1. Definitions

BAB is a cloud communications platform that provides a solution to manage all your customer communications channels like SMS, Communication center, and Smart Messaging, WABA, Business Intelligence. Through this platform we offer our services through a web-based portal, SDKs, and APIs, empowering our clients to integrate these channels into their operations to engage with their customers.

This Privacy Policy applies to our customers, prospective customers, our customers’ customers (both direct and indirect), and visitors to our company website www.bab.com.sa If you do not agree with this Privacy Policy, do not access or use our services or interact with any other aspect of our business. Note: if you’re a user of an application that is integrated or built using BAB’s products and services, that application’s privacy policy will describe how it collects, uses, stores, and shares your data. We are not responsible for the privacy policies or actions of our customers.

Our services are designed to be used for business purposes only. By accepting this Privacy Policy, you are taking full responsibility for the content and validity of the information sent to the end users. You shall bear full liability in the case of misuse or when the service is used in a manner that is contrary to public morals, security aspects or regulations.

Communications usage information. This includes information about your communications delivered via our platform such as the time and duration of usage, source and destination identifiers, completion status, location, IP address, and amount of usage.

Communications content. To enable you to send and receive communications via our platform, we need to be able to handle the content of the messages, calls, and other communications channels used by you. This also includes, for example, voicemails and call recordings recorded via our services.

Information you provide directly to us. When you sign up for our services, request us to contact you, or through other interactions with us, we may ask you for certain personal information, such as your name, birthdate, address, e-mail address, telephone number, company name, job title, or payment information. When you request support from us, we may also collect information from you such as contact information, documentation, screenshots, or other information you or we may believe is helpful to solve the issue. In this regard, we may also keep recordings of voice or text interactions as a reference for our internal use.

Information we collect automatically when you visit our websites. We and our third-party partners, such as our advertising and analytics partners, collect information about your visits to our websites and your interaction with our ads or content, together with information such as your IP address, cookies, and other tracking technologies.


How we use the information we collect depends on which of our services you use, how you use them, and specific preferences you may have communicated to us. We list below the specific purposes for which we collect your information.

To deliver our services. We use Customer Usage Data and Customer Content to provide services to you and to carry out necessary functions of our business as a communications service provider. We do not sell your end users’ personal information and we do not share your end users’ information with third parties for those third parties’ own business interests.

To comply with legal requirements. Applicable laws or regulations may require our processing of your data, such as laws mandating retention of communications data.

To protect our legitimate business interests and legal rights. Where we believe it is necessary to protect our legal rights, interests and the interests of others, we use information about you in connection with legal claims, compliance, regulatory, and audit functions, and disclosures in connection with the acquisition, merger or sale of a business.

We do not sell or allow your Customer Account Data to be used by third parties for their own marketing purposes, unless you ask us to do this or give us your consent to do this. Further, we do not sell your end users’ personal information (whether contained in Customer Usage Data or Customer Content). And, we do not share it with third parties for their own marketing or other purposes, unless you instruct us to do so.

If you have questions or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact information provided in our website www.bab.com.sa.

WABA & SMS Privacy Policy

1. Definitions

The terms contained in the Agreement and these Terms and Conditions beginning with a capital letter are defined and have the meaning as set out in this Article:

Agreementthe agreement concluded between BAB and Client, including all associated appendices, to which these Terms and Conditions apply.

Applicable Law(i) all applicable laws and regulations, government requests and codes of conduct laid down by competent authorities or industries that apply to providing or receiving the Service and/or End User Service in the country where the Service and/or the End User Service is delivered; and also (ii) all regulations, guidelines, conditions, policy rules and/or other requirements that are used by Operators in the country where the Service and/or the End User Service is delivered.

Client: the Party with whom BAB concludes the Agreement.

BAB:the private limited liability company Bab.com.sa International B.V. (Chamber of Commerce 1010236729)..

End User: a natural person who is authorized by Client to make use of the Client’s End User Services.

End User Service service provided by Client to its End Users, via the Platform of BAB..

