Barafast Privacy Policy

Depending on the service requested, we may collect names, store names, contact details, pickup and delivery addresses, sender and recipient names and phone numbers, shipment descriptions required for service fulfillment, order numbers and statuses, contractual and billing data, inquiry and complaint communications, and technical data necessary for website security and operations.

We may also receive recipient details directly from our contracted merchants to execute delivery orders.

We process personal data to respond to inquiries and requests, manage client accounts and contracts, handle product intake, warehousing, inventory management, order preparation, transport, and delivery, send real-time status updates, resolve complaints and claims, issue invoices, protect service infrastructure, and comply with statutory obligations.

We rely on an appropriate legal basis for each purpose, such as performing a service or contract, fulfilling a statutory obligation, or obtaining data subject consent where required.

We do not send direct marketing materials except in compliance with regulatory requirements, providing straightforward mechanisms to opt out at any time.

Shipment specifications, pickup/delivery addresses, and requisite contact numbers are mandatory to execute collection or delivery. Inability to provide this data or providing inaccurate information may result in service delays or inability to execute the service.

Any optional data requested will be explicitly designated as such at the time of collection.

We may share the minimum necessary personal data with delivery couriers, relevant contracted merchants or clients, essential operational software and infrastructure providers, payment and billing processors where applicable, and competent governmental authorities when required by law.

We mandate that our service providers process data solely for authorized purposes and uphold strict data security.

Any cross-border data transfer or processing outside the Kingdom, if applicable, strictly adheres to statutory regulations.

We retain personal data for the duration required to deliver services, manage the client relationship, and resolve claims, and subsequently for periods mandated by applicable statutory or contractual obligations.

When no longer required, data is securely destroyed or anonymized in an appropriate manner.

We implement technical and organizational security measures to prevent unauthorized access, loss, alteration, or unlawful disclosure.

Subject to statutory provisions and exemptions, data subjects have the right to be informed about the collection and purpose of processing their data, access their data and request a copy thereof, request rectification, completion, or updating of their data, and request destruction of data in circumstances permitted by law.

Where processing relies on consent, consent may be withdrawn without affecting lawful processing based on other legal grounds.

To exercise these rights, requests should be sent to Albara@barafast.com accompanied by a clear description and appropriate identity verification details. Requests are addressed within statutory timeframes, with notification provided if a permitted extension is necessary.

Our website may utilize essential cookies necessary for functionality, along with analytics tools to evaluate performance and enhance user experience.

When optional or marketing cookies are utilized, clear information regarding their purposes and controls is provided in accordance with applicable requirements. Users may manage cookie preferences through browser settings or website options.

We may update this Privacy Policy to reflect changes in our services, processing practices, or regulatory requirements.

Updated versions are published on the website indicating the latest revision date, with additional notifications provided where required.