At Green Bus, we prioritize your privacy. We are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, store, and share your data when you use our mobile application and website.
Who we are: The controller of your personal data is Green Bus Company For steering vehicles (شركة جرين باص لتوجية المركبات) ("Green Bus"), unified commercial registration number 7042283494, Riyadh, Kingdom of Saudi Arabia. You can contact us about your data at contact@greenbus.sa.
We process your personal data on the legal bases recognised by the Personal Data Protection Law, namely: performance of your booking contract; compliance with a legal obligation (including tax, transport and anti-fraud requirements); our legitimate interests in operating, securing and improving the Service; and your consent, where required (for example for news emails), which you may withdraw at any time.
We do not sell your personal information to third parties. However, we may share your data with:
We may also share data with bus providers to fulfil your booking, with professional advisers and regulators (including the Transport General Authority and the Ministry of Tourism where their regulations require), and in connection with a corporate transaction such as a merger or acquisition. Your bookings and passengers' identity details are stored on servers in the Kingdom (Dammam). Some of our service providers process limited data outside the Kingdom: Google (our email provider, for ticket and support emails; ticket emails never contain identity numbers), Cloudflare (website delivery and security) and WhatsApp (our support chat). We transfer personal data outside the Kingdom only in accordance with the Personal Data Protection Law and its data-transfer regulations, rely on SDAIA's standard contractual clauses where a provider offers them, and keep what leaves the Kingdom to the minimum. We require our service providers to process personal data only on our instructions and to keep it secure.
We implement industry-standard measures to protect your data from unauthorized access, disclosure, or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a personal-data breach, Green Bus will act in accordance with the Personal Data Protection Law of the Kingdom of Saudi Arabia and its Implementing Regulations, including notifying the Saudi Data & Artificial Intelligence Authority and, where required, affected data subjects within the periods prescribed by law, and taking reasonable steps to mitigate the breach. While we take reasonable measures to protect your information, users should also take steps to safeguard their personal data.
While we take these measures seriously, no method of electronic transmission or storage is completely secure. To the maximum extent permitted by applicable law (including the Personal Data Protection Law of the Kingdom of Saudi Arabia), Green Bus shall not be liable for unauthorised access, interception, misuse, loss, or disclosure of data, or for any damage arising out of such events, where caused by circumstances beyond our reasonable control - including third-party attacks, vulnerabilities in third-party systems, or compromise of your own device or credentials. In any event, Green Bus's total aggregate liability is limited to the ticket price paid for the affected booking, without prejudice to any rights that cannot be excluded under applicable law.
We keep personal data only for as long as necessary for the purposes described in this Policy, including to provide the Service, comply with legal, tax and regulatory obligations (such as the retention of transaction records required by the Zakat, Tax and Customs Authority), resolve disputes, and enforce our agreements. When personal data is no longer required, we securely delete or anonymise it. In particular: (a) records of bookings, payments, refunds and tax invoices, the support correspondence about them, and the account details linked to them are kept for six (6) years from the transaction, as required for tax and accounting records; (b) other customer-service messages and correspondence - including messages to our WhatsApp line and emails - are kept for at least twelve (12) months, as the Ministry of Tourism's regulations require, and then deleted once no longer needed; (c) if you ask to be told when Green Bus reaches your city, we keep that request for no longer than twelve (12) months and delete it thirty (30) days after we have notified you; (d) the details entered for a booking that is never paid are deleted thirty (30) days after the booking was started; (e) messages and job applications sent through greenbus.sa are deleted twelve (12) months and fifteen (15) days after we receive them, and a news sign-up is kept until you unsubscribe; and (f) a Green Points account with a zero balance and no booking or points activity for six (6) years is deleted with its history.
We use only strictly necessary cookies and similar browser storage: to keep you signed in, to remember your language and display choices, to keep your saved trips on your device, to remember the last travellers you booked for (up to eight - their names, identity numbers and, where given, nationality - kept only on your device so you can fill them in again), and for security and payment processing (including bot protection and the payment page of our licensed payment provider). We do not use analytics or advertising cookies, so no consent is needed. If we ever introduce non-essential cookies, we will ask for your consent first and let you change your choice at any time. You can also delete cookies and site data in your browser settings; doing so may sign you out or reset your preferences, and removes the travellers remembered on your device.
Our platform may include links to third-party websites. We are not responsible for their privacy practices and recommend reviewing their policies. Third-party services accessed through the Service - including payment providers and bus providers - process your data under their own privacy policies, and we encourage you to review them. Green Bus is not responsible for the privacy practices of those third parties.
We may update this Privacy Policy periodically. Changes will be communicated through our platform, and continued use implies acceptance of the updated terms. Where a change is material, we will provide prominent notice through the Service or by email before it takes effect, and the "last updated" date will indicate when the Policy was last revised.
The Service is intended for users aged 18 and over. We do not knowingly collect personal data from children without the consent of a parent or guardian. If you believe a child has provided us with personal data, please contact us so that we can take appropriate action. Bookings must be made by an adult. When an adult books for a passenger under 18, the adult provides that passenger's name and identity details and, by booking, confirms that they are the passenger's parent or guardian or have their consent; we use those details only for that journey and keep them as set out in section 5.
Green Bus offers its platform in multiple languages to cater to a diverse user base. While we strive for accuracy in our translations, in the event of any discrepancy or inconsistency between the translated versions of this Privacy Policy and the English version, the English version shall prevail. By using the Service, you acknowledge and agree to this.
If you have any questions or concerns about this Privacy Policy, please contact us at:
GREEN BUS