pg. 1
Berain Privacy Policy
PURPOSE
This policy is designed to provide users of the Berain Water Company website and mobile application with
information regarding the data / information that is collected by Berain Water Company through these
interfaces. The purpose is also to provide information about the controls implemented by the Company to
safeguard any personal data that may be collected to comply with data protection mandates.
SCOPE & DEFINITIONS
This policy applies to the customer’s usage of the Berain Water Company website (www.berain.com.sa) and
mobile application services, for Berain water services and operational purposes.
Service means the https://berain.com.sa/ website and the Berain mobile application operated by
Berain Water
Personal Data Personal Data means data about a living individual who can be identified from those
data (or from those and other information either in our possession or likely to come into our
possession).
Usage Data Usage Data is data collected automatically either generated by the use of the Service or
from the Service infrastructure itself (for example, the duration of a page visit).
Cookies Cookies are small files stored on your device (computer or mobile device).
Data Controller Data Controller means the natural or legal person who (either alone or jointly or in
common with other persons) determines the purposes for which and the manner in which any personal
information are, or are to be, processed. For the purpose of this Privacy Policy, we are a Data Controller
of your Personal Data.
Data Processors (or Service Providers) Data Processor (or Service Provider) means any natural or legal
person who processes the data on behalf of the Data Controller. We may use the services of various
Service Providers in order to process your data more effectively.
Data Subject (or User) Data Subject is any living individual who is using our Service and is the subject
of Personal Data.
POLICY OWNER
The executive owner of this policy is Information Security Manager (ISM). This policy must be reviewed once
in 12 months. After the review it must be approved by the owner of the policy before it is communicated to all
employee, vendors, suppliers, external consultants and all other relevant individuals or groups.
POLICY STATEMENT
Berain Water Company (hereinafter as the “Company”, “we”, “our” or “us”) understands the importance of
protecting your privacy. Therefore, we have established a Privacy Policy to explain how the Company treats
your information and protects your privacy when you use the Berain website (www.berain.com.sa) and Berain
services using Berain mobile application provided (the “Service”) and the rights and options available to you
pg. 2
regarding your information. This Privacy Policy does not apply to any third-party websites, services or
applications, even if they are accessible through our Services. Any information that we collect is subject to the
privacy policy in effect at the time that information is collected.
We may, however, modify and revise this Privacy Policy from time to time. If we make any material changes to
this Privacy Policy, we’ll notify you of those changes by posting them on the Services or other notification, and
we’ll indicate when those changes will become effective.
IF YOU DO NOT AGREE TO THE TERMS AND CONDITIONS SET FORTH HEREIN, PLEASE DO NOT USE THE
BERAIN WEBSITE AND BERAIN MOBILE APPLICATION SERVICES.
INFORMATION THE COMPANY COLLECTS AND USES
For the purposes of privacy data protection, the Company is the data controller of your personal information.
When you use the website and mobile application services, for Berain water services and operational purposes,
we automatically collect and store the following types of information:
Technical Information
Certain technical information regarding your device, and your use of the Website and Mobile Application
Services and other third party software and applications installed on your device (the “Other Software”),
including the type, name and version of operating system and Other Software including, without limitation:
Their interactions with the Website and Mobile Application Services, your configuration and settings of the
Website and Mobile Application Services, version of the Website and Mobile Application Services
ISP (Internet Service Provider), Internet protocol (IP) address, Media Access Control (MAC) address, anonymous
user identifiers, device configuration and identifiers.
Demographic Location
The purpose of the technical information is:
To operate and update the Website and Mobile Application Services and provide you with existing and
new functionality and features
To improve and customize the Website and Mobile Application Services
To provide you personalized content, including through the delivery of targeted interest-based
advertisements from us or our partners
To maintain and improve the quality and operation of the Website and Mobile Application Services
To notify you of Website and Mobile Application Services updates.
pg. 3
Personal Data
While using our Service, we may ask you to provide us with certain personally identifiable information that
can be used to contact or identify you (“Personal Data”). Personally identifiable information may include, but
is not limited to:
• Email address
• First name and last name
• Phone number
• Address, State, Province, ZIP/Postal code, City
• Cookies and Usage Data
Usage Information
Certain usage related information regarding your use and interaction with your device, including the Website
and Mobile Application Services, such as when and how you use the Website and Mobile Application Services,
how you use your internet browser and internet search related applications, offerings and advertisements that
you view, use and access, how you use them and your response to them, how frequently you use them, your
search queries and the time and date of your searches.
