Privacy Policy

1. Who we are

Briventa Company, commercial registration no. 7051831910, operates buy.jmaa.sa (the "Platform") and decides how personal data collected through it is used. Contact for privacy matters: info@jmaa.sa.

The Platform serves businesses. Most of what we hold is company information; this policy covers the personal data of the individuals who use the Platform for their companies.

2. What we collect

• Account details: name, job title, work email, mobile number, language.
• Signatory details: name, title, proof of authority, and the record of each signature.
• Order and delivery details: contact person and phone number at a delivery address.
• Payment records: payment reference, amount and bank transfer proof. We do not store card numbers.
• Usage records: IP address, device and browser, sign-in times, acceptance and audit records.
• Messages: clarification threads, support requests and emails.

3. Why we use it

• To create and manage accounts and verify companies and signatories.
• To run the service: item lists, agreed prices, orders, payments, delivery and invoices.
• To meet legal duties, including tax and commercial record-keeping.
• To keep the Platform secure and prevent fraud.
• To send service messages about your account and orders.
• To improve the Platform, using aggregated information where possible.

4. Who we share it with

• Suppliers and carriers: the delivery contact's name and phone number, only to deliver an order.
• Service providers working for us: hosting, email, payment processing and electronic signature.
• Professional advisers, under a duty of confidentiality.
• Authorities, where the law requires it.

We do not sell personal data.

5. Transfers outside Saudi Arabia

Where personal data is stored or processed outside Saudi Arabia, we transfer it only as the Personal Data Protection Law and its transfer rules allow, with appropriate safeguards.

6. How long we keep it

We keep personal data while your account is active and afterwards for as long as the law requires us to keep commercial, tax and contract records. We then delete or anonymise it.

7. Your rights

Under the Personal Data Protection Law you may ask to be informed about how your data is used, to access it or receive a copy, to correct it, to have it destroyed when it is no longer needed, and to withdraw consent you have given. Write to info@jmaa.sa. You may also complain to the Saudi Data and AI Authority.

8. Security

We use encryption in transit, role-based access, private file storage and audit logs. If a breach affects your data, we will notify the authority and you as the law requires.

9. Cookies

The Platform uses essential cookies to keep you signed in and remember your language. With your consent, Google Analytics uses optional cookies to measure visits to our public pages. Private portal pages and form contents are excluded. Optional tracking stays off until you accept. You may reject optional cookies or withdraw consent at any time through Cookie preferences. Google explains its data use at https://policies.google.com/technologies/partner-sites.

10. Changes

We will post any update here and notify users through the Platform before it takes effect. This policy is published in Arabic and English; if they differ, the Arabic text prevails.