Operator: a (mobile) electronic communications service provider that provides (wireless) voice and data communication and other related services to other Operators and/or for its subscribed end users.

Platform:the computing environment of BAB designed to create the connection between an electronic communication network and the system of the Client.

Service:a service BAB provides to the Client under the Agreement..

Traffic: electronic communication and/or data traffic from and to a mobile telephone and/or fixed line, mobile device or online application. Such traffic includes without limitation SMS, MMS, Push, OTT, RCS, voice and/or data.

Working Day: Monday to Friday from 8.30 a.m. to 5.00 p.m. Central European (Summer) Time (CE(S)T), excluding generally recognized public holidays in the Netherlands.

2. Scope

2.1 These Terms and Conditions apply to all requests, offers, relations, quotations and Agreements between BAB and the Client, unless the Parties have expressly agreed otherwise in writing.

2.2 The applicability of any general (purchasing) terms and conditions used by Client is hereby expressly excluded.

2.3 Reference to "writing" anywhere in this Agreement shall be considered all communication in either electronic or paper format.

2.4 Applicable Law applies to End User Services and will take precedence upon conflict with the provisions of the Agreement or these Terms and Conditions. Upon request, BAB may inform the Client concerning the contents and/or applicability of said Applicable Law. However, it is the Client's sole responsibility to familiarize itself with all Applicable Law and to procure independent legal advice in respect thereof and BAB will not provide warranties in this regard. If for any reason whatsoever the provisions of the Applicable Law shall be deemed not to apply to the relations between BAB and the Client, or be declared inapplicable, the provisions of the Agreement and these Terms and Conditions shall take precedence.

3. Offers

3.1 All offers made by BAB are without obligation and are non-binding unless expressly stated otherwise in writing. If not stated otherwise, an agreement with BAB shall not be concluded until BAB has expressly accepted or confirmed an order to that effect in writing.

3.2 BAB expressly reserves the right to amend its pricing and/or pricing model with regard to general price lists, brochures, information on websites and other information provided in the context of offers.

4. Prices, payment and taxes

4.1 The currency indicated in the price list of the Agreement will be currency to be used by the Client to settle the invoice. If no currency was agreed on between the Parties the currency will be euro. All prices are exclusive of value added tax (VAT) and/or any other taxes, charges or levies imposed by any government authority.

4.2 The applicable prices and rates are listed on the website of BAB and/or described in the Agreement. Unless a fixed price has been expressly agreed, BAB is reserves the right to change prices and rates at any time without notice. The Client shall be charged for all Traffic that is sent to, and received by the Platform of BAB via the connection of Client. The billing period is based on CE(S)T time zone.

4.3 If a fixed price has been expressly agreed in the Agreement for one or more destinations, BAB is only entitled to change the agreed fixed price(s) after written agreement by the Client.

4.4 Notwithstanding article 4.3, BAB is in every instance entitled to change its prices following from changes to Applicable Law, from an increase in the purchase price of messages and/or from rates changes effected by Operators. BAB shall inform the Client in advance of such price increases as soon as reasonably possible.

4.5 The Client shall pay all invoices without suspension, set-off or deduction within fourteen (14) days of the invoice date, unless the Agreement explicitly contains different payment terms.

4.6 In the event that Client fails to pay BAB the amounts due within the agreed period, statutory commercial interest shall be applied and will fall due accordingly by the Client on the outstanding amount without any requirement from BAB to communicate a notice of default.

4.7 BAB is entitled to demand payment of a deposit. During the term of the Agreement the deposit may be adjusted after mutual consultation. Upon termination of the Agreement the deposit will be refunded to the Client after set-off of the deposit against any outstanding amounts then due by the Client to BAB. The deposit shall be transferred back to the client within two (2) whole calendar months following termination of the Agreement. BAB shall not be obligated to maintain deposits in segregated accounts or and neither will they accrue interest for the Client.

4.8 Client is responsible for payment of the applicable value added tax (VAT) and/or any other tax or levy on its End User Service. The Client shall indemnify BAB for and against all claims by tax authorities in this regard and shall indemnify BAB for all losses, penalties and costs arising thereof.