The purposes of the usage information are:
• To improve and customize the Website and Mobile Application Services
• To provide you personalized content, including through the delivery of targeted interest-based
advertisements from us or our partners
• To maintain and improve the quality and operation of the Website and Mobile Application
Services
• To take any action in case of a dispute involving you in connection with the Website and Mobile
Application Services
• To enforce the terms and conditions applicable to the Website and Mobile Application Services
and to prevent unlawful activities and misuse thereof
Location Data
We may use and store information about your location if you give us permission to do so (“Location Data”).
We use this data to provide features of our Service, to improve and customize our Service.
You can enable or disable location services when you use our Service at any time by way of your device settings.
Tracking & Cookies Data
We use cookies and similar tracking technologies to track the activity on our Service and we hold certain
information.
pg. 4
Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are
sent to your browser from a website and stored on your device. Other tracking technologies are also used such
as beacons, tags and scripts to collect and track information and to improve and analyses our Service.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you
do not accept cookies, you may not be able to use some portions of our Service.
Examples of Cookies we use:
Session Cookies: We use Session Cookies to operate our Service.
Preference Cookies: We use Preference Cookies to remember your preferences and various settings.
Security Cookies: We use Security Cookies for security purposes.
Social Networks
Your interactions on social networks through the Website and Mobile Application Services.
The purposes of the social networks
• To improve and customize the Website and Mobile Application Services
• To provide you personalized content, including through the delivery of targeted interest-based
advertisements from us or our partners
• Registration Related Information. Information you provide when you register
• For the Website and Mobile Application Services (if applicable), such as name, home or work
addresses, e-mail address, telephone numbers, and password.
The purposes of the registration related information
• To improve and customize the Website and Mobile Application Services
• To maintain and improve the quality and operation of the Website and Mobile Application
Services
• To notify you of Website and Mobile Application Services updates
• To provide you with support and handle your complaints and/or feedback.
Support Related Information
If you communicate with us via our support section or via email, we may also collect your email address, name
and any information voluntarily submitted by you in connection with such support (for example, your name,
company name, and particular support query or request). Such information will only be used to provide you
with support services and will not be connected with any other information collected from you on or through
the Website and Mobile Application Services, including, any individual User ID (as defined below) generated or
collected by us.
pg. 5
When you use the Website and Mobile Application Services, we automatically generate an anonymous internal
user ID (which does not personally identify you), which is assigned to your use of the Website and Mobile
Application Services (the "User ID") and may be combined with any of the above information.
The purposes of the support related information are:
• To take any action in case of a dispute involving you in connection with the Website and Mobile
Application Services
• To enforce the terms and conditions applicable to the Website and Mobile Application Services
and to prevent unlawful activities and misuse thereof
• To comply and satisfy any applicable law regulation, legal process or enforceable governmental
request
• To provide you with support and handle your complaints and/or feedback.
While it is not our intention to collect any personally identifiable information (“PII”) (except for registration
and support purposes as set forth in this Privacy Policy), the data collected may include PII. As part of our
privacy measures, we implement certain rules designed to avoid the unintentional collection of PII such as
email addresses, National security numbers, credit card numbers etc. Such rules are based on known field
types, parameters, values and algorithms but they are not fool proof and hence the Website and Mobile
Application Services may sometimes, unintentionally, collect unwanted information. We regularly examine and
update these rules. You hereby grant your consent to us to use or process your personal information only for
the purpose described above once you use the Software or the Service. And you may withdraw your consent
at any time.
SHARING INFORMATION WITH THIRD PARTIES
We will not share any PII that we have collected from you except for the following events:
If we are required by law to disclose your information, we may share your information with law enforcement
or other competent authorities and any third party, as may be required (e.g., to detect, prevent or otherwise
address fraud, security, or technical issues; to respond to claims or satisfy any legal process, subpoena, or
governmental request; or to protect the rights, property, or personal safety of the Company’s users, its
partners, or the general public);
In the event the Company goes through a business transition such as a merger or acquisition by another
company, consolidation, change of control, reorganization, or sale of all or a portion of its assets, your
information will be among the assets transferred; We may share your information with certain third parties
(including, without limitation, search engines, content providers, and advertising networks and platforms) that
provide various services (such as advertising, marketing, analysis, content, and search) in connection with the
Website and Mobile Application Services. We take appropriate measures to ensure that no user can be
individually identified from the disclosure of such information, and we require these third parties;
To keep the data secured
• Not to use the data for any other purpose other than to provide us with Services
pg. 6
• To use the data solely in compliance with this Privacy Policy. If you want to delete any personal
data which we have shared with the third parties, please contact our relationship office by email
at: info@berain.com.sa.
