BEC Concrete Solutions ("BEC CS", "we", "us", or "our"), a division of BEC Arabia, operates the Tickets Delivery Confirmation mobile application (the "App") for Android and iOS platforms. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

By downloading, installing, or using the App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the App.

1. Information We Collect

1.1 Personal Information You Provide

When you register for an account or use the App, we may collect:

• Account Information: Full name, email address, phone number, and preferred language (English or Arabic).
• Company Information: Your company name and affiliation for delivery verification purposes.
• Digital Signatures: Electronic signatures you provide to confirm or reject delivery receipts.
• Feedback and Comments: Text comments, rejection reasons, and any notes you submit regarding deliveries.

1.2 Information Collected Automatically

When you use the App, certain information is collected automatically:

• Device Information: Device model, operating system version, app version, and platform type (Android/iOS).
• Session Data: Login timestamps, session duration, and last active time.
• Network Information: IP address associated with your session for security purposes.
• Push Notification Tokens: Firebase Cloud Messaging (FCM) tokens for delivering notifications about delivery status updates.

1.3 Location Information

With your explicit consent, we may collect:

• Customer Location: GPS coordinates when you confirm or reject a delivery, to verify the confirmation occurred at the delivery site.
• Driver Location: For production/driver users, periodic GPS coordinates during active deliveries to provide estimated arrival times.

1.4 Authentication Data

We use Firebase Authentication (provided by Google) for secure sign-in. Your authentication credentials (passwords, OAuth tokens) are managed by Firebase and are never stored on our servers. We only receive a unique identifier and basic profile information (name, email) from your authentication provider.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To operate and maintain the delivery confirmation workflow, including presenting delivery tickets, capturing confirmations/rejections, and recording digital signatures.
• Account Management: To create, maintain, and secure your user account.
• Communication: To send push notifications about delivery status changes, new tickets, and important service updates.
• Security: To detect, prevent, and address fraud, unauthorized access, and other security concerns through session tracking and IP logging.
• Operational Reporting: To generate delivery confirmation reports for authorized operations team members.
• Service Improvement: To analyze usage patterns and improve App performance, reliability, and user experience.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

3. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information in the following limited circumstances:

• Within BEC Arabia Group: Your delivery confirmation data is shared with authorized BEC operations personnel who manage the delivery workflow.
• Your Employer/Company: If you use the App as a customer site engineer, your delivery confirmations and signatures are shared with your associated company as part of the business transaction record.
• Service Providers: We use the following third-party services that may process your data:
  • Google Firebase: Authentication, push notifications (FCM), and analytics.
  • Microsoft Azure: Cloud hosting, data storage, and processing infrastructure located in UAE North region.
• Legal Requirements: We may disclose your information if required to do so by law, regulation, or legal process, or if we believe disclosure is necessary to protect the rights, property, or safety of BEC CS, our users, or others.

4. Data Storage and Security

4.1 Storage Location

Your data is stored on secure Microsoft Azure cloud servers in the UAE North region. All data transmission between the App and our servers is encrypted using TLS 1.2 or higher.

4.2 Security Measures

We implement industry-standard security measures including:

• End-to-end encryption for data in transit (HTTPS/TLS).
• Encrypted data at rest on Azure cloud infrastructure.
• JWT-based authentication with short-lived access tokens and secure refresh token rotation.
• Role-based access control limiting data visibility to authorized personnel only.
• Session management with automatic expiration and device tracking.
• Audit logging of all data access and modifications.

4.3 Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and the relevant authorities within 72 hours as required by applicable data protection laws.

5. Data Retention

We retain your information as follows:

• Account Data: Retained for as long as your account is active. After account deletion, personal identifiers are anonymized within 30 days.
• Delivery Records: Delivery confirmation data (including signatures and confirmations) is retained for a minimum of 7 years as required for business and legal compliance in the construction industry.
• Session and Security Logs: Retained for 12 months for security monitoring purposes, then automatically purged.
• Location Data: GPS coordinates are retained only for the duration needed to complete the delivery transaction and generate reports, typically no longer than 90 days.
• Push Notification Tokens: Updated on each login and removed upon account deletion or logout.

6. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your account and personal data, subject to legal retention requirements.
• Data Portability: Request a machine-readable copy of your data.
• Withdraw Consent: Withdraw consent for optional data collection (e.g., location services) at any time through your device settings or by contacting us.
• Object to Processing: Object to processing of your data for specific purposes.
• Restrict Processing: Request limitation of processing in certain circumstances.

To exercise any of these rights, please contact us using the information provided in Section 11.

7. Children's Privacy

The App is designed for professional use in the construction industry and is not intended for use by children under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information promptly.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. Our primary data processing occurs in the United Arab Emirates (Azure UAE North region). Where data is transferred internationally, we ensure appropriate safeguards are in place in accordance with applicable data protection laws, including the Saudi Arabia Personal Data Protection Law (PDPL) and the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection.

9. Third-Party Links and Services

The App may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party services. We encourage you to review the privacy policies of any third-party services you access through our App.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated Privacy Policy within the App and updating the "Last Updated" date above. Your continued use of the App after any changes constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

12. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL) issued by Royal Decree No. M/19 dated 9/2/1443H. Any disputes arising from or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts in Riyadh, Kingdom of Saudi Arabia.

13. Consent

By using the App, you consent to the collection and use of your information as described in this Privacy Policy. For residents of the Kingdom of Saudi Arabia, this consent is provided in accordance with Article 6 of the Personal Data Protection Law (PDPL). You may withdraw your consent at any time by contacting us or deleting your account, without affecting the lawfulness of processing based on consent before its withdrawal.