4.9 Where bank fees occur, Client shall bear the costs imposed by its own bank, any intermediate bank and the bank of BAB as indicated on the invoice when making payments under the Agreement. The net amount received by BAB shall correspond to the amount invoiced. In this regard, the Client remains liable to pay the any shortfall of outstanding amounts due.

4.10 Notwithstanding article 4.3, BAB shall have the right to make adjustments to its prices (fixed or general) on an annual basis at the beginning of each subsequent calendar year to reflect the annual changes in the national Consumer Price Index (CPI).

5. Obligations

5.1 Client will ensure a secure, continuously working connection at its own cost to the Platform of BAB.

5.2 Client shall ensure that access to the aforementioned connection and the account of Client is limited to authorized employees of Client and that log-in credentials are stored securely. It is not permitted to authorize use to other persons and/or third parties.

5.3 Client shall only use the Services for its intended and normal purpose and/or purposes as agreed and described in the Agreement. Any change to the Service is to be requested in writing.

5.4 Client is responsible for the content of Traffic sent by Client, the lawfulness of the Traffic and the identity of the relevant End User, including as to whether such End User has "opted in" to receive applicable Traffic, and guarantees that these comply with Applicable Law. The Client will maintain up to date records of end user consent or proof of lawful basis and provide these to BAB upon request. The Client will not send any unsolicited traffic, nor other unethical, illegal, punishable or otherwise fraudulent or illicit traffic or content.

5.5 Client shall cooperate with BAB and provide any information reasonably required for boarding and acceptance procedures of Operator(s). Client will provide BAB the full name of its company, its address, Chamber of Commerce or company registration number and VAT number (if applicable) and the name of its director(s) authorized to sign the Agreement. Changes to these details must be passed on to BAB in writing.

5.6 Client accepts that BAB may be obliged by Operators and/or competent authorities to provide the data of Client as described in the previous paragraph and the data of other parties that are being connected via Client. Client shall provide all such data requested by BAB within three (3) Working Days.

5.7 Client shall cooperate with any audit which investigates whether the Client is acting in accordance with Applicable Law.

6. Warranty and indemnification

6.1 Client warrants that the content and the promotion of the End User Service under no circumstances infringes the (intellectual property) rights of third parties or is in breach of Applicable Law.

6.2 Client shall indemnify, defend and hold harmless BAB and its affiliates against all liabilities, losses, damages, claims, penalties, fines and costs (including reasonable legal costs) resulting from or arising out of the failure by Client to comply with article 5 and/or Applicable Law. The indemnity includes, but is not limited to claims made by authorities, organizations and institutions that supervise compliance with the Applicable Law and the content of the Traffic, claims by third parties and also all claims made by Operators in connection with the failure by Client to comply with the Applicable Law.

6.3 BAB will not be responsible for any Service failures or faults which occur, or losses suffered by the Client, as a result of a breach by the Client of the provisions of this Agreement, including but not limited to the Client's obligations in Article 5.

7. Suspension

7.1 If the Client acts contrary to an obligation under the Agreement, these Terms and Conditions, Applicable Law, Operator guidelines or the obligation to pay the amounts due to BAB within the agreed payment term, BAB is entitled to suspend provision of the Service without limitation to any other remedy available to BAB, including cancellation of this Agreement and/or a claim for specific performance and/or damages.

7.2 The Client remains liable for payment for the period that the provision of the Service is suspended in accordance with the provisions of this Article.

7.3 As soon as the reason for suspension in accordance with the provisions of this Article is removed by Client, BAB shall resume delivery of the Service unless BAB believes that the nature and/or frequency of Client's non-compliance is such that the provision of the Services should be cancelled permanently. If applicable, the activation costs which BAB incurs in this respect will be charged to the Client.

8. Connection to the Platform

8.1 Client is responsible for the sending and/or delivery of Traffic up to the point of interconnection with the Platform of BAB. Client is responsible for appropriate encryption and security of its Traffic.

