Privacy Policy – Bajri Platform

Last Updated: 02 August 2026

Dream Valley Company, the owner of the Bajri Digital Notification Platform, hereinafter referred to as the "Service Provider" or "we," is committed to protecting the privacy of your personal data and processing it in accordance with the highest standards of security and compliance with the applicable laws and regulations of the Kingdom of Saudi Arabia.

1. What Data Do We Collect?

We collect and process only the minimum data necessary to provide the service, including:

• Device Identifier and Notification Token: A technical identifier used to recognize your browser or device and deliver notifications to it.
• Technical Access Data: Such as the time a notification is received and the type of browser used, for the purpose of ensuring technical performance and providing support.

2. Purpose of Data Processing

Your data is processed solely for the following purposes:

• To provide you with instant notifications informing you that your order or reservation with the "Subscriber" is ready.
• To enable the Subscriber to manage notifications and monitor the operational performance of the service through an administrative dashboard.
• To send notifications and marketing or promotional messages relating to services, offers, and updates concerning the Platform, stores, or participating merchants.
• To improve the efficiency of the Platform and provide the necessary technical support.

3. Legal Basis for Processing

Your data is processed on the basis of:

• Your Explicit Consent: Provided when you activate the service and click the "Notify Me When Ready" button.
• Performance of a Contract: To enable the Subscriber, being the merchant, to fulfil its obligation to notify you when your order is ready.

4. Data Sharing and Disclosure

We are fully committed to maintaining confidentiality and do not sell or lease technical data to any third party.

Technical data is used and processed for the purpose of sending operational notifications, updates, and marketing or promotional messages relating to the Platform, or to offers and updates concerning stores and participating merchants.

The technical processing and transfer of data is limited exclusively to the following scope:

• Software Delivery Service Providers: Technical identifiers may be transmitted through approved software delivery servers and services operated by browsers and operating systems for the technical delivery of service-related and marketing notifications to your device.
• Regulatory Compliance: Limited disclosure may be made to governmental or regulatory authorities where required by applicable law or by a valid court order in the Kingdom of Saudi Arabia.

5. Data Storage and Security

Data is stored and processed through secure cloud infrastructure hosted locally or internationally by approved service providers.

We apply advanced encryption standards for data at rest and in transit, in compliance with the provisions of the Saudi Personal Data Protection Law and its Implementing Regulations concerning cross-border data transfers.

We implement strict technical and administrative measures to prevent unauthorized access to or disclosure of data.

Data Retention Period

The notification identifier is retained only for the duration during which the service remains active.

Inactive identifiers are automatically excluded and deleted from our databases when systems are updated, when a technical response indicates that the token has expired, or immediately upon receipt of an explicit deletion request.

6. Your Rights Under the Personal Data Protection Law

As a "Data Subject," you have the following rights:

• Right to Be Informed: To know what technical data we collect, the purposes of processing, and the legal basis for such processing.
• Right of Access: To access the technical identifiers associated with your device that are available to us and to obtain a copy of them.
• Right to Rectification: To request the update or correction of any technical data associated with the service if it is inaccurate.
• Right to Withdraw Consent: You may withdraw your consent to receive operational or marketing notifications at any time, either by disabling notification permissions through your browser or device settings, or by submitting a formal consent withdrawal request by email. We will cease processing immediately.
• Right to Destruction or Deletion: To request the permanent deletion and destruction of your device identifier and the related technical data from our databases once the purpose for processing has ended or consent has been withdrawn, unless a legal requirement obliges us to retain such data.
• Right to Submit a Complaint: To submit a complaint to the Saudi Data and Artificial Intelligence Authority, SDAIA, in the event of any breach of the applicable law, through the Authority's official website: sdaia.gov.sa.

Procedure for Exercising Rights and Statutory Response Period

To exercise any of the rights set out above, you may submit a written request through the email address provided in Section 9. The Platform shall respond to the request and take the necessary action within a period not exceeding thirty (30) calendar days from the date of receipt.

7. Response to Data Incidents and Breaches

Dream Valley Company is committed to applying the highest security and encryption standards to protect data and technical identifiers. In the event of any security incident or data breach that may cause harm to personal data, the Platform shall:

• Notify the Saudi Data and Artificial Intelligence Authority, SDAIA, of the incident within the statutory period of seventy-two (72) hours from the time the Platform becomes aware of the incident.
• Notify the Data Subject of the incident and the measures taken to mitigate its effects without undue delay, where the breach poses a high risk to the Data Subject's data or rights.

8. Amendments to This Policy

The Service Provider may amend this Policy in accordance with technological and legislative developments in the Kingdom of Saudi Arabia. Users will be notified of any material changes.

9. Contact Us