1. Who We Are
BinaQuote, Commercial Registration No. —, national address — ("the Platform", "we"), is the controller of personal data processed through the BinaQuote platform (the binaquote.com website and its apps).
For anything related to personal data: —
We process personal data in accordance with the Personal Data Protection Law and its Implementing Regulations and other applicable laws of the Kingdom of Saudi Arabia. This Policy explains what we collect, why, with whom we share it, how long we keep it, and your rights.
2. Data We Collect
a) Data you provide
| Category | Examples |
|---|---|
| Account data | Name, mobile number, email, city, preferred language |
| Business data | Business name, logo, commercial registration number, VAT number, national address, activity categories |
| Team member data | Member's name, mobile number and role (added by the supplier account owner) |
| Requests and quotes | Items, quantities and specifications, delivery location, attachments (Excel, PDF and images), prices, supply and payment terms, and their revisions |
| Support and contact | Contact-form messages, support tickets and their attachments |
| Payment data | Amounts, transaction status, payment gateway reference, credit movements — we do not store your card details; they are processed directly by the licensed payment gateway |
b) Data collected automatically
- Technical data: IP address, device and browser type, operating system, device name and platform (in the app).
- Usage and security logs: login times, session tokens, verification attempts, a log of messages sent (number, purpose, status), and audit logs of actions within business accounts (who created or edited a quote).
- Cookies and analytics: see clause (10).
- Ad interactions: clicks on advertising banners on the Platform.
c) Data from other sources
- Publicly available business contact data (such as trade name, phone number and address published in business directories and maps), used only to invite the business to join the Platform; the owner may object and request deletion at any time.
- Data from verification and payment providers, to the extent needed to complete a transaction.
d) What we do not collect
We do not knowingly collect sensitive data (such as health, religious, security or credit data). Please do not include it in requests or attachments.
3. Purposes and Legal Bases
| Purpose | Legal basis |
|---|---|
| Creating the account, verifying the mobile number and operating it | Performance of our agreement with you |
| Publishing requests, making them available to suppliers and notifying them, and showing each party's data to the other | Performance of our agreement with you |
| Automatic reading of text, files and images at your request | Performance of our agreement with you |
| Service messages (verification codes, notifications, daily digest) | Performance of our agreement with you |
| Payments, credit, invoicing and accounting | Performance of the agreement and legal obligation |
| Platform security, fraud and abuse prevention, audit logs | Legitimate interest and legal obligation |
| Analytics, service improvement and performance measurement | Legitimate interest, and consent for non-essential analytics cookies |
| Aggregated, de-identified statistics and price indices | Legitimate interest |
| Marketing messages and promotions | Your consent — which you may withdraw at any time |
| Inviting businesses to join using publicly available data | Legitimate interest, with a right to object |
| Responding to support and contact requests | Performance of the agreement or legitimate interest |
| Compliance with laws and requests from competent authorities | Legal obligation |
4. With Whom We Share Your Data
We do not sell your personal data. We share it only within the following limits:
a) With other users — the core of the service
| Who | What they see |
|---|---|
| Visitors (no account) | Request content only: items, quantities, specifications, category, city and duration — without any identity or contact data |
| Registered, approved suppliers | In addition: the buyer's name, business name, mobile number, delivery location, and indicators of the buyer's record on the Platform (number of requests and award rate) |
| The buyer | The supplier's business and contact data and the quotes it submitted on the buyer's request |
| Other suppliers | No supplier sees another supplier's quotes — only their number |
A user who receives your data becomes an independent party responsible for protecting it, and is bound by the Terms to use it only for the purpose of the request.
b) With service providers (processors acting on our behalf)
We use providers that process data only as needed to deliver their services and on our instructions, currently including:
- Hosting and databases: Hostinger;
- SMS and verification services: Authentica and licensed SMS providers;
- Payment gateway: a licensed payment gateway, named when activated;
- Analytics: Google Analytics;
- Automatic reading of files and images: artificial-intelligence service providers, currently NVIDIA, which may also include Anthropic and Google Cloud. Only the content of the file or image is sent to them, for the purpose of extracting items or prices.