We would try our best to notify the third party of deleting the relative personal data, but no warranty as to
the deletion is made by us.
Information may be collected by Third-Party
Certain Website and Mobile Application Services may include and/or enable you to add content to them. The
content may be in the form of buttons, gadgets, links to third party advertisements, websites, products and
services (including search services) as well as additional means that are provided to you by third parties
(collectively, "Third Party Content and Services"). The use of such Third Party Content and Services is subject
to their privacy policies. You shall be aware that the use of the Third Party Content and Services may give these
third parties the ability to access, collect, store, and/or share your information, both your PII and non-
personally identifiable information. In order to clarify, we do not review, approve, monitor, endorse, warrant,
or make any representations with respect to such Third Party Content and Services and your access to any
Third Party Content and Services is at your own risk. We are not responsible for the information contained
and/or made available through, the practices of, or your use or inability to use such Third Party Content and
Services. You expressly relieve us from any and all liability arising from your use of such Third Party Content
and Services. We recommended that you read the terms, conditions and privacy policies of such Third Party
Content and Services before using or accessing any of them.
For providing customized advertisement, the third-party advertising companies may collection or use your
personal information (not including your name, address, email address or telephone number) when you use
the Service.
LEGAL BASIS FOR PROCESSING PERSONAL DATA UNDER THE PERSONAL DATA PROTECTION LAW (PDPL)
Berain Water legal basis for collecting and using the personal information described in this Privacy Policy
depends on the Personal Data we collect and the specific context in which we collect it.
Berain Water may process your Personal Data because:
• We need to perform a contract with you
• You have given us permission to do so
• The processing is in our legitimate interests and it is not overridden by your rights
• To comply with the law
Retention of Data
Berain Water will retain your Personal Data only for as long as is necessary for the purposes set out in this
Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal
obligations (for example, if we are required to retain your data to comply with applicable laws), resolve
disputes and enforce our legal agreements and policies.
pg. 7
Berain Water will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a
shorter period of time, except when this data is used to strengthen the security or to improve the
functionality of our Service, or we are legally obligated to retain this data for longer periods.
Transfer of Data
Your information, including Personal Data, may be transferred to — and maintained on — computers located
outside of your state, province, country or other governmental jurisdiction where the data protection laws
may differ from those of your jurisdiction.
If you are located outside Saudi Arabia and choose to provide information to us, please note that we transfer
the data, including Personal Data, to Saudi Arabia and process it there.
Your consent to this Privacy Policy followed by your submission of such information represents your agreement
to that transfer.
Berain Water will take all the steps reasonably necessary to ensure that your data is treated securely and in
accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or
a country unless there are adequate controls in place including the security of your data and other personal
information.
Disclosure of Data
Business Transaction
If Berain Water is involved in a merger, acquisition or asset sale, your Personal Data may be transferred. We
will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.
Disclosure for Law Enforcement
Under certain circumstances, Berain Water may be required to disclose your Personal Data if required to do so
by law or in response to valid requests by public authorities (e.g. a court or a government agency).
Legal Requirements
Berain Water may disclose your Personal Data in the good faith belief that such action is necessary to:
• To comply with a legal obligation
• To protect and defend the rights or property of Berain Water
• To prevent or investigate possible wrongdoing in connection with the Service
• To protect the personal safety of users of the Service or the public
• To protect against legal liability
Security of Data
pg. 8
The security of your data is important to us but remember that no method of transmission over the Internet
or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to
protect your Personal Data, we cannot guarantee its absolute security.
SOCIAL NETWORKS
You may also choose to activate additional features that provide you with the ability to update and use your
favorite social networks directly from the Website and Mobile Application Services. During such activation, you
will be asked to grant the Company permission to compile certain information from such social networks. This
information may include friends or contact lists, notes, updates, and photos and may be used by the Company
to customize the content available to you through the Website and Mobile Application Services, suggest new
features and content that may be relevant to you or provide the Company with data for statistical purposes.
