Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.
Last Updated: January 1, 2025
Welcome to Modon Express. We are committed to protecting the privacy and security of our users' personal information in accordance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia and the Saudi E-Commerce Law.
This Privacy Policy describes how Modon Express Trading Company collects, uses, stores, shares, and protects your personal data when you use our B2B e-commerce platform, whether as a Buyer, Seller (Merchant/Manufacturer), or Visitor.
By using our platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this policy, please do not use our services.
Refers to the Modon Express website, mobile applications, and all related services accessible via the internet.
Any individual or legal entity who registers on the platform to purchase products or services from Sellers.
Any individual or legal entity who registers on the platform to offer products or services for sale to Buyers.
Any person who uses the platform, whether as a Buyer, Seller, or Visitor.
Any person who browses the platform without registering or logging in.
Any information that can identify an individual directly or indirectly, including but not limited to name, email, phone number, national ID, and address.
The Personal Data Protection Law of the Kingdom of Saudi Arabia.
Modon Express Trading Company is the data controller responsible for your personal data. For any questions or concerns regarding this Privacy Policy or your personal data, please contact our Data Protection Officer.
Legal Entity: Maden Al Sareea for Digital Marketing Co.
CR Number: 2050161855
Email: privacy@modonexpress.com
Data Protection Officer: dpo@modonexpress.com
We collect the following types of information to provide and improve our services:
We use your personal data for the following purposes, in compliance with PDPL:
We process your personal data based on the following legal grounds:
You have given explicit consent for us to process your personal data for specific purposes (e.g., marketing communications, cookies).
Processing is necessary to fulfill our contractual obligations with you (e.g., processing orders, delivering products).
Processing is required to comply with Saudi Arabian laws and regulations (e.g., tax reporting, KYC verification, anti-money laundering).
Processing is necessary for our legitimate business interests (e.g., fraud prevention, platform security, service improvement), provided it does not override your rights.
We do not sell your personal data. We may share your information only in the following circumstances:
We share information when you explicitly authorize us to do so.
We share data with trusted third-party service providers who assist us in operating the platform:
All service providers are contractually bound to protect your data and use it only for specified purposes.
When you place an order, we share relevant information with the seller to fulfill the transaction:
We may disclose your information to comply with:
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity, subject to the same privacy protections.
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law:
| Data Category | Retention Period |
|---|---|
| Account Information | Retained while your account is active and for 5 years after account closure (as required by Saudi tax and commercial laws). |
| Transaction Records | Retained for 10 years from the transaction date (as required by Saudi tax and commercial laws). |
| KYC Documents | Retained for 10 years after the business relationship ends (as required by anti-money laundering regulations). |
| Marketing Data | Retained until you withdraw consent or request deletion. |
| Log Files and Analytics | Retained for up to 24 months for security and improvement purposes. |
Note: After the retention period, we securely delete or anonymize your personal data.
We implement industry-standard security measures to protect your personal data:
Disclaimer: While we strive to protect your personal data, no method of transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.
In accordance with the Personal Data Protection Law, you have the following rights:
You have the right to request a copy of the personal data we hold about you.
You can update or correct your personal information at any time through your account settings or by contacting us.
You can request the deletion of your personal data, subject to legal retention requirements.
You can request that we limit the processing of your personal data in certain circumstances.
You can request a copy of your data in a structured, commonly used, and machine-readable format (e.g., JSON, CSV).
You can object to the processing of your personal data for direct marketing purposes or based on legitimate interests.
Where processing is based on consent, you can withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.
You have the right to file a complaint with the Saudi Data and AI Authority (SDAIA) if you believe your data protection rights have been violated.
To exercise any of these rights, please contact us at:
We will respond to your request within 30 days as required by PDPL.
Our platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from children.
If you are under 18, you may only use this platform under the supervision of a parent or legal guardian.
If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete such information.
We host and process your personal data within the Kingdom of Saudi Arabia. We do not transfer your personal data outside Saudi Arabia.
Location: Dammam, Kingdom of Saudi Arabia (in-country data residency)
Safeguards: Data is stored in-region; no cross-border transfers. Standard security and compliance controls apply.
Our Commitment: If future cross-border transfers become necessary, we will notify you and apply PDPL-compliant safeguards (e.g., contractual clauses, adequacy, or other lawful mechanisms).
We reserve the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features.
When we make significant changes, we will notify you by:
• Posting the updated policy on this page with a new 'Last Updated' date
• Sending an email notification to your registered email address
• Displaying a prominent notice on the platform
Your continued use of the platform after the effective date of the updated policy constitutes your acceptance of the changes. We encourage you to review this policy periodically.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Maden Al Sareea for Digital Marketing Co.
CR Number: 2050161855
Building 8384, Al Amir Muhammad Ibn Fahd Branch Road, Al Firdous District, Dammam 34251, Kingdom of Saudi Arabia
We are committed to resolving any concerns you may have about your privacy and data protection.
This Privacy Policy is governed by and complies with:
Any disputes arising from this Privacy Policy or our data practices shall be resolved in accordance with the laws of the Kingdom of Saudi Arabia.
You may file a complaint with the Ministry of Commerce's E-Commerce Dispute Resolution Committee or with the Saudi Data and AI Authority (SDAIA).
For complaints, you may also contact the Consumer Protection Association or use the Ministry of Commerce's Ma'roof platform.
By using the Modon Express platform, you acknowledge that you have read, understood, and agree to this Privacy Policy. You confirm that you have the legal capacity to provide consent and that all information you provide is accurate and complete.