BNG Arabia Company

1. Introduction

BNG Company (we, *us, or our) is committed to protecting the privacy and security of personal data collected from clients, partners, event participants, and website visitors.

This Privacy Policy outlines how we collect, use, disclose, and safeguard personal data in compliance with:

Saudi Arabia’s Personal Data Protection Law (PDPL)
EU General Data Protection Regulation (GDPR)
Other applicable regional and international data protection laws

This policy applies to:

Clients & Partners (businesses, sponsors, exhibitors, associations)
Event Participants (attendees, speakers, delegates, travelers)
Website & App Users
Service Providers & Third Parties

By using our services, you consent to the practices described below.

2. Scope of Services

BNG Company provides:

Event Management & Production
Business Delegation & FDI Consulting
Destination & Travel Management
Product Launches & Marketing Services
End-to-End Event Consultation

We operate in Saudi Arabia, GCC, and globally, requiring adherence to PDPL, GDPR, and cross-border data transfer laws.

3. Types of Personal Data Collected

Client & Partner Data

Contact Details: Name, email, phone, company, job title
Financial Data: Payment details, invoices, tax/VAT information
Business Records: Contracts, agreements, correspondence

Event Participant Data

Registration Data: Name, nationality, passport/visa details, dietary/accessibility needs
Professional Data: Job title, employer, industry expertise
Travel & Accommodation: Flight/hotel bookings, special requests
Event Engagement: Session attendance, networking preferences

Website & Technical Data

Device & Usage: IP address, browser type, cookies, session recordings
Marketing Preferences: Opt-ins for newsletters, promotions

Sensitive Data (Processed Only with Consent)

Health Data: Disabilities, allergies (for event accommodations)
Biometric Data: Facial recognition (for secure access)
Religious/Dietary Preferences (if required)

4. Legal Basis for Processing

We process data under:

Contractual Necessity (fulfilling service agreements)
Legal Compliance (visa processing, tax laws)
Legitimate Interests (marketing, fraud prevention)
Explicit Consent (for sensitive data or promotions)

5. How We Use Personal Data

Service Delivery: Event coordination, travel logistics, consulting
Client Communication: Updates, confirmations, support
Marketing & Analytics: Personalized promotions (opt-out available)
Security & Compliance: Fraud prevention, legal obligations
Event Recordings: Photos/videos may be used for marketing (with consent)

6. Data Sharing & Third Parties

We may share data with:

Service Providers: Hotels, airlines, payment processors
Government Authorities: Visa/immigration, tax agencies
Event Partners: Co-organizers, sponsors (with consent)
Legal Bodies: If required by law (e.g., court orders)

International Transfers: Data may be transferred globally under PDPL/GDPR safeguards (e.g., Standard Contractual Clauses).

7. Data Retention

We retain data:

As long as necessary for service delivery
As required by law (e.g., financial records for 5+ years)
Until consent is withdrawn (for marketing)

8. Cookies & Tracking Technologies

We use:

Essential Cookies (for website functionality)
Analytics Cookies (Google Analytics)
Marketing Cookies (retargeting ads)

Users can manage preferences via browser settings or our Cookie Consent Banner.

9. Data Subject Rights

Under PDPL & GDPR, you may:

Access, Correct, or Delete your data
Restrict or Object to processing
Withdraw Consent (for marketing)
Data Portability (EU residents)

Submit requests to: connect@bngglobal.net | Response within 60 days.

10. Security Measures

We implement:

Encryption (TLS/SSL) for data transfers
Access Controls (role-based permissions)
Regular Security Audits
Employee Training on data protection

Privacy Policy