Zeed is a business-to-business marketplace, so most of what we hold is company information. This notice explains the personal data behind it: what we collect, why, who sees it, how long we keep it, and the rights you can exercise at any time.
Last updated: 22 August 2026
The short version
We collect only what we need to run your account, publish your listings, and connect you with the other side of a trade.
We do not sell personal data, and we do not run advertising or third-party tracking on Zeed.
You can ask for a copy of your data, or ask us to correct or delete it, at any time — we reply within 30 days.
1.Who is responsible for your data
Zeed is operated by Zimam Alriyada Company, commercial registration 7052171647, VAT registration 314324117200003, registered at Building 7930, King Abdul Aziz Ibn Abdulrahman Al Saud Branch Road, Al Sahafah District, Unit 4497, Riyadh 13321, Kingdom of Saudi Arabia. For the purposes of the Saudi Personal Data Protection Law (PDPL) and the Egyptian Personal Data Protection Law, Zimam Alriyada Company is the data controller for the personal data described in this notice.
For any question about this notice, or to exercise a data right, contact us through the contact page and we will respond within the periods set out below.
2.What personal data we collect
Everything below is either given to us by you, generated by your use of the platform, or entered about you by an organisation that uses our CRM.
Account and identity — Your full name, work email address, the role you hold (buyer, restaurant, supplier, manufacturer, brand or admin), your preferred language, and a securely hashed version of your password. We never store your password in readable form.
Business profile — Your organisation's name, type, country, logo and cover image, tagline, storefront address, and verification status. Much of this is published publicly on the marketplace and on your storefront.
Trading activity — Quote requests, orders and order lines, prices, quantities, currencies, order status, and cross-border logistics records such as incoterms, carrier, tracking reference, customs status and SFDA status. Ratings, reviews and the sellers you save are held here too.
Messages between buyer and seller — The content of messages you send on an order thread, together with your name and the organisation you sent them on behalf of. The other party to that order can read them.
Enquiries and CRM records — When you contact us or are added to a customer list, we hold your name, company, email, phone, country, the source you came from, the stage of the conversation, follow-up dates, and notes our team logs after a call, meeting or message.
Event and workshop registrations — Name, email, phone, company and the role you selected when you register for a Zeed workshop or event.
Team invitations — When you invite a colleague, we store the email address you entered, who sent the invitation, and whether it was accepted or revoked.
Email records — Every email we send you — password resets, order updates, invitations, confirmations — is written to an outbox first, with the recipient address, subject, full content, delivery status and any delivery error. This is how we can show exactly what was sent.
Subscription and payment records — Your plan, its status, the date it is paid until, and a log of each manual payment (amount, method, date and reference note). Zeed does not take card details and does not process card payments.
Technical and usage data — Your IP address, used to rate-limit forms and block abuse; a session cookie that keeps you signed in; a cookie that remembers your language; and daily storefront view counts, which are aggregate totals and are not linked to any individual.
We do not ask for, and do not want, sensitive personal data — national ID scans, health data, religious or political information, or biometric data. Please do not put such data into a message, an enquiry or a CRM note. We also do not knowingly collect data about anyone under 18.
3.Why we use it, and our legal basis
We only process personal data where we have a clear basis to do so. The table sets out each purpose, the data involved, and the basis we rely on.
Purpose
Data used
Legal basis
Create and operate your account
Account and identity, business profile
Performance of our contract with you
Publish your listings and storefront
Business profile, product and catalogue data
Performance of our contract with you
Connect buyers and sellers — quotes, orders, messages
Trading activity, messages, contact details
Performance of our contract with you
Verify sellers and keep the marketplace trustworthy
Business profile, submitted documents, verification history
Legitimate interest, and compliance with applicable trade rules
Send service emails — password resets, order updates, invitations
Name, email, email records
Performance of our contract with you
Newsletters, workshop invitations and marketing
Name, email, company, CRM records
Your consent — withdraw it at any time
Security, rate limiting and abuse prevention
IP address, session cookie, audit logs
Legitimate interest in protecting the platform and its users
Bill subscriptions and keep accounting records
Subscription and payment records, business profile
Performance of our contract, and a legal obligation to retain commercial records
Where we rely on your consent — for marketing, newsletters and event invitations — you can withdraw it at any time using the unsubscribe link in the email, or by writing to us. Withdrawing consent does not affect anything we sent before you withdrew it.
4.Cookies
Zeed uses two cookies, both strictly necessary for the site to work:
A session cookie that keeps you signed in and protects your account. It is deleted when you sign out.
A language cookie that remembers whether you chose English or Arabic.
