests submitted by the user, responses from our customer service teams, and associated attachments.

• f. Platform Interaction Data: Such as images, posts, store data displayed to users, and data exchanged via private messages. This also includes deducing user interactions with stores and details of such interactions, such as time and amount paid, etc.

5. Purposes of Processing Personal Data

Personal data is processed for the following purposes:

• Creating an account and enabling the use of and interaction with the Platform, without allowing any external party to use the user ID.

• Preparing statistical reports provided to stores to build a general overview of customers.

• Monitoring and securing the Platform, detecting fraud, preventing unauthorized activities, and responding to and verifying reports and requests.

• Complying with applicable laws and regulations, and protecting the Platform's rights and legal interests.

• Enhancing user experience, analyzing platform usage, and improving provided services.

• Sending updates, offers, and notifications related to our services, responding to inquiries and feedback, and pursuing business development and partnership opportunities.

• Operating the Platform, managing accounts, and providing requested services, including delivery services, merchant registration, coordinating logistics services, and tracking loyalty points and offers.

• Managing and following up on merchant partnership inquiries, contracting with logistics service providers, and any third party related to completing the Platform's operations.

Personal data is retained for the period necessary to achieve the purposes outlined above, unless a longer period is required to comply with a legal, regulatory, or contractual obligation, or for another legitimate reason approved by the law or justified by public interest. Retention periods vary depending on the specific purpose and circumstances of processing. Upon the expiration of the retention period, personal data will be securely deleted or anonymized in accordance with applicable regulatory requirements.

6. Sharing Personal Data

Personal data may be shared with the following entities, in accordance with the specified controls:

• Third-party service providers who contribute to providing and improving services, and who are obligated to protect data and use it solely for the purposes for which it was shared.

• Affiliates and branches, for purposes of service improvement, organizing internal operations, and ensuring a consistent user experience across platforms.

• Store owners or suppliers on the Platform, for the purpose of providing the service or handling reports.

• Store owners on the Platform for marketing, analytics, and communication purposes.

• Parties involved in any actual or potential merger, acquisition, sale of company assets, financing, restructuring, or similar event, while taking necessary measures to ensure continued handling of data in accordance with this policy and applicable regulations.

• Judicial, regulatory, and governmental authorities, or any other party, whenever necessary to comply with applicable laws and regulations, execute a court order or legal procedure, or pursuant to a contractual arrangement such as payment processors.

7. User Rights

Every user has the right to request access to their personal data, update or correct it, request its destruction or deletion, submit complaints, and exercise any other rights guaranteed by relevant regulations, by contacting via email: Admin@dibrahapp.com. These requests are processed in accordance with this policy and applicable regulations.

8. Data Collection Method, Storage, and Security

Personal data is collected directly from the user and stored in the Platform's databases on the cloud. In the event of any data breach, God forbid, the Platform is committed to handling the incident in accordance with Article 20 of the Personal Data Protection Law.

9. Policy Updates

This policy is subject to continuous review and update for the purpose of its development and improvement, and the latest version shall apply immediately upon publication.