Privacy Policy

Introduction

At Bab Al Jannah Equipment Rental (owned by Rafaa Majal Al Abraj Al Mutakamilah), we take your data privacy very seriously. This Privacy Policy explains how we collect, use, and protect your personal information when you use our platform.

The platform complies with the Saudi Personal Data Protection Law, the E-Commerce Law, and all relevant regulations.

                        
                        Important Note: By using the platform, you agree to the collection and processing of your personal data in accordance with this policy.
                    

Data We Collect

We collect the following types of data:

Registration Data: Full name, email, phone number, address, National ID (for individuals) or Commercial Register and Tax Number (for companies).
Transaction Data: Rental requests, contracts, payments, chat history, ratings.
Technical Data: IP address, browser type, operating system, device data, activity logs.
Geolocation: When you use location services to start a rental.

                        
                        Minimum Principle: We collect only the data necessary to provide the requested services.
                    

How We Use Your Data

We use your data for the following purposes:

Providing rental services and managing contracts and payments.
Improving user experience and developing the platform.
Communicating with you regarding requests and notifications.
Complying with legal and regulatory requirements (e.g., tax invoices).
Preventing fraud and ensuring platform security.

Data Sharing with Third Parties

We do not sell or rent your personal data to any third party. We may share your data only in the following cases:

With suppliers and customers: To share information necessary to complete rental operations (name, phone number, work location).
With service providers: Such as payment gateways (HyperPay, Mada, STC Pay) and email services, only to provide the required services.
Government entities: When legally requested (e.g., ZATCA, Ministry of Commerce).

                        
                        We commit not to share your data: With any third party for marketing purposes without your explicit consent.
                    

Data Protection and Security

We apply advanced security measures to protect your data:

Using HTTPS protocol to encrypt all transmitted data.
Storing data on secure servers protected by firewalls and monitoring systems.
Restricting data access to authorized personnel only.
Encrypting passwords using secure algorithms.
Regular security reviews of the system.

                        
                        Note: Despite our efforts, absolute security of data transmitted over the internet cannot be guaranteed.
                    

Data Retention Period

We retain your data for the period necessary to achieve the purposes mentioned in this policy, or in accordance with legal requirements. Generally:

Account Data: For the duration of your platform usage, and until you request account deletion.
Transaction Records: For 10 years in accordance with ZATCA requirements.
Communication Data: For 5 years for technical support purposes.

Your Rights Regarding Your Data

You have the following rights under the Personal Data Protection Law:

Right of Access: Request a copy of your personal data stored with us.
Right of Correction: Request correction of any inaccurate data.
Right of Deletion: Request deletion of your data (subject to legal obligations).
Right of Objection: Object to the processing of your data for specific purposes.
Right of Portability: Request transfer of your data to another service provider.

To exercise your rights: Contact us via email: info@rmaaco.sa

Cookies

We use cookies to improve your experience on the platform. Types include:

Essential: Necessary for platform operation (e.g., remembering login status).
Analytical: To understand how you use the platform and improve it.
Preferences: To remember your settings and preferences (e.g., language).

You can control cookies through your browser settings.

Children's Privacy

We do not target children under 18 years of age. If you are under this age, please do not use the platform or provide any personal data. If we learn that we have collected data from a child under 18, we will delete it immediately.

Privacy Policy Updates

We may update this Privacy Policy from time to time. You will be notified of any material changes via email or a notification within the platform. Continued use of the platform after the update constitutes acceptance of the new policy.

Last Updated: 2026-08-24