Legal Documentation
Privacy Policy
At Benna Smart Information Technology Foundation, we are committed to protecting your personal data and ensuring transparency in how we collect, process, and secure your information in compliance with Saudi data protection laws.
1. Introduction
We, Benna Smart Information Technology Foundation, a company registered under Commercial Registration No. 4030478279 with registered address in Jeddah, Kingdom of Saudi Arabia ("us", "we", "our") respect the privacy of all our users and are committed to protecting personal data collected through benna.com.sa, its affiliate websites and associated mobile applications.
This privacy policy ("Privacy Policy") sets out the basis on which we collect and use any of your personal data, either collected directly from you or from other sources in connection with your access and use the Platforms or any services provided by us including newsletters and any social media functions on the Platforms (collectively, the "Services"). We understand the importance you place on your personal data, and we are committed to protecting and respecting your privacy. By using the Platforms and Services, you agree to the collection and handling of your personal data in accordance with this Privacy Policy. For the purposes of this Privacy Policy, the "Personal Data" shall mean and include the categories of data set out in Clause 2 of this Privacy Policy.
References to "user", "you" or "your" (or similar) are references to you as an individual or legal entity as the case may be.
The Platforms may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy notices/statements. When you leave our Platforms, we encourage you to read the privacy notice of every website you visit.
Legal Compliance
We are committed to compliance with the Saudi Personal Data Protection Law (PDPL) and all applicable regulations.
2. Children's Data
This Platform is not intended for anyone who has not attained age of majority as per the relevant applicable laws that govern such individual. However, it is not possible for us to prevent certain users, including children, from fraudulently representing their age in order to gain access to the Platforms. If you are a parent or guardian and believe we have collected information about your child, please contact us immediately as described in Clause 12 of this Privacy Policy.
Child Protection
If you are a parent or guardian and believe we have collected information about your child, please contact us immediately.
3. Data Collection
We collect your Personal Data in order to provide and continually improve the Platforms and Services. Personal Data refers to any information that can identify you as an individual based on the identifiers. It does not include anonymized data i.e. a dataset from which individual identifiers have been removed. We collect, utilize, store, and transfer various types of Personal Data about you, which are categorized as follows:
Identity data
includes details such as your first name, maiden name, last name, username or similar identifier, gender, title, nationality and date of birth/birthday;
Contact data
comprises your address, email address, and telephone number;
Transaction data
involves information about payments made to and by you including but not limiting to your modes of payments, as well as details about products and services you have purchased from us;
Technical data
encompasses your IP address, login data, browser type and version, operating system, mobile application version, time zone settings and location, device type, IDFA (in case of iOS users), as well as information about your general internet usage;
Profile data
includes your username and password, your interests, preferences, feedback, your preferred language and survey responses;
Purchase data
includes all the past orders and purchases you have made from the same user account, redemption information, fulfillment information and page-view information;
Browser data
relates to how you interact with our website, products, and services;
Marketing and Communications data
covers your preferences for receiving marketing materials from us and third parties, as well as your communication preferences.
Aggregated Data: Additionally, we collect, use, and share statistical or demographic information ("Aggregated Data"). Aggregated Data is data derived from your Personal Data but has been amended to remove personal identifiers and does not directly or indirectly reveal your identity.
4. Collection Methods
We use different methods to collect Personal Data from and about you including:
- Direct interactions: You may give us your Identity Data, Contact Data, and Profile Data by filling in forms or by corresponding with us. This includes Personal Data you provide when you create an account, place an order, subscribe to our publications, request marketing to be sent to you, or give us feedback.
- Automated technologies: As you interact with our Platform, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this Personal Data by using cookies, server logs and other similar technologies.
- Third parties or publicly available sources: We may receive Personal Data about you from various third parties including technical data from analytics providers, identity and contact data from publicly available sources.
5. Data Usage
We will only use your Personal Data when the law allows us to. Most commonly, we will use your Personal Data in the following circumstances:
- Performance of contract: Where we need to perform the contract we are about to enter into or have entered into with you.
- Legitimate interests: Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests.
- Legal obligation: Where we need to comply with a legal or regulatory obligation.
- Consent: Where you have given consent for us to process your Personal Data for a specific purpose.
Generally, we use your Personal Data to: process and deliver your orders; manage your account and relationship with us; recommend products and services that may interest you; improve our Platform, products and services; comply with applicable laws and regulations; detect, prevent and address fraud and security issues.
6. Data Disclosure
We may share your Personal Data with the parties set out below for the purposes described in this Privacy Policy:
- Service providers: who provide IT, system administration, payment processing, delivery and logistics, and customer service support.
- Business partners: including sellers and merchants who list products on our Platform.
- Professional advisers: including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.
- Government authorities: regulators and other authorities who require reporting of processing activities in certain circumstances.
We require all third parties to respect the security of your Personal Data and to treat it in accordance with the law. We do not allow our third-party service providers to use your Personal Data for their own purposes and only permit them to process your Personal Data for specified purposes.
7. Data Security
We have put in place appropriate security measures to prevent your Personal Data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your Personal Data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your Personal Data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected Personal Data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
8. Data Retention
We will only retain your Personal Data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for Personal Data, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means.
9. Your Legal Rights
Under certain circumstances, you have rights under data protection laws in relation to your Personal Data, including the right to:
Request access
to your Personal Data (commonly known as a 'data subject access request').
Request correction
of the Personal Data that we hold about you.
Request erasure
of your Personal Data in certain circumstances.
Object to processing
of your Personal Data where we are relying on a legitimate interest.
Request restriction
of processing of your Personal Data.
Request transfer
of your Personal Data to you or a third party.
Withdraw consent
at any time where we are relying on consent to process your Personal Data.
If you wish to exercise any of the rights set out above, please contact us using the contact details provided below.
11. Policy Changes
We may update this Privacy Policy from time to time. Any changes we make will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to this Privacy Policy.
12. Contact Us
If you have any questions about this Privacy Policy, or if you wish to exercise any of your rights as described in this Privacy Policy, please contact us at:
hussain@benna.com.sa
abdulaziz@benna.com.sa
Address
Makkah, Kingdom of Saudi Arabia
By using our platform, you agree to the collection and processing of your personal data in accordance with this Privacy Policy.
Last reviewed and updated: February 2026
Have a question?
Our support team is ready to answer all your questions regarding our Privacy Policy or data processing.