Privacy Policy

This policy explains how data is processed when you visit the NBEH website, contact us, or use our services inside online stores. The service is operated by the entity shown in the approved company details on this page.

Draft for legal review — no version has been approved for publication yet

1. Scope

This policy covers data about website visitors, store representatives, and people who contact us. It also explains how data related to conversations that take place through NBEH inside stores is processed, depending on the nature of the enabled service.

2. Data processing roles

For data we collect directly to manage communication, accounts, and the service, we determine the processing purposes related to that relationship. When we process store customers’ conversations on behalf of a merchant, the roles and responsibilities of the parties are determined by the nature of the processing and the agreement governing the service.

3. Data and its sources

Data needed for the service may include contact details you provide, such as name, email, mobile number, and store link; account information; the content of questions and answers inside NBEH; and technical logs needed to operate and protect the service.

Product information comes from the merchant or from the integration they enable, according to the permissions and scope available.

4. Purposes of processing

We use service-related data to receive requests and inquiries, operate the assistant, manage the relationship with the merchant, review enabled conversations and recommendations, handle faults, and protect the service.

5. AI and service providers

Some NBEH functions use AI services and supporting technical infrastructure. Data needed to perform a function may be sent to the provider in use, according to the service settings and the contracts governing them.

6. Disclosure and transfer

Disclosure is limited to legitimate cases and purposes related to the service or legal obligations. Where processing takes place outside Saudi Arabia, its arrangements are explained and the relevant regulatory requirements are observed.

7. Retention and disposal

We retain data for as long as needed for the specified purpose of processing, or for the period required by legal obligations. When it is no longer needed, disposal or anonymization measures are taken according to the nature of the data and the applicable controls.

8. Data subject rights

You may ask how your data is processed, access it and obtain a readable copy, correct, complete, or update it, request the disposal of data that is no longer needed, and withdraw consent where processing is based on it, subject to the applicable provisions and exceptions.

For requests concerning data we process on behalf of a store, we may coordinate with the merchant to verify authorization and fulfil the request, without prejudice to the data subject’s rights.

9. Exercising rights and complaints

Requests can be sent to Founder@nbeh.io with the information needed to identify the request and verify the requester, without sending passwords or unnecessary sensitive documents.

Rights requests are handled within the statutory period, which does not exceed 30 days, with a possible extension in the cases allowed by law of no more than 30 additional days; the data subject is notified of the extension and its reasons.

Data subjects may also file a complaint with the Saudi Data & AI Authority (SDAIA) through its official channels.

Data deletion request page

10. Cookies and external links

The cookies and local storage used are limited to what is needed to operate the website and the service. Any measurement tools adopted later will be announced on this page, with their purposes and the controls available.

Links on the website may lead to external services, including social media accounts, whose processing is governed by their own policies.

11. Security and updates

Appropriate measures are applied to protect data according to the nature of the processing. This does not mean an absolute guarantee against all risks.

This policy is reviewed when practices change, its date is updated when a new version is approved, and changes are notified when required.

12. Contact about privacy or data

The entity responsible for this policy: مؤسسة صالح علي حمد المزيني للتجارة (Saleh Ali Hamad Al-Muzaini Trading Establishment; Unified National Number 7017150421).

To contact us about privacy or data: WhatsApp +966 53 488 0713, or email Founder@nbeh.io.