Privacy Notice
The Small and Medium Enterprises General Authority “Monsha’at” was established in 2016 pursuant to Cabinet Resolution No. (301) dated 11/07/1437H (corresponding to April 18, 2016).
It enjoys a public legal personality with financial and administrative independence, and is organizationally affiliated with the Ministry of Commerce.
The Small and Medium Enterprises General Authority "Monsha’at" recognizes the importance of protecting your privacy and personal data. The confidentiality of users’ and visitors’ information is one of its top priorities. Accordingly, “Monsha’at” is committed to safeguarding the confidentiality and privacy of sensitive data and protecting the rights of all users.
This notice has been prepared specifically to clarify the following:
Term 1: Consent to the Privacy Notice
Your consent to this Privacy Notice signifies your agreement to the privacy controls and conditions that apply to all services, programs, and initiatives provided by "Monsha’at" through its official website, affiliated official websites, and official applications, including any ongoing modifications made as needed according to the nature of the work.
Term 2: The Data That Will be Collected
1. Name
2. Nationality
3. Gender
4. Email
5. Country of Residence
6. ID/Iqama Number
7. Mobile Number
8. Enterprise Information
9. Transaction Data
Transaction data refers to information that describes any event or interaction that occurs during communication with "Monsha’at", such as the time of website access, visited pages, or submitted requests.
Term 3: Methods of Data Collection
- Collecting the personal data provided by the data subject through website registration.
- Collecting your personal data indirectly through cookies gathered during your visit to the website.
- Collecting any information you provide through your browser, or when contacting us via phone, email, or social media, whether through the “Monsha’at” website or its official affiliated platforms.
- Collecting and using all data received from other entities that serve enterprises and entrepreneurs, including but not limited to:
· Ministry of Commerce
· Ministry of Human Resources and Social Development
· Ministry of Municipalities and Rural Affairs
· Ministry of Investment
· Ministry of Finance
· Small and Medium Enterprises Bank
· Zakat, Tax and Customs Authority
· General Organization for Social Insurance
· Human Resources Development Fund
· SPL
· Saudi Exports
· Bayan for Credit Bureau
· Chambers of Commerce
· Saudi Business Center
· Business Accelerators and Incubators
· Startup Company Studios
· Other government and private entities that support or provide services to enterprises or entrepreneurs.
"Monsha’at" is committed to the key principles and general rules for the protection of personal data with regard to your personal data, as well as the key principles and general rules for data sharing related to your personal data, your enterprise, and your transactions.
Term 4: Use of personal data and purpose of collection
Your personal data is collected, used, and processed for regulatory, improvement, and development purposes, including but not limited to:
- Fulfilling the required information to apply for the services, programs, and initiatives provided by “Monsha’at” through its official website and affiliated platforms
- Conducting surveys, interviews, and opinion polls
- Sending invitations to participate in workshops, training sessions, and conferences
- Marketing investment opportunities, services, programs, and initiatives that support enterprises
- Resolving and addressing inquiries or complaints and improving the user experience across all government communication channels.
- Meeting regulatory or judicial requirements
- Analyzing data and issuing internal reports to meet operational needs (e.g., statistical reports)
- Serving, understanding, studying, and developing the small and medium enterprises sector
Term 5: Storage and Destruction of Personal Data
The data will be stored within the Kingdom of Saudi Arabia on the servers of the Small and Medium Enterprises General Authority “Monsha’at”. It will be securely destroyed once the purpose for which it was collected has been fulfilled, in a manner that prevents any further access.
“Monsha’at” may retain the data after the original purpose has ended, provided that all identifiers that could lead to identifying the data subject have been removed.
Term 6: Legal Basis for Collecting and Processing Personal Data
The Authority relies on three legal bases for collecting and processing personal data:
- The consent of the data subject
- The fulfillment of contractual or legal obligations
- The pursuit of legitimate public interests in accordance with applicable regulations
Term 7: Rights of the Data Subject
First: The Right to Know: The data subject has the right to know how we collect their data, the legal basis for collecting and processing it, how it is processed, stored, and destroyed, and with whom it will be shared.
Full details are available in this Privacy Notice, or by contacting us through the channels provided in Term 11.
Second: The Right to Access Personal Data: The data subject has the right to request a copy of their personal data by contacting the email address provided in Term 11. The data will be provided free of charge within seven working days via email.
Third: Right to Rectification of Personal Data: The data subject has the right to request the correction of their personal data if they believe it is inaccurate, incorrect, or incomplete.
This can be done by contacting the email address provided in Term 11. The data will be reviewed and updated within seven working days, and the data subject will be notified via email once the update is complete.
Fourth: Right to Erasure of Personal Data: The data subject has the right to request the erasure of their personal data under certain circumstances, unless there is a legal provision specifying a retention period or contractual requirements necessitating its preservation.
Fifth: The Right to Obtain Personal Data: The data subject may obtain their available personal data in a readable and clear format, in accordance with applicable regulations and procedures.
Term 8: Sharing / Exchanging Personal Data
The following data related to your establishment will be published publicly as open data to support and facilitate access for entrepreneurs, investors, and researchers to your establishment, in addition to promoting the concept of transparency for the end user:
· Enterprise Name
· Commercial Registration Number
· Registration Status
· Commercial Entity Type
· Registration Issue Date
· Registration Expiry Date
· Enterprise Size according to the unified “Monsha’at” classification
· Enterprise Phone Number
· Enterprise Activity
· Enterprise Address
· Region
· City
· P.O. Box
· Postal Code
· Website
Other data not listed above (such as the number of employees, revenue amount) will not be shared with non-governmental entities or the public, except in the form of aggregated statistical data only, without referring specifically to your establishment’s information (e.g., the number of Saudi employees in the retail sector in Riyadh).
None of these data will be exchanged, circulated, published, or sold to any party other than government entities without your prior consent, and access to the information will only be granted to qualified personnel providing government services.
Term 9: External Links
Links to other websites are provided on the "Monsha’at" website for the convenience of users. However, "Monsha’at" is not responsible for the content of those external websites, their proper functioning, or any issues that may arise from their use.
Users are fully responsible for their actions while using any websites accessed through these links on this site.
Term 10: Exercising the Rights of the Data Subject
The data subject has the right to request access to, correction of, or deletion of their personal data by contacting us via email at: [email protected]
Term 11: Personal Data Protection Officer
Name: Data Management Office at "Monsha’at"
Email: [email protected]
Term 12: Complaints and Inquiries
For any inquiries related to Biban Forum 2025, you can contact the call center through the following channels:
• Toll-free number: +966112993030
• Email: [email protected]
Working hours: Saturday to Thursday, from 10:00 AM to 12:00 AM
Term 13: Changes to the Privacy Notice
The Privacy Notice was last updated on October 5 2025
The Authority reserves the right to amend this Privacy Notice at any time without prior notice.
Your continued use of the website following such changes constitutes your acceptance of the updated notice. Therefore, please review the Privacy Notice periodically to ensure you are aware of the latest version.
General Provisions
· The Authority is committed to complying with the Personal Data Protection Law issued by Royal Decree No. (M/19) dated 09/02/1443H, its executive regulations, and any subsequent amendments, policies, or related directives.
· The laws of the Kingdom of Saudi Arabia shall exclusively apply to all matters related to disputes that may arise from the use of this website or application.
· The courts of the Kingdom of Saudi Arabia shall have exclusive jurisdiction to hear and adjudicate such disputes.
Personal Data Protection Regulations
National data governance policy
Fundamental principles of personal data protection