8.2 BAB makes no warranty or guarantee that any Traffic will be correctly delivered to or received by End Users after leaving the Platform of BAB. BAB provides no warranty or guarantee on behalf of any carrier and/or Operator regarding system capacity, throughput, response times or delivery. BAB cannot guarantee that Traffic will be accepted by any Operator or that any of the Operators will maintain connectivity with BAB.

9. Setting-off

9.1 BAB is entitled to set off the amounts the Client owes to BAB against the amounts BAB owes to the Client.

9.2 If BAB and the Client or any of their affiliates have concluded several Agreements, the amounts reciprocally due on the basis of these Agreements can be set off by BAB, regardless of the Agreement from which the payment obligations in question derive.

10. Disputes regarding amounts payable

10.1 If the Client disputes the accuracy of an invoice sent by BAB, Client will provide a motivated complaint within the payment term applicable to the invoice in question by written notice to BAB. It is only possible to lodge a dispute to an invoice if the amount in dispute is greater than €150.00 (excluding taxes) and greater than three (3%) percent of the invoice amount (excluding taxes).

10.2 The Client will only be entitled to suspend payment of the disputed part of the invoice, if the amount disputed by the Client exceeds 5% of the total amount of the invoice in question (excluding VAT). If the dispute is not resolved within twenty (20) Working Days after the due payment date of the invoice in question, the Parties will be able to submit the dispute to an external expert. This external party will be appointed in mutual consultation. The Parties will also make agreements in this regard concerning the costs involved in engaging the external party.

11. Confidentiality and Client data

11.1 Parties shall keep confidential all information and data received from each other that is marked confidential or evidently confidential from its nature, unless a legal obligation exists to disclose such information and/or data. The non-disclosure obligation shall end one year after the Agreement ends.

11.2 The Client solely receives the user rights and authorities expressly granted under the Agreement, these Terms and Conditions or otherwise, and for the remainder shall not disclose, reproduce or make copies of any materials it receives on the basis of this Agreement from BAB, nor shall the Client process or modify these materials, without prejudice to further arrangements between BAB and the Client in this matter.

11.3 Data of the Client is collected by BAB at registration. This (personal) data is required for contract management and customer support, conducting credit checks and preventing fraud and criminal activities on the BAB Platform. The data can additionally be used for statistical research and to contact Client for marketing activities of BAB and its affiliates. For the purpose of carrying out credit checks and monitoring to prevent fraud and criminal activities, BAB may share data with third parties.

11.4 BAB processes traffic data (including personal data), for the following purposes: providing continuous information to Client through BAB Analytics, billing, financial administration, handling complaints and disputes, traffic control, providing information to emergency services, preventing fraud and criminal activities.

11.5 The processing of data mentioned in the previous articles 11.3 and 11.4 is necessary for the delivery and operation of the Services and associated invoicing, therefore BAB is considered to be a Controller for the aforementioned data. BAB will act according to Applicable Law associated with its status as Controller.

12. Intellectual property rights

12.1 The Parties accept and respect each other's intellectual and other property rights. All intellectual property rights to any materials, developed by BAB for or made available to the Client on the basis of the Agreement, such as equipment, software, analyses, designs, documentation, reports and/or offers, and any preparatory material belonging thereto, shall solely be held by BAB and/or its licensors.

13. Liability

13.1 The Client recognizes that access to the internet, the GSM network and other communication media is subject to uncertainties, including but not limited to, in relation to availability of services, reliability of transmission, authorizations, authenticity and data security. There is no warranty that the Services are, or will be completely free of faults or defects. BAB shall not be liable if an interruption of the service was due to a fact beyond its control, such as, but not limited to, disturbance of radiotelephone and/or telecom transmissions outside the Platform of BAB. In the event of a fault or defect, BAB shall use its reasonable efforts to restore the Service in accordance with proper practices recognized in the electronic communications industry.

13.2 If BAB suffers a loss as a consequence of the Client acting contrary to an obligation under the Agreement, these Terms and Conditions or Applicable Law, the Client is obliged to compensate BAB for the resulting loss.

