3. Personal information we collect about you (PIPEDA)

According to the Canadian personal information protection and electronic documents act, 2000 (PIPEDA), “personal information” means information about an identifiable individual. The information you provide to Baetoti is considered personal information it is possible to relate it back to you through your name, address, e-mail address, telephone number and any other information that can identify you.

If information cannot be related to an identifiable individual it is considered anonymous information. Whenever possible, Baetoti works with anonymous information. This privacy statement does not apply to anonymous information.

4. Types of data we collect from you

Personally Identifiable Information (PII). "Personal Information" is information about an identifiable individual, such as your name, email address, telephone number, payment card information, date of birth, product/buying preferences. We maintain one or more databases to store your Personal Information and may retain it as reasonably required to serve you and operate the Service. Personal Information that we collect depends on how you use the Service, including creating an online account with us, making a purchase or a return, contacting us via any customer service method, signing up to receive promotional emails or other communication, participating in customer research, surveys, contests or promotions, or otherwise communicate information to us. Providing your Personal Information to us is your choice. If you choose not to provide us with certain Personal Information, you may not be able to take advantage of certain features of the Service; and

Sensitive PII. In certain circumstances, such as when subscribing for our service, you may provide a Government identifiers, such as national identification numbers and driver’s license numbers, credit, debit, or payment account number, or other payment information to our payment gateway provider which we recognize as more sensitive than other PII.  

Anonymous Data. Some of the Data that we acquire cannot identify, distinguish or trace you or your Device, even if combined with other identifying information, and some Data that could be considered PII when combined with other identifying information is not used in a way that identifies, distinguishes or traces you or your Device, but is instead used in an anonymous way, often aggregated with other anonymous Data about other users.

‍

5. Sweepstakes and Other Promotions

From time to time, we may offer sweepstakes or other promotions on our website and platform. If you enter a sweepstakes or promotional contest, we will ask you to provide information about yourself (such as your name, phone number, address, date of birth, and email address). Among other things, we will use this information to contact you if you win, and we may also use this information for marketing purposes. We may share this information with any co-sponsor of the contest or sweepstakes; we will identify the co-sponsor in the contest rules. If you do not want us to collect the information requested in the contest or sweepstakes registration form or to provide it to co-sponsors, please do not enter the contest or sweepstakes.

6. Online Surveys

From time to time, we survey our users to measure their satisfaction with our website and platform and other sites and to help us learn more about our audience and how they interact with our website and platform. Third-party research firms often conduct these surveys on our behalf. We use the survey results to help us improve the services we offer to you. We will take the information you provide and aggregate it on an anonymous basis with data collected from other survey participants. We may use and disclose that pool of anonymous information as we see fit, without identifying you personally.

7. How we collect your data

When you access or use our website, we automatically collect information about you, including but not limited to:

• Log Information: We log information about your use of the Services, including the type of browser you use, access times, pages viewed, your IP address, your general location and the page you visited before navigating to our Services.
• Transactional Information: When you make a purchase for a service, we collect information about the transaction, such as purchase details, purchase price, and date and location of the transaction. We or a designated third party may collect payment and credit card information when you subscribe to our paid Services or purchase additional services.
• Device Information: We collect information about the computer or mobile device you use to access our Services, including the hardware model, operating system and version, unique device identifiers and mobile network information.
• Information Collected by Cookies and Other Tracking Technologies: We and our service providers use various technologies to collect information, including cookies and web beacons. Cookies are small data files stored on your hard drive or in device memory that help us improve our Services and your experience, see which areas and features of our Services are popular, and count visits. Web beacons are electronic images that may be used in our Services or emails and help deliver cookies, count visits and understand usage and campaign effectiveness. For more information about cookies, and how to disable them, please see or visit our “Cookie Policy”
• Clickstream Data: As you use the Internet, a trail of electronic information is left at each website and platform you visit. This information, sometimes referred to as "Clickstream Data," can be collected and stored by a website and platform’s server. For example, Clickstream Data can tell the type of computer and browsing software you use and the address of the website and platform from which you linked to the website and platform. The Website and platform may collect and use Clickstream Data as a form of aggregate information to anonymously determine how much time visitors spend on each page of our website and platform, how visitors navigate throughout the Website and platform and how we may tailor our website and platform to better meet the needs of visitors. This information often will be used to improve our Website and platform and our services. Any collection or use of clickstream data will be anonymous and aggregated and will not intentionally contain any Personal Information.

