Privacy Policy

BaridX is the controller of the personal data described in this policy.

For any question or request about your personal data, contact us at [email protected] or call 920019876.

Depending on how you use our services, we collect:

• Identity and contact data: name, mobile number, email address, and for business accounts the name and role of authorised persons.
• Address data: sender and recipient addresses, including the national address and map location you choose.
• Shipment data: contents, declared value, weight and dimensions, waybill and tracking records, photos taken at handover or packaging, and proof of delivery.
• Identification data needed for customs or regulation: such as an identity or iqama number, passport details, or a commercial registration or tax number, only where a customs authority or the law requires it.
• Payment and billing data: invoices, payment status, wallet transactions and, for refunds or cashout, the bank account (IBAN) you give us. Card payments are processed by licensed payment providers; we do not store full card numbers.
• Account and usage data: your sign-in activity, settings, and the requests and messages you send us, including recorded customer service calls where we tell you the call is recorded.
• Technical data: IP address, device and browser type, date and time of access, and pages visited, collected through server logs and the cookies described below.

We collect this data from you, from the person who books a shipment for you (for example, a sender who gives us your details as recipient), and from carriers and customs authorities involved in your shipment.

We use personal data only for specific purposes, and for each purpose we rely on a legal basis provided in the PDPL:

• To provide the service you request (booking, collection, carriage, customs clearance, delivery, returns, claims and customer support): this is necessary to perform our contract with you or to take steps you ask for before entering into it.
• To meet legal obligations (tax invoicing and record keeping, customs declarations, responding to competent authorities): this is required by law.
• To protect our legitimate interests (preventing fraud and misuse, securing our systems, improving our services, keeping records needed to establish or defend legal claims): we rely on our legitimate interest only where it does not override your rights, and never for sensitive data.
• To send you marketing messages: only with your consent, which you can withdraw at any time using the unsubscribe link or by contacting us. Withdrawing consent does not affect service messages about your shipments.

We do not use your personal data for a purpose that is incompatible with the purpose for which it was collected.

We do not sell personal data. We share only the data that is necessary, and only with:

• Carriers, delivery partners and our branches that collect, carry or deliver your shipment.
• Customs authorities and customs brokers in the origin and destination countries, as required to clear the shipment.
• Payment providers and banks to process payments, refunds and cashout.
• Technology service providers that operate systems for us, such as cloud hosting, messaging (text messages and email), mapping, accounting and invoicing, and tools that help our staff read documents or draft replies.
• Government and regulatory bodies, such as the Zakat, Tax and Customs Authority, the Transport General Authority or the courts, when the law requires it or they lawfully request it.

Service providers act on our instructions under written agreements that require them to protect the data and use it only for the service they provide to us.

International shipping requires us to send shipment data to carriers and customs authorities in the destination country, which is necessary to perform the service you request. Some of our technology service providers also host or process data outside the Kingdom.

We transfer personal data outside the Kingdom only in the cases and with the safeguards permitted by the PDPL and the Regulation on Personal Data Transfer outside the Kingdom, we transfer only the minimum data needed, and we assess the level of protection before transferring.

We keep personal data only for as long as it is needed for the purpose for which it was collected:

• Account data is kept while your account is open and for a limited period after it is closed, to settle any outstanding matters.
• Shipment, invoice and payment records are kept for the periods required by tax, customs and commercial record-keeping laws.
• Records needed to deal with a claim, complaint or legal dispute are kept until it is finally resolved.
• Marketing data is kept until you withdraw your consent.

At the end of the retention period we destroy the data securely or anonymise it so that it can no longer identify you.

Under the PDPL you have the right to:

1. Be informed of the legal basis and purpose for which your data is collected and processed — this policy is part of that.
2. Access your personal data held by us.
3. Obtain a copy of your personal data in a clear and readable format.
4. Ask us to correct, complete or update your personal data.
5. Ask us to destroy your personal data when it is no longer needed, unless we are required by law to keep it.
6. Withdraw your consent to processing that is based on consent, at any time. Withdrawal does not affect processing carried out before it.

These rights are subject to the exceptions provided in the PDPL and its regulations.

Send your request to [email protected] or through customer service at 920019876. We may ask you to verify your identity before acting on a request.

We respond within 30 days of receiving your request. If a request needs disproportionate effort, or you send several requests, we may extend this by up to a further 30 days, and we will tell you in advance with the reason. Requests are free of charge.

If you are not satisfied with our response, you may submit a complaint to the Saudi Data and Artificial Intelligence Authority (SDAIA), as provided in the PDPL and its regulations.

We apply technical and organisational measures appropriate to the nature of the data, including encryption of data in transit, access controls limited to staff who need the data for their work, logging of access, and confidentiality obligations on our staff and service providers.

If a personal data breach occurs, we notify the Saudi Data and Artificial Intelligence Authority within 72 hours of becoming aware of it where required, and we inform you without undue delay if the breach may cause you harm, telling you what happened and what you can do.

We use cookies that are strictly necessary for the website and the portal to work, such as keeping you signed in and remembering your language. With your consent we may also use analytics cookies to understand how our services are used. You can refuse or delete non-essential cookies through your browser settings or our cookie banner without affecting the essential functions.

Our services are intended for persons aged 18 and over. We do not knowingly collect personal data of children except where a parent or guardian provides it, for example as the recipient of a shipment, with the guardian's consent.

Our website may link to websites run by others. Their privacy practices are their own; please read their privacy policies.

We may update this policy when our practices or the law change. We publish the updated version on this page with its effective date, and we notify registered customers of material changes by email or in the portal before they take effect. Where a change requires your consent, we will ask for it.