This Privacy Policy describes how we collect and use information about you when you use our website www.mbuzz.com (and any components thereof, the "Site") or otherwise interact with us through it.
We are Mobile Phone Business Co., a closed joint stock company established in the Kingdom of Saudi Arabia ("KSA"), national unified establishment number (7018061007), with our office located at Building CS-01, Al-Raidah Digital City, Riyadh, KSA, referred to as "MBUZZ" (the "Company", "we", "us"), and we are the data controller for the processing of your personal data under the Saudi Personal Data Protection Law issued by Royal Decree No. (M/19) dated 09/02/1443H, as amended, and its Implementing Regulations (the "PDPL").
Please read this Privacy Policy carefully. By using the Site or submitting your data through it, you acknowledge that you have read and understood this Policy. If you do not agree to it, please do not use the Site or submit your data through it.
The Site is not intended for individuals under the age of 18, and we do not knowingly collect data relating to them.
We may modify this Policy from time to time, in which case we will update the "Last Updated" date at the top of this page. If we make material changes to the way we process your data, we will use reasonable efforts to notify you by appropriate means consistent with the PDPL. Your continued use of the Site after publication of an update constitutes acknowledgment of it.
You may provide some or all of the following information when using the Site’s features:
You may elect not to provide this information, but doing so may prevent you from using the related feature. We do not collect sensitive personal data through the Site, and we ask job applicants not to include in their CVs any data unnecessary for evaluating their application.
When you visit the Site, limited technical data is collected automatically, including your IP address, browser type, operating system, server logs, and the pages you access, for the purposes of operating, securing, and improving the Site.
3.4 In addition, we may use your information to comply with our legal obligations, enforce our policies, and protect or defend our rights and the rights of our users.
We commit that contact form data will not be used for any marketing purposes.
When you submit your data through the Site’s forms, we record your consent, including its timestamp, scope, and the version of this Policy you agreed to. You may withdraw your consent at any time — without affecting the lawfulness of processing carried out before withdrawal — via the unsubscribe link available in every marketing email, or by contacting us as set out in Section (12). Withdrawal of consent will not deprive you of any service that does not require such consent.
We do not sell or trade your personal data. Disclosure is limited to the following circumstances:
CVs are not shared with any party outside the Company.
The Site and its databases are hosted with AWS in the Mumbai region, Republic of India; accordingly, your data is stored and processed outside the KSA. This transfer is carried out in accordance with Article (29) of the PDPL and the Regulation on Personal Data Transfer Outside the Kingdom, and we take the steps required by law to ensure your data is treated securely and with a level of protection no less than that prescribed by the PDPL, through legally recognized appropriate safeguards.
We retain your data for as long as necessary to fulfill the purpose of its collection or to comply with legal requirements, as follows:
| Data Category | Retention Period |
|---|---|
| Contact form submissions | Twelve (12) months from receipt, then automatically deleted |
| Unsuccessful CVs and applications | Twelve (12) months from submission, then automatically deleted, unless you consent to retention for future opportunities |
| Newsletter subscription data | Until consent is withdrawn, with a withdrawal record retained as evidence of compliance |
Data is securely and irreversibly destroyed once the purpose of its collection has been fulfilled.
The PDPL grants you the following rights, subject to any limitations under applicable law:
To exercise any of these rights, contact us as set out in Section (12); we will respond within the statutory timeframes. You may also submit a complaint to us directly, or to the competent authority — the Saudi Data and AI Authority (SDAIA), contactable via www.sdaia.gov.sa.
A "cookie" is a small text file stored on your browser or device when you visit a website, helping the website recognize your device and remember your preferences on future visits. Similar technologies operating in a comparable manner may also be used.
| Cookie Name | Type | Purpose | Duration | Third Party |
|---|---|---|---|---|
| mbuzz_session | Strictly Necessary | Maintains the user’s secure session state across page requests | Session (expires when browser closes) | No (First-Party) |
| XSRF-TOKEN | Strictly Necessary | Protects forms against Cross-Site Request Forgery (CSRF) attacks | Session (2 hours) | No (First-Party) |
| cookie_consent_* | Strictly Necessary | Remembers the visitor’s choice on the consent banner (acceptance or rejection of non-essential cookies); the name automatically ends with the choice made | 1 year | No (First-Party) |
| Google Maps cookies (e.g., NID) | Functional / Third-Party | Operates the embedded map on the Contact page, provided by Google | Up to six (6) months | Yes (Google) |
You can control cookies through the consent banner displayed when visiting the Site (Accept / Reject / Customize), or through your browser settings by rejecting cookies or deleting stored ones. Blocking strictly necessary cookies may limit your ability to use certain Site features.
Our marketing emails may include measurement technologies indicating whether you opened a message or clicked its links, for the purpose of improving the effectiveness of our communications. You can prevent this by configuring your email program to disable the loading of remote images, or by unsubscribing entirely.
The Site may contain links to external websites or platforms operated by other parties, each governed by its own independent privacy policies and terms. We are not responsible for the privacy, security, or content of such websites, and the inclusion of a link does not constitute an endorsement of their content. We advise you to review their policies before submitting your data to them. The Site also contains a redirect link to the MBUZZ Technologies website, which operates within the Company’s ecosystem; data processing through it is governed by the privacy policy and terms published on it. The Site further embeds Google Maps to display our office locations, governed by its provider’s privacy policy.
We apply appropriate organizational, administrative, and technical measures to protect your data against loss, unauthorized access, disclosure, or alteration, proportionate to the nature of the data and the risks of its processing. However, no method of electronic transmission or storage is completely secure, and we recommend that you do not use unsecure channels to send us sensitive information.
For any inquiry regarding this Policy or to exercise your rights as a data subject, contact us at the dedicated mailbox: privacy@mbuzz.com
This Policy is issued in Arabic and English. In the event of any conflict or inconsistency between the two versions, the Arabic text shall prevail to the extent of the inconsistency.