Be Careful Publicly Posting PII. Please be aware that Content and PII that you disclose in publicly accessible portions of the Service may be available to other users, and may also be made available outside the Service by third parties, so you should be mindful of all PII, especially sensitive PII, that you may wish to post.

8. Cookies and other technologies

Our platforms use cookies and similar technologies to distinguish you from other users of our platforms. This helps us to provide you with a good experience when you browse our platform and also allows us to improve our services. Most browsers automatically accept cookies and similar technologies, but if you prefer, you can change your browser to prevent that and your help screen will tell you how to do this. We also give you information about disabling cookies. However, you may not be able to take full advantage of our web site if you do so.

A number of cookies and similar technologies we use last only for the duration of your web or app session and expire when you close your browser or exit the site. Others are used to remember you when you return to the platform and will last for longer.

We use these cookies and other technologies on the basis that they are necessary for the performance of a contract with you, or because using them is in our legitimate interests (where we have considered that these are not overridden by your rights), and, in some cases, where required by law, where you have consented to their use.  

9. How we use your information

1. We use the information we collect to provide, maintain and improve our Services, such as to administer your account and to provide you with insights to help you optimize your use of our platform.
3. We may also use the information we collect to:
4. Process and deliver the products you requested, process transactions and send you transaction-related information, including confirmations and invoices,
5. Send you technical notices, updates, security alerts and support and administrative messages;
6. Respond to your comments, questions and requests and provide customer service;
7. Communicate with you about products, services, offers, promotions, rewards and events offered by Baetoti and others, and provide news and information we think will be of interest to you;
8. Monitor and analyze trends, usage and activities in connection with our Services;
9. Audit related to a current interaction with the consumer and concurrent transactions, including but not limited to, counting ad impressions of unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards; 
10. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and prosecute those responsible for that activity; 
11. Debug to identify and repair errors impairing existing intended functionality; 
12. Undertake internal research for technical development and demonstration; 
13. Undertake activities to verify or maintain the quality or safety of a service owned, manufactured, manufactured for, or controlled by Baetoti, and to improve, upgrade, or enhance the service owned, manufactured, manufactured for, or controlled by Baetoti; 
14. Detect, investigate and prevent fraudulent transactions and other illegal activities and protect the rights and property of Baetoti and others;
15. Personalize and improve the Services and provide advertisements, content or features that match user profiles or interests; and
16. Facilitate contests, sweepstakes and promotions and process and deliver entries and rewards; and

Please keep in mind that Baetoti does not trade or sell your personal information.

10. Transfer of Information to Saudi Arabia and Other Countries

In order to provide you with the Services you purchased or that you request from us, information about you may be transferred to Baetoti locations in Saudi Arabia as well as countries where our service providers may be based. In some cases, information about you may be transferred to or accessed from other countries, including when you consent and allow us to do so, where it is required in order for us to provide Services to you and when we need to do so to provide functions like product support, troubleshooting and gaining insights into the usage patterns of our Services. When information about you is transferred to countries other than your home country, you may not have the same rights and protections as you do under local law. Any international transfers of such information will be done in accordance with applicable law. 

11. California / Delaware Do Not Track Disclosures

Various third parties are developing or have developed signals or other mechanisms for the expression of consumer choice regarding the collection of information about an individual consumer’s online activities over time and across third-party web sites or online services (e.g., browser do not track signals).  Currently, Baetoti do not monitor or take any action with respect to these signals or other mechanisms.

12. Where we store your information

Baetoti has a data privacy officer who is responsible for ensuring that your personal information is collected, used, disclosed (shared) and retained in compliance with applicable privacy regulations. However, the data that we collect from you may be transferred to, and stored at, a destination outside the European economic area ("EEA") that may not be subject to equivalent data protection law.

Where your information is transferred outside the EEA, we will take all steps reasonably necessary to ensure that your data is subject to appropriate safeguards, such as relying on a recognized legal adequacy mechanism, and that it is treated securely and in accordance with this privacy policy.