This list may change; you may request the current list via the privacy email.
c) With official authorities
Where there is a legal obligation or a request from a competent judicial or official authority.
d) On transfer of the business
In the event of a merger, acquisition or transfer of ownership of the Platform, provided the transferee is bound by this Policy.
5. Transfers Outside the Kingdom
Some of the providers listed (such as hosting, analytics and automatic reading) may process data on servers outside the Kingdom of Saudi Arabia. We carry out such transfers in accordance with the legal provisions governing the transfer of personal data outside the Kingdom, limited to the minimum data necessary for the purpose, with appropriate contractual and technical safeguards.
If you do not want your files processed through automatic reading services, you can enter items and prices manually without uploading any file.
6. Retention
We keep data for as long as needed to fulfil its purpose or as required by law, then securely destroy or de-identify it:
| Data | Retention period |
|---|---|
| Account data | While the account is active, then one year after closure for evidence and disputes |
| Requests, quotes and attachments | While the account is active, then two years after the request closes; request content remains de-identified in the public archive |
| Financial records and invoices | The periods required by applicable commercial and tax laws |
| Security, login and messaging logs | Twelve months |
| Verification codes | Minutes, until they expire |
| Contact-form messages and support tickets | Two years after closure |
| Publicly available business contact data (for invitations) | Until the business joins or objects, and at most one year |
7. Your Rights
Under the Personal Data Protection Law, you have the following rights:
- The right to be informed of how your data is collected and why — which this Policy fulfils;
- The right of access to your personal data held by us;
- The right to obtain a copy of it in a readable and clear format;
- The right to rectification, completion and updating;
- The right to request destruction once it is no longer needed, subject to what the law requires us to retain;
- The right to withdraw your consent at any time where processing is based on consent;
- The right to object to marketing messages and to the use of publicly available contact data to invite you to the Platform.
How to exercise your rights: from your account settings, or by writing to — from your registered email or mobile. We may need to verify your identity, and we will respond within the statutory period (thirty days), which may be extended where the law allows, with notice to you.
Complaints: if you believe our processing of your data breaches the law, you may lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA). We would appreciate the chance to address it first.
8. Marketing Messages
We send marketing messages only with your prior consent, and you may unsubscribe at any time from your account settings or through the method shown in the message. Service messages (verification codes, request and quote notifications, the daily digest) are not marketing; they are part of operating the service.
9. Data Security
We apply reasonable organisational and technical measures to protect data, including encrypted connections (HTTPS), hashed storage of login tokens, mobile verification codes, access controls limited to team members who need them, audit logs and backups.
No system is absolutely secure. Please keep your phone secure and never share verification codes with anyone — the Platform will never ask you for your verification code.
10. Cookies
| Type | Purpose | Can you refuse it? |
|---|---|---|
| Essential | Session and login, forgery protection (CSRF), language preference | No — the Platform cannot work without them |
| Analytics | Google Analytics to measure usage and improve the service | Yes — from the consent bar or your browser settings |
11. Data Breaches
If a personal data breach occurs, we will notify the competent authority within the statutory period (seventy-two hours of becoming aware of it), and notify affected users without delay where the breach is likely to harm them, explaining what they can do to protect themselves.
12. Children
The Platform is intended for businesses and adults and is not directed at anyone under eighteen. We do not knowingly collect their data.
13. External Links and Ads
The Platform may include links or ads leading to third-party websites. We are not responsible for their privacy practices; please review their policies.
14. Changes to This Policy
We may update this Policy and publish the new version with its effective date. We will notify you of material changes before they take effect through the Platform, your mobile or your registered email.
15. Contact
BinaQuote
Privacy email: —
National address: —
Contact page: binaquote.com/en/contact