Privacy Policy

1. Data Controller

The controller of your data is BennaHub — a Saudi B2B specification and sourcing platform for building materials and finishing products, Kingdom of Saudi Arabia.

For any query or request regarding your data, contact: privacy@bennahub.com.

2. Data We Collect

We collect only what we need to operate a B2B specification and sourcing platform:

• Account & contact data: name, job title, company/organization name, email, mobile/WhatsApp number.
• Supplier data: company and brand information, products, catalogues, images, technical files, certificates, indicative pricing (if provided).
• Buyer & project data: project context, specification lists, RFQ details.
• Usage & technical data: login logs, pages visited, IP address, browser/device type, and cookies.

3. Purposes & Legal Basis

We process your data for the following purposes:

We do not make solely automated decisions producing legal effects on you without human involvement.

4. Sharing & Disclosure

• We do not sell your personal data.
• We do not share supplier or buyer data, product-interest signals, pricing, or project information with any external or related business outside the BennaHub workflow. Access is role-based and internal, applied with particular care in any overlapping product category.
• We share data only with external processors providing operational services (hosting, database, email delivery) under processing agreements, and solely for the stated purposes.
• We may disclose where required by a legal obligation or a request from a competent authority.

5. Cross-Border Transfer

Some of our technical service providers may process data outside the Kingdom. Where your data is transferred abroad, we comply with the transfer controls under the PDPL and its Regulations (including an adequate level of protection and/or appropriate contractual safeguards), limited to what is necessary to operate the service.

6. Retention

We retain your data while your account is active, then for the period necessary for operational, legal, accounting, and attribution-record purposes, up to 24 months after last activity, unless the law requires otherwise. Thereafter it is deleted or anonymized.

7. Your Rights Under the PDPL

You have the right to: be informed of how your data is processed; access it and obtain a copy; correct or update it; request deletion where retention is no longer justified; and withdraw consent at any time without retroactive effect.

To exercise any right, contact privacy@bennahub.com. We respond within the statutory period, and you may file a complaint with SDAIA.

8. Data Security

We apply technical and organizational controls to protect your data, including role-based access control and access separation that prevents any external related party from viewing supplier or buyer market signals.

9. Cookies

We use cookies essential to operate the Platform and analytical cookies to improve performance. You can control these via your browser settings.

10. Changes to This Policy

We may update this Policy and will post the updated version here with the revision date. Continued use after an update means you have reviewed it.

11. Authority & Governing Law

This Policy is governed by the laws of the Kingdom of Saudi Arabia, in particular the PDPL and its Implementing Regulations, supervised by the Saudi Data & AI Authority (SDAIA).

12. Contact

privacy@bennahub.com · www.bennahub.com