13. How we secure information we collect

We use standard ISO 27001 security technology to protect user data on the marketplace and have put in place organizational measures to secure the information we collect on the Application. While we implement safeguards designed to protect your information, no security system is impenetrable and due to the inherent nature of the internet, we cannot guarantee that data, during transmission through the internet or while stored on our systems or otherwise in our care, is absolutely safe from intrusion by others.

14. Provision of Personal Data and failure to provide Personal Data

Where we need to collect Personal Data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with our services). In this case, we will not be able to provide services to you

15. How is personal information disclosed?

Except as specified in this Privacy Policy, Baetoti.com does not rent, sell, trade or disclose your Personal Information to third parties without your prior consent. Baetoti.com may, however, use, process and disclose Personal Information to:  

1. send information to customers about orders;

2. fulfill your orders;

3. process and collect your payments;

4. send you promotional marketing material about Baetoti.com company and partners;

5. produce content for our activity feed feature;

6. customize, analyze, adjust and improve the Service to better meet your needs;

7. execute a sweepstakes, contest or other promotion;

8. enforce Baetoti.com agreements with you;

9. provide you with important administrative information regarding the Service, such as changes to this Privacy Policy and our Terms of Use, rewards and loyalty programs and other policies;

10. prevent fraud and other prohibited or illegal activities; and

11. Comply with potential requests of law enforcement or data protection agencies.

We may use your de-identified Personal Information to prepare anonymized, aggregated data about our users ("Anonymized Data"). We may provide third parties with Anonymized Data in describing the Service to prospective partners, advertisers and other third parties, and for all other lawful purposes. As communicated to third parties, the Anonymized Data does not include any information permitting the recipient to identify, locate or contact you

16. How long we keep information

How long we keep information we collect about you depends on the type of information, as described in further detail below.  After such time, we will either delete or anonymize your information or, if this is not possible (for example, because the information has been stored in backup archives), then we will securely store your information and isolate it from any further use until deletion is possible. 

17. Blogs, Reviews and Forums

The Service also may from time to time offer publicly-accessible blogs, customer reviews or forums. Any information you provide in these areas may be read, collected and used by others who access them. To request removal of your Personal Information from blogs, customer reviews or forums, please contact us. Please note that in some cases we may be unable to remove your Personal Information.

18. Marketing information

if you have elected to receive marketing emails from us, we retain information about your marketing preferences for a reasonable period of time from the date you last expressed interest in our services, such as when you last opened an email from us or ceased using your Baetoti materials.  We retain information derived from cookies and other tracking technologies for a reasonable period of time from the date such information was created.   

19. How to access and control your information

You have certain choices available to you when it comes to your information. Below is a summary of those choices, how to exercise them and any limitations.

20. Consent to provide personal information

Unless otherwise stated, the services featured on this website and App are only available within SAUDI ARABIA, or in relation to postings from SAUDI ARABIA. All advertising is intended solely for SAUDI ARABIA market. You are solely responsible for evaluating the fitness for a particular purpose of any downloads, programs and text available through this site. Redistribution or republication of any part of this site or its Content is prohibited, including such by framing or other similar or any other means, without the express written consent of the Baetoti The Baetoti does not warrant that the service from this site will be uninterrupted, timely or error free, although it is provided to the best ability. By using this service you thereby indemnify Baetoti, its employees, agents and affiliates against any loss or damage, in whatever manner, howsoever caused.

We inform you when we need to collect your personal information and why we are collecting it.  

Baetoti only collects information from you after you give us your consent. The only exception is when the law requires the collection, use or disclosure of a person’s information without consent.  

Providing us with personal information is entirely voluntary. By giving us your personal information, you consent to allow us to use and disclose your personal information as described to you. If you do not agree with the use and disclosure of your information, please do not provide us with your personal information.  

Some of our services can only be offered if you provide personal information so, if you choose not to provide your information, we may not be able to provide you with those services.  

You may withdraw consent at any time. You will be informed of the effect that withdrawing your consent will have. Your withdrawal of consent will only apply from the point that you withdrew consent. Your withdrawal of consent is not retroactive.  

This means we will not remove information that has already been disclosed.

