At Bebran Digital ("Bebran, we, us, or our"), we respect your privacy and are committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website sa.bebran.com, engage our digital marketing and web development services, or interact with us.
We process personal data in accordance with the Personal Data Protection Law of the Kingdom of Saudi Arabia (PDPL), issued by Royal Decree No. M/19 dated 9/2/1443H as amended, and its Implementing Regulations and Regulations on Personal Data Transfer outside the Kingdom, as overseen by the Saudi Data & AI Authority (SDAIA). For the purposes of the PDPL, Bebran Digital is the controller of your personal data.
Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the site or use our services.
1. Information We Collect
We collect information that identifies, relates to, or can reasonably be linked to an individual ("Personal Data").
Information You Provide Voluntarily: When you fill out a contact form, book a strategy call, sign up for a resource, or communicate with us via email, telephone, or WhatsApp, we may collect: contact identifiers (full name, business email address, phone number); company information (company name, website URL, industry, estimated marketing budget); and communication records (notes from strategy sessions, chat logs, project briefs).
Information Collected Automatically: When you visit our website, our servers and analytics tools automatically collect technical data, including log and usage data (IP address, browser type and version, operating system, referring URLs, pages visited, time spent on pages, diagnostic data); device information; and data from cookies, pixels, and similar technologies, as explained in our Cookie Policy.
We do not intentionally collect sensitive data (such as health, genetic, credit, religious, or security-related data, as defined in the PDPL) and ask that you do not send it to us. Providing your contact details is necessary for us to respond to your enquiry; if you do not provide them, we may not be able to assist you.
2. Use of Your Personal Data and Our Legal Basis
Under the PDPL, we must have a legal basis for every use of your Personal Data. We use it for the following purposes:
To provide and maintain our Service, including monitoring the usage of our website and client infrastructure. (Legal basis: contract; legitimate interests.)
To manage your enquiries and interactions, including contact form submissions, proposals, and communications. (Legal basis: your request and steps before entering a contract; legitimate interests.)
For the performance of a contract: the development, compliance, and delivery of service agreements, proposals, or contracts for marketing and web development services you have purchased or enquired about. (Legal basis: contract.)
To contact you by email, telephone, SMS, WhatsApp, or other electronic communication regarding updates, technical updates, or security notifications related to contracted services. (Legal basis: contract; legitimate interests.)
To provide marketing insights: news, offers, and information about services similar to those you have enquired about. We send promotional messages only with your prior consent, in line with the PDPL and Communications, Space & Technology Commission (CST) rules. You can withdraw consent at any time using the unsubscribe link or by contacting us.
To manage your requests, including support requests and data protection requests. (Legal basis: legal obligation.)
For business transfers: to evaluate or conduct a merger, restructuring, or sale of some or all of our assets. (Legal basis: legitimate interests.)
For analytics: to understand usage trends, measure campaign effectiveness, and improve our website and services. (Legal basis: consent, given through our cookie banner.)
3. Sharing Your Information & Service Providers
We do not sell, rent, or trade your personal data. We may share your personal data in the following situations:
Service Providers: We use third-party companies and individuals to help us operate our Service ("Service Providers"), such as hosting, CRM, email, scheduling, and payment providers. They process Personal Data only on our instructions, under written agreements that require them to protect it as the PDPL requires, and may not use it for any other purpose.
Analytics — Google Analytics: Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. It is only activated if you accept analytics cookies. You can withdraw consent at any time through the "Cookie Settings" link on our website or by installing the Google Analytics opt-out browser add-on. For more information, please visit the Google Privacy & Terms page.
Behavioral Remarketing: With your consent, we use remarketing services to show our ads on third-party websites after you visit our Service. Advertising and remarketing cookies are only set if you accept them in our cookie banner.
Google Ads: Google provides the Google Ads remarketing service. You can manage or turn off ad personalization through Google's My Ad Center / Ads Settings page. For more information, please visit the Google Privacy & Terms page.
Meta, Snapchat, and other platforms: Meta (Facebook and Instagram), Snapchat, TikTok, and X provide remarketing and conversion-measurement services. You can manage interest-based advertising through each platform's ad preferences. For more information, please see each platform's privacy policy.
For business transfers: We may share or transfer your personal data in connection with any merger, sale of company assets, financing, or acquisition of all or part of our business.
