Privacy Policy
Terms of ServiceLast updated: 2026
Who we are
Barqia (بَرقية) is a WhatsApp CRM & marketing platform for merchants in Saudi Arabia and the Gulf, operated by Murtadha Abdulrahim Al-Haddad Trading Establishment (Unified National Number 7038322678), National Address: 3530 Souq Al Arbiea, Historical Center Al Mubarraz Dist., Al Mubarraz 36341, secondary no. 9098, Kingdom of Saudi Arabia — short address FMAB3530. Privacy contact: support@barqia.net. Site and application at barqia.net.
Our role: processor and controller
For merchant-account data (name, email, mobile, billing) we are the controller. For the merchant's end-customer data processed over WhatsApp, we act as processor on the merchant's behalf and under its instructions; the merchant remains the controller responsible for the lawful basis and for obtaining consent.
WhatsApp data we process
Through Meta's official WhatsApp Cloud API we process, on the merchant's behalf: customers' phone numbers, WhatsApp profile names, message and conversation content, attachments and media, message metadata and delivery/read statuses, and the WhatsApp Business Account (WABA) and phone-number identifiers obtained when an account is connected via Embedded Signup.
Purpose & purpose limitation
WhatsApp data is used solely to enable messaging between a merchant and its customer: the inbox, CRM, automations and reminders, and CSAT. We do not use it to enrich other merchants' customer data, to build profiles, or for resale, in line with Meta's Business & Commerce Policies. We never sell your data.
Lawful basis & consent (PDPL)
We comply with Saudi Arabia's Personal Data Protection Law (PDPL) and its implementing regulations. Consent is the default lawful basis, and consent is not bundled as a precondition of the service. Merchants must obtain the customer's opt-in before messaging them over WhatsApp.
Sharing & sub-processors
To run the service we use sub-processors: Meta/WhatsApp (Cloud API) as the messaging processor, Zid for store connections, Sndr for transactional email, and Hostinger for infrastructure hosting. We do not share your data with anyone else except under a legal obligation or with your consent.
Cross-border transfer & safeguards
Messaging is processed via Meta's Cloud API, and our infrastructure is hosted, on servers located outside Saudi Arabia. Because SDAIA has not issued an adequacy list, cross-border transfer relies on your explicit consent and on approved safeguards including Standard Contractual Clauses (SCCs), a transfer risk assessment, data-processing agreements with our providers, and encryption of sensitive data in transit and at rest.
Retention
We retain data only as long as needed to provide the service and meet legal obligations, then delete or anonymise it. Meta provides no archiving and deletes message content roughly 90 days after the service ends, so we operate our own retention policy consistent with the PDPL and data-minimisation.
Your rights & data deletion
Under the PDPL you have the right to access, correct, erase, and port your data, and to withdraw consent at any time. We respond within about 30 days. To request deletion via the dedicated path see barqia.net/data-deletion, or contact support@barqia.net.
Opt-in & opt-out
Merchants must obtain the customer's consent before messaging. We honour the customer's choice automatically: anyone who sends "إيقاف"/STOP is immediately opted out, and "اشتراك"/START re-subscribes them; this is enforced on every send.
Sensitive data we do not collect
We do not solicit full payment-card numbers, IBANs, or national-ID numbers over WhatsApp, and we advise merchants not to collect them through conversations.
Security
Access tokens and sensitive data are stored encrypted. To authenticate inbound messages from Meta we rely on a phone_number_id anti-spoof gate as the enforced control, with X-Hub-Signature-256 (HMAC) verification as defense-in-depth that is logged on mismatch.
Updates & contact
We may update this policy and will post the updated date at the top of the page. For any privacy question or to exercise your rights: support@barqia.net.