21. Transfer to third parties

To facilitate the purposes of our website, personal data may be shared in the normal course and scope of business with third parties to whom Baetoti has chosen to outsource work. In the event that personal data is transferred to a third party, Baetoti requires in its agreements with third parties that adequate privacy precautions are taken that provide the same level of privacy protection as is required by the principles of the privacy shield. In certain circumstances, Baetoti may remain responsible and liable under privacy shield principles if such third parties process the personal data in a manner inconsistent with the privacy shield principles. Types of Third-party service providers are as follows:

1. Service Providers: We share personal information about you with service providers that help with our business activities, including drivers’ service providers, billing and payment card processors, marketing and advertising service providers, and companies that help us improve our products and services.  

2. Products Offered by Other Businesses: We will sometimes allow other businesses to make their products or services available to our customers, such as through Baetoti.com Marketplace. You may purchase items or services from these other businesses at our stores or through our websites or mobile services. When you purchase these products or services, we identify the other business and share with this business personal information related to your purchase of their products and services.

3. Legal Authority: We may share your personal information in situations when sharing is required by law, or we believe sharing will help to protect the safety, property, or rights of Baetoti, our customers, our associates, or other persons

We require our third-parties service providers to keep your personal information secure. We do not allow our service providers to use or share your personal information for any purpose other than providing services on our behalf. Your personal information may be stored and processed by our service providers in the United Arab Emirates or other locations where the service providers or Baetoti maintain facilities.

22. Your rights as a data subject

In some jurisdictions (for example, the member states of the European Union) you may be entitled to certain rights in and to your personal data, subject to certain conditions and exceptions contained in applicable law. These rights may include the following:

• Request us to confirm whether your personal data is processed by us, and if we do, to obtain access to your personal data and certain information about it.
• Require the correction of your personal data if it is inaccurate or incomplete.
• Direct us to stop processing your personal data under certain circumstances.

• Erase or delete your personal data, for example, where the data is no longer needed to achieve the purpose for which it was collected.
• Restrict the further processing of personal data
• Request us not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you (we currently do not engage in such processing and will notify you prior to doing so).
• Request to receive your personal data for transmission to, or to directly transmit to, another data controller in a structured, commonly-used and machine-readable format.

To protect your privacy and the security of your personal data, we will take reasonable steps to verify your identity before complying with such rights requests.

23. Privacy shield

Baetoti adheres to the seven privacy shield principles of notice, choice, and accountability for onward transfer, security, data integrity, access, and recourse, enforcement and liability as they relate to personal data. Baetoti verifies compliance to the principles through self-assessment. The privacy policy covering human resources data can be accessed on our intranet web site by all employees.

24. Legal bases for processing (for EEA users)

If you are an individual in the European economic area (EEA), we collect and process information about you only where we have legal bases for doing so under applicable EU laws.  The legal bases depend on the services you use and how you use them. This means we collect and use your information only where:

• We need it to provide you the services, including to operate the services, provide customer support and personalized features and to protect the safety and security of the services;
• It satisfies a legitimate interest (which is not overridden by your data protection interests), such as for research and development, to market and promote the services and to protect our legal rights and interests;

• You give us consent to do so for a specific purpose; or
• We need to process your data to comply with a legal obligation.

If you have consented to our use of information about you for a specific purpose, you have the right to change your mind at any time, but this will not affect any processing that has already taken place.  Where we are using your information because we or a third party (e.g. your employer) have a legitimate interest to do so, you have the right to object to that use though, in some cases, and this may mean no longer using the services

25. Our COPPA policy towards children

The services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. Baetoti complies with both the Children’s Online Privacy Protection Act of 1998 (COPPA) and, with regard to EU data subjects, with GDPR. While children under the age of thirteen (18) may use the Site only with the consent of his or her parent or legal guardian, please be advised that this Site is not directed or otherwise promoted for use by children under the age of thirteen (18).

26. Residents of California

If you are a resident of California, you have certain rights and protections under the California Consumer Privacy Act (“CCPA”). Please read our California Privacy Rights

27. Your right to withdraw consent

Where the processing of your personal information by us is based on consent, you have the right to withdraw that consent without detriment at any time by contacting us. You can also change your marketing preferences at any time as described in 'our promotional updates and communications' section.

