Saudi Arabia
Privacy Policy
How we collect, use, store, and protect your personal data under the Saudi Personal Data Protection Law (PDPL).
- Effective from
- 2026-04-01
- Version
- v1.0
- Last updated
- 2026-04-01
BidYo is committed to protecting the privacy and personal data of its users in accordance with the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations.
1. Scope of Application
This Privacy Policy applies to all users of the BidYo Platform and covers all personal data collected or processed through the mobile application or website.
2. Personal Data Collected
BidYo may collect and process the following categories of personal data:
- Identification data (name, national ID number, date of birth).
- Contact information (phone number, email address, physical address).
- Account and subscription information.
- Payment and billing data.
- Usage data and technical logs.
3. Purposes of Data Collection and Processing
Personal data is collected and processed for the following purposes:
- Creating and managing user accounts.
- Enabling subscriptions and auction participation.
- Processing payments and issuing invoices.
- Complying with legal and regulatory obligations.
- Improving service quality and user experience.
4. Legal Basis for Processing
Personal data is processed based on one or more of the following legal grounds:
- Explicit consent of the data subject.
- Performance of contractual obligations.
- Compliance with legal obligations.
- Legitimate interest, provided that such interest does not prejudice the rights of the data subject.
5. Data Sharing
BidYo does not share personal data except in the following cases:
- With service providers (payment processors, shipping providers, technical service providers).
- With competent government authorities upon lawful request.
- Within BidYo's affiliated group where operationally required, subject to data protection agreements.
6. Cross-Border Data Transfers
Personal data may be transferred or stored outside the Kingdom of Saudi Arabia in accordance with the PDPL, subject to the implementation of appropriate safeguards.
7. Data Retention
BidYo retains personal data for the period necessary to fulfill the stated purposes or as required by applicable laws. Upon expiration of the purpose, data is securely deleted or anonymized.
8. Data Subject Rights
Users have the following rights in accordance with applicable laws:
- The right to be informed.
- The right to access personal data.
- The right to correct personal data.
- The right to request deletion or destruction.
- The right to withdraw consent.
9. Data Security
BidYo implements appropriate organizational and technical measures to protect personal data against unauthorized access, loss, alteration, or unlawful disclosure.
10. Cookies
BidYo may use cookies to enhance user experience, analyze performance, and allow users to control cookie settings through their browser.
11. Amendments to This Policy
BidYo reserves the right to amend this Privacy Policy when necessary. Users will be notified of material changes.
12. Contact Information
For inquiries or requests related to personal data rights, please contact:
Email: privacy@bidyo.app