13.3 Neither Party will be liable under or in relation to this Agreement or arising out of the provision of the Service, to the maximum extent permitted by applicable law, even if advised of the possibility of such damages and whether in relation to tort, including negligence, breach of contract or otherwise, or any other liability for any of the following: (i) loss of profits, revenues or sales; (ii) loss of bargain; (iii) loss of opportunity; (iv) loss of use of any service or any computer equipment; (v) loss of time on the part of management or other staff; (vi) professional fees or expenses; (vii) business interruption, related to this agreement or the Services provided hereunder, (viii) loss of income by the Client because the Client did not set up correct rates for the Traffic, (ix) damage to or loss of data; (x) loss of goodwill or reputation, or (xi) any other indirect, special, incidental or consequential damages of any kind howsoever arising.

13.4 BAB’s liability shall be limited in aggregate to an amount equal to the average monthly invoice of Client with a maximum of fifty thousand euro (€ 50.000) for the total duration of the Agreement. In no event shall the total compensation by BAB for any and all claims under this Agreement exceed fifty thousand euro (€ 50,000.00).

13.5 The limitations on liability specified in Article 13.3 and 13.4 shall cease to apply if and insofar as the loss is due to the willful intent or gross negligence of the liable party, or in case of damage to life, body and health.

13.6 Client can agree to purchase beta releases of Services (meaning Services under development and not final yet). Those services may have some irregularities that still need to be worked out. If the Client has explicitly accepted a beta release of a service, BAB can’t be held liable for any loss or damage caused by this service. Beta releases are provided “as is”, “as available” and without any warranties.

13.7 No right to compensation shall ever arise unless the Party in question reports the loss to the other Party in writing within ten (10) Working Days after it has arisen. The other Party then has ten (10) Working Days to remedy the loss, if possible.

14. Force majeure

14.1 BAB is not bound to meet any obligation under the Agreement if it is prevented from doing so as a consequence of force majeure. The term 'force majeure' is used in this context to include but is not limited to: government interventions, strikes, acts of terrorism or threat thereof, interruption of operations, energy disruptions, interruptions in telecommunications facilities of third parties, failure or late compliance by ancillary suppliers of BAB or other third parties engaged by BAB, as well as every other circumstance that BAB could not reasonably have avoided or prevented, which creates an obstacle to the normal performance of the Agreement.

14.2 If BAB is prevented from complying with its obligations due to force majeure, it shall make this known to the Client within ten (10) Working Days following the day on which the situation of force majeure arose.

15. Duration and termination of the Agreement

15.1 The Agreement is entered into for the initial duration agreed between the Parties in the Agreement, failing which a period of one (1) year shall apply.

15.2 After the initial period the Agreement shall be renewed for the duration specified in the Agreement, failing which a period of one (1) year shall apply. After the initial period, the Parties may terminate the Agreement in writing by giving three (3) months' notice.

15.3 BAB may unilaterally terminate the Agreement or the provision of a Service prematurely if it considers that further execution of the Service cannot reasonably be expected on economic grounds. This is to be announced and substantiated in writing to Client.

15.4 Either Party may terminate the Agreement for cause, wholly or partially, by registered letter if the other Party imputably fails to comply with its obligations under the Agreement, and – unless compliance is permanently impossible – if, after sending the most detailed possible written notice of default while allowing a term of ten (10) Working Days to remedy the failure, the other party continues to fail to comply. The nature and/or extent of the shortcoming must justify this premature termination.

15.5 Either Party may terminate the Agreement for cause, wholly or partially and with immediate effect, by registered letter without need for notice of default: a. if the other Party – whether temporarily or not – is granted suspension of payments, or if a petition in the other Party's bankruptcy is filed, or if the other Party is declared bankrupt, or if a significant part of the other Party’s assets are seized, or the other Party’s business is liquidated or terminated other than for the purposes of restructuring or merging undertakings; b. if the situation of force majeure as referred to in Article 14 lasts longer than twenty (20) Working Days; c. if such termination is required by the authorities or because of changes to the terms and conditions of Operator(s).