We do not use advertising cookies, cross-site trackers, or third-party analytics profiles. That is why you do not see a cookie consent banner on Zeed.
5.Who we share personal data with
We share personal data only where it is needed to run the service:
The other party to your trade. When you request a quote or place an order, the seller (or buyer) sees your organisation, your name, your messages and the order details. That is the whole point of the marketplace.
Our email delivery provider, which transmits the service and notification emails we send you.
Our hosting and infrastructure provider, which operates the servers the platform runs on.
Professional advisers — accountants, auditors and lawyers — bound by confidentiality.
Competent authorities, courts or regulators, where we are legally required to disclose, or to establish or defend a legal claim.
We never sell personal data, and we never rent or trade contact lists.
6.Transfers outside your country
Your data is processed on servers operated for Zeed. Where any processing takes place outside the Kingdom, we apply the safeguards required by the Personal Data Protection Law before the data is transferred.
Where personal data of individuals in Saudi Arabia is transferred outside the Kingdom, we do so only on the grounds permitted by the PDPL and its implementing regulations — to perform the contract you are party to, or with appropriate safeguards in place — and we limit the transfer to the minimum data needed.
Every provider we use is bound by a written agreement that requires them to process the data only on our instructions, to keep it confidential, and to apply security measures at least as strong as our own.
7.How long we keep it
We keep personal data only as long as we need it for the purpose it was collected for, or as long as the law requires:
Account and business profile data — for as long as your account is open, and for 12 months after you close it, so we can handle any dispute or reinstatement request.
Orders, quotes, logistics records, subscription and payment records — 10 years from the end of the financial year, to meet commercial and tax record-keeping obligations in Saudi Arabia and Egypt.
Order messages — kept with the order they belong to.
CRM contacts, enquiries and workshop registrations — 24 months from our last contact with you, unless you become a customer or ask us to delete them earlier.
Email records — 24 months, then deleted.
IP addresses used for rate limiting — held in memory only and discarded within one hour. Daily storefront view counts are aggregate figures with no personal data in them and are kept indefinitely.
8.How we protect it
Security is built into how the platform is run:
All traffic is encrypted in transit with HTTPS/TLS.
Passwords are stored only as salted one-way hashes — nobody at Zeed can read them.
Data is separated per organisation, and every query is scoped to the organisation making it, so one tenant cannot see another's records.
Access inside Zeed is role-based and limited to the staff who need it, and material actions are written to an audit log.
The database is reached through a dedicated least-privilege account, and forms are rate-limited against automated abuse.
No system is perfect. If a breach occurs that is likely to harm you, we will notify the competent supervisory authority and the affected individuals without undue delay, as the law requires.
9.Your rights over your data
Under the Saudi Personal Data Protection Law — and equivalent Egyptian law — you have the following rights:
Right to be informed — To know what we collect, why, and who we share it with — which is what this notice is for.
Right of access — To ask whether we hold personal data about you, and to see it.
Right to obtain a copy — To receive your data in a readable, commonly used electronic format.
Right to correction — To have inaccurate, incomplete or outdated data corrected or completed. Most profile fields you can edit yourself in the dashboard.
Right to destruction — To ask us to delete personal data that is no longer needed for the purpose it was collected for. We may still have to keep trading and accounting records for the statutory period set out above.
Right to withdraw consent and to object — To withdraw consent for marketing at any time, and to object to processing that is not necessary to run your account or fulfil a contract.
For any question about this notice, or to exercise a data right, contact us through the contact page and we will respond within the periods set out below.
We respond within 30 days, free of charge. We may first need to verify your identity so that we do not disclose your data to someone else. If a request is manifestly excessive or repetitive, we will explain why before we decline it.
If you are not satisfied with our answer, you may complain to the competent supervisory authority — in Saudi Arabia, the Saudi Data and Artificial Intelligence Authority (SDAIA); in Egypt, the Personal Data Protection Centre.
We do not make decisions with a legal or similarly significant effect on you by automated means alone. Where Zeed uses AI to help with tasks such as drafting or summarising, a person at Zeed reviews the outcome, and we do not give your data to a model to train it.
11.Children
Zeed is a business platform intended for people aged 18 and over acting for a registered business. We do not knowingly collect data about children. If you believe a child's data has reached us, tell us and we will delete it.
12.Changes to this notice
We update this notice when the platform or the law changes. The date at the top always shows the current version. If a change materially affects how we use your data, we will email account holders at least 14 days before it takes effect.
13.Contact us
Zeed is operated by Zimam Alriyada Company in Saudi Arabia. Use the contact page to reach us about this notice, your data, or anything else.