Privacy Policy

This Privacy Policy explains how DASH ("Platform"), operated by Expo Code in the Kingdom of Saudi Arabia, collects, uses, stores, and shares your information when you use our event procurement and payment plan services.

By using the Platform, you consent to the practices described in this policy.

We collect the following categories of information:

• Account data: company name, work email, password, role (Organizer or Payment Partner).
• KYC and business data: Commercial Registration, VAT certificate, authorized signatory details, bank account information.
• Transactional data: quotations, orders, payment plan applications, repayment history.
• Usage data: log files, device information, IP address, and interactions with the Platform.

We use your information to:

• Operate and improve the Platform.
• Verify your identity and approve your account.
• Enable procurement, vendor matching, and payment plan applications.
• Communicate with you about your account, transactions, and updates.
• Comply with legal, regulatory, and tax obligations in Saudi Arabia.

When you submit a payment plan application, we share your company profile, KYC documentation, and relevant financial data with verified Payment Partners on the Platform so they can evaluate your application and submit competing offers.

Payment Partners are contractually required to keep this information confidential and use it solely for credit evaluation and underwriting purposes.

When you place an order or request a quotation, we share necessary order details (e.g. company name, contact, delivery information) with the relevant Vendor so they can fulfil your request.

We may share data with trusted third-party service providers — such as cloud hosting, analytics, email delivery, and identity verification providers — who process data on our behalf under appropriate confidentiality and security obligations.

We may disclose your information when required by law, regulation, court order, or government request in the Kingdom of Saudi Arabia, including disclosures to SAMA or other regulatory authorities.

We implement reasonable technical and organizational measures to protect your data, including encryption in transit, access controls, and audit logging. No system is 100% secure, and we cannot guarantee absolute security.

We retain your data for as long as your account is active and for any period required by Saudi law (including tax, accounting, and AML record-keeping obligations). You may request deletion of your account, subject to these legal retention requirements.

Subject to applicable Saudi data protection law (PDPL), you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (where legally permitted).
• Withdraw consent for optional processing.

To exercise these rights, contact us at hello@dash-ec.com.

Your data is primarily stored and processed within infrastructure serving the Kingdom of Saudi Arabia. Where data is processed outside Saudi Arabia by service providers, we ensure appropriate safeguards are in place in accordance with PDPL.

The Platform uses essential cookies to maintain your session and security. We may also use analytics cookies to understand how the Platform is used and improve it.

We may update this Privacy Policy from time to time. Material changes will be notified to registered users via email or in-platform notification. Continued use after changes constitutes acceptance.

For privacy questions or requests, contact us at: hello@dash-ec.com or visit expo-code.net.