With Affiliates: We may share your information with our affiliates, including our parent company Bebran Digital Pvt. Ltd. in India, which provides delivery and support for our services. We require affiliates to honor this Privacy Policy.
With business partners: We may share your information with trusted business partners to offer you relevant products, services, or promotions, only with your consent.
With other users: When you share personal information in public areas, it may be viewed by others.
With your consent: We may disclose your personal data for any other purpose with your explicit consent.
4. Retention of Your Personal Data
We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, or as required by Saudi law (including commercial, tax, and zakat record-keeping requirements). When it is no longer needed, we securely destroy or anonymize it, as the PDPL requires. As a guide:
Enquiries that do not become clients: up to 24 months from last contact.
Client records, contracts, and invoices: the duration of the engagement plus the period required under Saudi commercial and tax law (generally up to 10 years).
Analytics data: no longer than 14 months.
5. Transfer of Your Personal Data Outside the Kingdom
Your information may be processed at our operating offices and wherever the parties involved in processing are located, including India and the United States.
We transfer Personal Data outside the Kingdom only as permitted by the PDPL and the Regulations on Personal Data Transfer outside the Kingdom. This means the destination provides an adequate level of protection, or we use an approved safeguard such as Standard Contractual Clauses issued by SDAIA. We transfer only the minimum data necessary. You can request details of these safeguards by contacting us.
6. Disclosure of Your Personal Data
Business Transactions: If we are involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.
Law Enforcement & Legal Requirements: We may disclose your Personal Data if required by Saudi law or in response to valid requests by competent public authorities (e.g. a court or a government agency), or where necessary to:
Comply with a legal obligation.
Protect and defend the rights or property of the Company.
Prevent or investigate possible wrongdoing in connection with the Service.
Protect the personal safety of Users of the Service or the public.
Protect against legal liability.
7. Security of Your Personal Data
The security of your Personal Data is important to us. We use appropriate organizational, administrative, and technical measures to protect it, but no method of transmission over the Internet or electronic storage is 100% secure. If a personal data breach occurs that may harm you, we will notify SDAIA within 72 hours of becoming aware of it and inform you without undue delay, as the PDPL requires.
8. Cookies, "Do Not Track" and Your Choices
We do not currently respond to browser "Do Not Track" (DNT) signals. Instead, you control non-essential cookies through our cookie banner and the "Cookie Settings" link on our website. Analytics and advertising cookies are only used with your consent. See our Cookie Policy for details.
9. Your Rights Under the PDPL
Under the Personal Data Protection Law, you have the following rights:
The Right to Be Informed: You have the right to know how and why we collect and process your personal data, which this Privacy Policy explains.
The Right of Access: You can request access to, and a copy of, the personal data we hold about you, in a clear and readable format.
The Right to Correction: You can ask us to correct, complete, or update inaccurate or incomplete information.
The Right to Destruction: You can ask us to destroy your personal data when it is no longer needed, subject to legal retention requirements.
The Right to Withdraw Consent: You can withdraw your consent at any time where we rely on consent, without affecting processing carried out before withdrawal.
To exercise any of these rights, please contact us at info@bebran.com. We will respond within 30 days of receiving your request, extendable where permitted by the PDPL Implementing Regulations, in which case we will tell you. We may ask you to verify your identity before responding.
Right to complain: If you are unhappy with how we handle your personal data, please contact us first. You also have the right to lodge a complaint with the Saudi Data & AI Authority (SDAIA), the competent authority under the PDPL.
10. Children's Privacy
Our services are designed for business professionals and commercial enterprises. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or legal guardian and believe your child has provided us with personal data, please contact us so we can destroy it.
11. Links to Other Sites
Our Site may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
12. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will post any updates on this page and revise the "Last Updated" date at the top. Where changes are significant, we will notify you by email or through a notice on our website. Changes are effective when they are posted on this page.
13. Contact Us
If you have any questions about this Privacy Policy, please contact us:
Company Name: Bebran Digital Pvt. Ltd. (Saudi Arabia Operations)
Official KSA Address: King Abdulaziz Road, Spring Plaza, 2nd Floor, Riyadh 13315, Kingdom of Saudi Arabia
Commercial Registration (CR) No.: [to be confirmed]