You can also exercise the rights listed above at any time by contacting us at SBZ@baetoti.com. If your request or concern is not satisfactorily resolved by us, you may contact our data protection officer, at SBZ@baetoti.com. He can provide further information about your rights and our obligations in relation to your personal data, as well as deal with any complaints that you have about our processing of your personal data.

28. Opting out of messages from us

To opt-out of any future promotional messages from us, you should unsubscribe in the body of the promotional message that was sent to you (found at the bottom of the email) or send an unsubscribe request to us at SBZ@baetoti.com. We will process your request within a reasonable time after receipt.

29. Data Privacy Regulatory Frameworks and Requirements

GDPR Data Privacy User Rights

If you are an EU resident and Baetoti is processing, and/or transmitting your personal data, then you - as an “EU data subject” – benefit from the following rights and privileges under the General Data Protection Regulation (GDPR):

• Right of Access: you have the right to obtain from us, as controllers, confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the following personal data and information:

1. the purposes of the processing;

2. the categories of personal data concerned; i.e name, email, phone number etc

3. the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations’;

4. where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

5. the existence of the right to request from us rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing; (f) the right to lodge a complaint with a supervisory authority (for a list of supervisory authorities, see https://edpb.europa.eu/about-edpb/board/members_en);

6. where the personal data are not collected from you, any available information as to their source;

7. The existence of automated decision-making, including profiling, along the lines indicated by Article 22(1) and (4) GDPR, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

• Right to Rectification: you have the right to obtain from us without undue delay the rectification of inaccurate personal data concerned, provided during registration by him or her. Taking into account the purposes of the processing, the user have the right to have request his incomplete personal data be completed, including by means of providing a supplementary statement.

• Right to Erasure (“Right to be Forgotten): you have the right to obtain from us the erasure of your personal data without undue delay, and we have the obligation to erase personal data without undue delay when: a) your data are no longer necessary for the purposes for which they were collected; b) you had consented to the processing; c) you have objected to the processing, as per below; d) your persona data had been unlawfully collected; e) your personal data need to be erased as a matter of compliance with a legal obligation.
• Right to Restriction of Processing: you have the right to obtain from us the restriction of processing if you: a) contest the accuracy of the personal data, until this is verified; b) the processing is unlawful but you don’t want erasure; c) we no longer need the personal data, but you require them to establish, exercise to defend a legal claim; d) you have objected to processing but there is a need to verify whether our legitimate grounds override your rights to object.
• Right to Data Portability: where your personal data have been provided on the basis of your consent or for the performance of a contract, and their processing occurs in an automated way, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and have the right to transmit those data– or have directly transmitted - to another controller.

Right to Object: you have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data based on a legitimate ground point (e) or (f) of Article 6(1), including profiling based on those provisions. In this case, we can no longer process your personal data unless we show that there is a compelling legitimate ground for the processing which override your interests, rights and freedoms or for our establishment, exercise or defense of legal claims.

30. Data portability

Data portability is the ability to obtain some of your information in a format you can move from one service provider to another (for instance, when you transfer your mobile phone number to another carrier).  Depending on the context, this applies to some of your information, but not to all of your information.  Should you request it, we will provide you with an electronic file of your basic account information and the information you create on the spaces you under your sole control, like your personal bitbucket repository

31. Security and personal Information

The Site uses its best endeavors to store all Personal Information on servers with restricted access, and all electronic storage and transmission of Personal Information are secured with appropriate security technologies. In the interests of your security, we uses Secure ISO 27001 Socket Layer technology, to secure the data that we manage within our website, reducing the risk of data breaches or errors.

With ISO 27001 in place, we are able to minimize risks to potential data security breaches and reduce errors and costs, while demonstrating credibility and trust. You accept and acknowledge however that the internet is not a secure medium for the transmission of information and data including personal data (PII) and such information and data may be accessible by third parties.

32. Complaint To A Data Protection Authority

You have the right to submit a complaint concerning our data processing activities to our data protection officer

33. Contact us

If you have any queries regarding our data collection and protection practices or your rights, please do not hesitate to contact our data protection officer, at SBZ@baetoti.com

34. Privacy policy changes

We may revise this privacy policy from time to time, and will post the most current version on our web site. If a revision meaningfully reduces your rights, we will notify you.