15.6 If at the time of such termination as is referred to in Article 15.4 and 15.5 the Client has already received any performance in the execution of the Agreement, any amounts invoiced by BAB before the termination in connection with that received performance shall remain fully due and shall become immediately payable upon termination.

15.7 Provisions which by their nature are intended to survive termination of the Agreement shall continue to apply after the end of the Agreement. These provisions among other things form part of articles regarding warranties & indemnification (6), setting-of (9), confidentiality & client data (11), intellectual property rights (12), liability (13), force majeure (14) and applicable law & disputes (17) of these Terms and Conditions, as well as this and the previous paragraph in this Article.

16. Transfer of rights and obligations; subcontracting

16.1 This Agreement may not be assigned by either Party without the written consent of the other Party, such consent not to be unreasonably withheld; provided, however, either Party may assign this Agreement without prior notice or permission to any affiliate of such entity or to any entity acquiring all or substantially all of assets of such entity. Any prohibited assignment shall be null and void. Subject to the foregoing, this Agreement shall be binding upon and shall inure to the benefit of the successors and permitted assigns.

16.2 BAB is entitled to engage affiliates and third parties for the performance of the Agreement.

17. Applicable law and disputes

17.1 All offers from and Agreements with BAB and their performance, as well as these Terms and Conditions are governed exclusively by Dutch law. 17.2 Any disputes, including those which are only considered as such by one Party, resulting from or connected with the Agreement to which these Terms and Conditions apply or the Terms and Conditions themselves, will – notwithstanding the possibility of appeal – be submitted to the competent court in Amsterdam.

18. Miscellaneous provisions

18.1 Without prejudice to article 18.3, amendments and additions to the Agreement or other notifications only apply if they are agreed in writing and have been signed by the persons authorized for this purpose on behalf of both Parties. Any amendment or addition will only apply to the relevant Agreement.

18.2 Contact persons may only represent and bind Parties insofar as this concerns the operational performance of the Agreement.

18.3 BAB is authorized to modify this Terms and Conditions at any time. BAB will inform Client of any modifications. If Client doesn’t object in writing within a month from the date of sending of the modification notification, the modifications to the terms and conditions are deemed accepted by Client. If Client objects, the previous terms and conditions will still apply. However, BAB then alternatively has the right to cancel the Agreement with Client by giving one (1) month written notice.

18.4 Failure by one of the Parties to demand compliance with any obligation will not affect the right still to demand compliance, unless the Party in question has expressly agreed to the non-compliance in writing.

18.5 In the event that one or more of the conditions in this Agreement or these Terms and Conditions is or becomes null and void, or is set aside by a court, the remaining conditions will continue to apply in full. The Parties will consult each other as regards the invalid provisions in order to agree, if possible, on a similar provision that is permitted by law.

Part II. Data Processing

This Part II specifies the obligations of the Parties in relation to the Processing of Personal Data of which the Client is the Controller, or in respect of which the Client has a Processing or sub-processing relationship with the Controller, for the purposes of the applicable Data Protection Laws, within the scope of and related to the Agreement for the provision of Services between the Parties. Article 17(2) of the Data Protection Directive 95/46/EC (the "Directive") as well as Article 28(3) of the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”) places certain obligations upon Client acting as a Controller or Processor, to ensure that any processor it engages provides sufficient guarantees in respect of the technical security measures and organizational measures governing the Processing to be carried out.

Under the applicable telecom and Data Protection Laws providers of public electronic communication services shall act as independent controllers with respect to the Processing of Personal Data which is necessary for the operation of the electronic communication service, which shall include any information Processed for the purpose of the conveyance of a communication (Traffic Data) on an electronic communications network or for the billing thereof.

19. Definitions and interpretation

In Part II of these Terms and Conditions, except where set forth otherwise, the following terms shall have the following meanings:

Data Protection Laws: the Data Protection Laws of the country in which Client is established and any Data Protection Laws applicable to Client and/or BAB in connection with the Agreement.

