B2B.Zone collects and processes personal and business data strictly for the purposes of order fulfillment, account management, invoicing, and platform improvement. Key commitments:

• All data is stored on GCP infrastructure located in the Dammam region (Saudi Arabia) to comply with PDPL data residency requirements
• Personal data is never sold to or shared with third parties without explicit consent, except where required by Saudi law or regulatory bodies
• Users may request access to, correction of, or deletion of their personal data at any time by contacting support
• Buyer business data (CR number, VAT number, National Address) is collected solely for ZATCA-compliant invoicing and order delivery
• Data is encrypted in transit (TLS) and at rest
• B2B.Zone complies with the Saudi Personal Data Protection Law (PDPL) and all applicable SAMA and ZATCA data requirements