BaridX Privacy Policy
BaridX (“Company,” “we,” “us,” or “our”) is committed to protecting the personal data of its customers, partners, website visitors, and all stakeholders. This Privacy Policy outlines how we collect, use, store, share, and protect your personal data in accordance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia and applicable international best practices.
We process personal data based on:
Your explicit consent, where required;
Contractual necessity, when providing our logistics, shipping, and delivery services;
Legal obligations, as per relevant Saudi regulations;
Legitimate interests, such as fraud prevention, service improvement, and customer support.
We may collect the following categories of personal data:
a. Identification Data
Full name, ID/Iqama number, passport number (for clearance or legal requirements)
b. Contact Data
Phone number, email address, physical address
c. Transactional Data
Order history, tracking information, payment details, shipment value
d. Technical Data
IP address, browser type, operating system, device identifiers
e. Location Data
Geographic location for delivery purposes (via app or browser)
f. Communication Records
Chat logs, call recordings (where permitted), and customer service correspondence
We collect your data for the following purposes:
To fulfill logistics and shipping contracts
To process payments and generate invoices
To track shipments and update you on delivery status
To comply with customs, clearance, and government authority requirements
To manage user accounts and provide technical support
To conduct marketing (with your prior consent)
To detect fraud and prevent misuse of our services
To comply with legal, regulatory, and tax obligations under Saudi law
Your data may be shared under the following conditions:
With Government Authorities: Customs, ZATCA, SFDA, and other regulators, as required by law.
With Third-Party Partners: Shipping carriers, service providers, and payment gateways under strict data processing agreements.
With Affiliates: Within BaridX Group companies for internal operational needs.
Upon Legal Request: When compelled by judicial or regulatory authorities under Saudi jurisdiction.
We do not sell or rent your personal data.
We retain personal data only for as long as necessary to fulfill the purpose it was collected for, or as required by applicable Saudi regulations (e.g., ZATCA's 6-year recordkeeping rule for invoicing). Upon expiry, data will be securely deleted or anonymized.
We implement appropriate technical and organizational measures to protect your data, including:
Encryption of sensitive data during storage and transit
Regular system audits and penetration testing
Access controls and employee confidentiality agreements
Secure data storage in compliance with the National Cybersecurity Authority (NCA) standards
You have the following rights, in line with the PDPL:
Right to be informed about data collection and use
Right to access your data
Right to correct or update inaccurate data
Right to withdraw consent (where applicable)
Right to request deletion, subject to regulatory exceptions
Right to file a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA)
You may exercise these rights by contacting us via the methods below.
If your data is transferred outside the Kingdom of Saudi Arabia, it will be done so only when:
Necessary for service delivery (e.g., global shipping routes)
Protected under equivalent or approved data protection standards