The information you allow the Company to access is that which is presented to you when you choose to activate
these features. Please see your social network provider policies for any questions or concerns. You may opt
not to grant the Company access to your social network account(s) at any time by changing your social network
settings or by not authorizing the Company’s access thereto.
SECURITY OF USER INFORMATION
The security of user’s information is our utmost priority, and we take strict measures in order to protect the
data from unauthorized access, use, disclosure or destruction of data. We have implemented physical,
technical and administrative security measures for the Services that comply with applicable laws and industry
standards. For example, we use firewalls, encryption technology and Network access designed to protect
against fraud and identity theft; our data is only stored in centers that provide high-level security for user’s
information.
We also protect user’s privacy by seeking to minimize the amount of sensitive data and PRI. We also seek
appropriate contractual protection from our partners regarding their treatment of user data.
Please be aware, however, that no method of transmitting information over the Internet or storing information
is completely secure. Accordingly, we cannot guarantee the absolute security of any information.
We retain the information we collect as described in this Privacy Policy for as necessary for the provision of the
Services, internal analytical purposes, or to comply with its legal obligations, resolve disputes and enforce
agreements (e.g. settlement). The criteria used to determine the retention periods include:
• How long the personal data is needed to provide the Services and operate the business
• The type of personal data collected
• Whether we are subject to a legal, contractual or similar obligation to retain the data (e.g.,
mandatory data retention laws, government orders to preserve data relevant to an investigation,
or data that must be retained for the purposes of litigation or disputes).
Your Data Rights
You have the right to access, modify, correct or delete any personal data which we may have collected.
pg. 9
You have a right to (subject to a limited number of exceptions):
• Request access to and rectification or erasure of your personal information
• Obtain restriction of processing or to object to processing of your personal information
• To exercise this right please contact our Relationship office by email at: info@berain.com.sa
In certain circumstances, you have the following data protection rights:
The right to access, update or delete the information we have on you. Whenever made possible, you can
access, update or request deletion of your Personal Data directly within your account settings section. If you
are unable to perform these actions yourself, please contact us to assist you.
The right of rectification You have the right to have your information rectified if that information is inaccurate
or incomplete.
The right to object You have the right to object to our processing of your Personal Data.
The right of restriction You have the right to request that we restrict the processing of your personal
information.
The right to data portability You have the right to be provided with a copy of the information we have on you
in a structured, machine-readable and commonly used format.
The right to withdraw consent You also have the right to withdraw your consent at any time where Berain
Water relied on your consent to process your personal information.
Notices
If we are required to provide you with notice of a particular event or incident, we will send you such notice by
mail, email or telephone.
Our Policy towards Children
Our Services are not directed to children under 18 and we do not knowingly collect PII from children under 18.
If a parent or guardian becomes aware that his or her child has provided us with information without their
consent, he or she should promptly contact us and we take reasonable steps to ensure that such information
is deleted from our files.).
COPYRIGHTS AND TRADEMARKS
All content, design, text, graphics, images, logos, buttons, icons, interfaces, audio and video clips, and the
selection and arrangements thereof are the exclusive property of the Company, or its respective content
providers, and are protected by Copyright Law and other applicable laws and regulations.
Termination of Usage
Any conduct by a user that in our sole discretion restricts or inhibits any other user from using or enjoying the
Software and Service, is prohibited. You agree to use the services only for lawful purposes and in accordance
pg. 10
with that prohibition. You agree that you will not transmit any unlawful, harmful, threatening, abusive,
harassing, defamatory, vulgar, obscene, sexually explicit, profane, hateful, racially, ethnically, or otherwise
objectionable material of any kind, including, but not limited to, any material that encourages conduct that
would constitute a criminal offense, give rise to civil liability or otherwise violate any applicable local, state,
national, or international law. The Company may, without incurring any liability to you, terminate access by
you or suspend any access to all or part of the Software, without notice, for any conduct that we in its sole
discretion, believes is in violation of any applicable law or this Policy, or is harmful to the interests of another
user, a third-party, a merchant, a sponsor, a licensor, a service provider, or the Software.
Contact the Company
If you have any questions or concerns with respect to any matter covered by this Privacy Policy, you may
contact our Relationship Office by email at: info@berain.com.sa or alternatively on Phone # 920025555.
