Privacy Policy

We collect the information needed to operate a procurement platform and to verify that the businesses using it are genuine.

• Company information, including the company name, commercial registration number, VAT number, city, activity and contact details.
• Verification documents uploaded by a supplier to support a verification request.
• User account information, including name, email address, phone number, job title and the role held within a company.
• Content submitted to the platform, including projects, tenders, requirements, bills of quantities, questions, bids, proposals and the documents attached to them.
• Subscription and billing records, including the plan held, invoices issued, amounts and payment status.
• Technical and usage records, including sign-in activity, the actions recorded in the audit trail, and the device and network information needed to keep accounts secure.

We do not collect or store complete payment card details. Card information is entered with our payment service provider and is not held by MUNAQIS.

Information is used to provide the service and to meet the obligations that come with it.

• To create and operate accounts and to apply the permissions attached to each role.
• To verify a company against official records before granting access to tenders.
• To publish tenders, receive bids, protect sealed submissions, support evaluation and record awards.
• To apply subscription entitlements, issue invoices and maintain a payment history.
• To send operational notifications, such as a tender amendment, an answered question, a verification decision or an award result.
• To maintain an audit trail that records who performed an action and when, which supports the integrity of the procurement process.
• To protect the platform against fraud, unauthorised access and misuse.
• To comply with applicable legal, regulatory and tax obligations.

Bid content submitted through the sealed-bid functionality is encrypted on submission and is not readable by MUNAQIS, by the buyer, or by any other supplier before the tender deadline has passed and the bids have been formally opened.

A buyer’s estimated budget is treated as confidential and is not disclosed to suppliers.

MUNAQIS does not sell personal information. Information is shared only where it is necessary to provide the service.

• With the other party to a procurement process, to the extent the process requires it. A buyer sees the bids submitted to their tender after opening; a supplier sees the tenders they are entitled to access.
• With the official commercial registration service, to confirm that a submitted registration number is valid and matches the company named.
• With our payment service provider, to process subscription payments and refunds.
• With our email delivery, cloud hosting and storage providers, who process information on our behalf and under our instructions.
• With competent authorities, where disclosure is required by applicable law or legal process.

Analytics shown to a supplier about competition on tenders they bid for never identify another supplier by name and never disclose another supplier’s bid.

Information is stored on managed cloud infrastructure with access restricted to those who need it to operate the service.

Security measures include encryption of sealed bid content, hashing of account passwords, expiring sessions, signed and time-limited document links, rate limiting on authentication, permission checks applied to every action, and an audit trail that cannot be edited after the fact.

No system can guarantee absolute security. Users are responsible for keeping their own credentials confidential.

Information is retained for as long as an account remains active and for as long afterwards as is necessary to meet legal, regulatory, accounting, tax and dispute-resolution obligations.

Procurement records, including tenders, bids, evaluations, awards and the audit trail, are retained as records of a completed process and are not deleted on request where retaining them is necessary to establish or defend a legal claim or to comply with a legal obligation.

Subject to applicable law, you may:

• Request access to the personal information held about you.
• Request correction of information that is inaccurate or incomplete.
• Request deletion of personal information, where no legal or contractual obligation requires it to be retained.
• Object to or request restriction of certain processing.
• Withdraw a consent you previously gave, without affecting processing already carried out.
• Lodge a complaint with the competent supervisory authority in the Kingdom of Saudi Arabia.

Requests may be made through the contact details published on the MUNAQIS website.

MUNAQIS uses cookies that are necessary for the platform to function, including keeping you signed in, remembering your language preference and protecting against unauthorised requests.

Disabling necessary cookies in your browser will prevent parts of the platform from working correctly.

MUNAQIS is a business platform intended for use by companies and their authorised representatives. It is not directed at children, and we do not knowingly collect information from them.

MUNAQIS may update this Privacy Policy from time to time to reflect changes in our services, our providers, or applicable laws and regulations.

The updated policy will be published on the platform together with its effective date.

For questions about this Privacy Policy or about how your information is handled, please contact us through the contact details published on the MUNAQIS website.