Privacy Policy
Last updated: 10 August 2026
This policy explains what personal data MKSB collects, why we collect it, and the choices you have. We handle personal data in line with the Personal Data Protection Law of the Kingdom of Saudi Arabia (PDPL) and its implementing regulations.
1. Who we are
MKSB operates this website and the loyalty platform described on it. For data about merchants and website visitors we act as the controller. For loyalty data belonging to a merchant's own customers, the merchant is the controller and we act as processor on their instructions.
2. Data we collect
Merchant and enquiry data: name, business name, email address, phone number, number of branches, preferred demo date and time, and any notes you submit. Loyalty data: the identifiers, stamp counts, and reward history needed to run a card. Technical data: IP address, device and browser type, and pages visited.
3. Why we use it
To respond to demo requests and contact you about them; to create and operate accounts; to issue and update wallet passes; to provide support; to keep the service secure and prevent abuse; to meet legal and accounting obligations; and to improve the product in aggregate.
4. Legal basis
We rely on your consent when you submit a form, on the performance of a contract when we provide the service you subscribed to, on our legitimate interests in securing and improving the platform, and on legal obligations where retention is required by law.
5. Wallet passes
Loyalty cards are delivered through Apple Wallet and Google Wallet. Adding a card involves those providers processing pass data under their own privacy terms. We do not receive your customers' Apple or Google account credentials, and we do not read other passes in their wallet.
6. Sharing
We share data only with service providers who help us operate the platform — hosting, email delivery, and analytics — under agreements limiting them to our instructions. We also disclose data where required by law or competent authority. We do not sell personal data.
7. Storage and transfers
We aim to store personal data within the Kingdom of Saudi Arabia. Where a provider processes data abroad, we transfer it only under the conditions permitted by the PDPL and with appropriate safeguards in place.
8. Retention
We keep demo-request data for as long as needed to follow up and for our records, account data for the life of the account, and loyalty data for as long as the merchant operates its programme. After that, data is deleted or anonymised unless the law requires us to keep it longer.
9. Security
We use encryption in transit, access controls, and least-privilege practices to protect personal data. No system is perfectly secure; if a breach affecting your data occurs, we will notify you and the competent authority as required by the PDPL.
10. Your rights
Under the PDPL you may request access to your personal data, ask to have it corrected or destroyed, request information about how it is processed, and withdraw consent at any time. To exercise these rights, contact us using the details on this website. You may also complain to the competent supervisory authority.
11. Cookies
We use cookies and similar storage that are necessary for the site to function, such as remembering your language and theme. Any analytics we add is used to understand usage in aggregate and can be declined where consent is required.
12. Children
The service is intended for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18 through this website.
13. Changes and contact
We may update this policy; the revised date at the top of the page shows when it last changed. For any privacy question or request, contact us through the details on this website.