Personal Data: any information relating to an identified or identifiable natural person (‘Data Subject’) that is Processed by BAB in its role as Processor as part of providing the Service to Client under the Agreement. For the avoidance of doubt, Processing of personal data which is necessary for the operation of the electronic communication service and business contact information of Client shall not be subject to Part II of these Terms and Conditions.

Processing/to Process: any operation or set of operations which is performed on Personal Data, whether or not by automatic means, including collecting, accessing, storing, using, combining, transferring, disclosing or deleting of Personal Data.

Technical and Organizational Measures: measures to protect Personal Data against accidental or unlawful destruction or accidental loss, alternation, unauthorized disclosure or access and against all other unlawful forms of Processing.

Personal Data Breach: a breach of security leading to the accident or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Personal Data transmitted, stored or otherwise Processed.

The expressions such as, ‘Data Subject’, ‘Processor’, ‘Controller’, ‘Data protection impact assessment’, etc. shall have the meaning ascribed to them in the Data Protection Laws.

19.2 References in Part II of these Terms and Conditions to the Data Protection Laws shall be replaced with or incorporate references to any laws replacing or amending those Data Protection Laws, and the equivalent terms defined in such laws, once in force and applicable.

19.3 Notwithstanding anything in Part II of these Terms and Conditions, BAB will have the right to collect, extract, compile, synthesize and analyze non-personal identifiable data or information resulting from Client's use or operation of the Services including, by way of example and without limitation, information relating to volumes, frequencies, bounce rates, or any other information regarding communications (“Service Data”) Client, its End Users or recipients generate and send using the Services. To the extent any Service Data is collected or generated by BAB such data will be solely owned by BAB and may be used by BAB for any lawful business purpose without a duty of accounting to Client, provided that such data is used only in an aggregated form, without directly identifying any person. For the avoidance of doubt, Part II of these Terms and Conditions will not apply to Service Data containing Personal Data.

19.4 In case of any conflict, the provisions of this Part II concerning Processing of Personal Data shall take precedence over the provisions of the Agreement and/or Part I. Where individual provisions of this Part II are invalid or unenforceable, the validity and enforceability of the other provisions shall not be affected.

20. Obligations of the Client

20.1 Compliance

20.1.1 Client shall, in its use of the Service, Process Personal Data in accordance with the requirements of Data Protection Laws. For the avoidance of doubt, Client’s instructions for the Processing of Personal Data shall comply with Data Protection Laws. Client shall have sole responsibility for the accuracy, quality, and legality of Personal Data and the means by which Client acquired Personal Data.

20.1.2 Client shall maintain accurate and complete records of the use of the Service under the Agreement during the term and as required under the Data Protection Laws. Upon reasonable written notice, Client shall provide information as requested and where required by BAB, any Operator, regulator or other competent authority. Without limiting the generality of any other provision of the Agreement, prior to using the Service, Client shall obtain verifiable informed consent of the End Users or be able to provide confirmation of the lawful basis for Processing in accordance with applicable legislation and regulations, and shall maintain a record of each such consent and/or lawful basis.

21. Obligations of the Processor

21.1 Instructions

21.1.1 BAB shall Process Personal Data in accordance with this Part II and the Agreement, and for the purposes and in the manner specified by Client from time to time in the Agreement and further instructions within the scope of the Agreement.

21.1.2 In case BAB is required to Process Personal Data under mandatory law as specified in this Part II or the Agreement, BAB shall for those purposes be considered an independent controller. If BAB is required to Process Personal Data under mandatory law BAB shall inform Client hereof in writing before Processing unless the law prohibits providing such information.

21.2 Technical and Organizational Measures

21.2.1 Taking into account the state of the art, the nature, scope, context and purposes of Processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, BAB shall implement appropriate Technical and Organizational Measures (including protection against unauthorized or unlawful Processing and against accidental or unlawful destruction, loss or alteration or damage, unauthorized disclosure of, or access to, Personal Data) to ensure a level of security appropriate to the risk. Up to date information regarding Technical and Organizational Measures can be found on BAB.com/about-BAB/security-compliance/.

21.2.2 BAB shall test, assess and evaluate the effectiveness of Technical and Organizational Measures for ensuring the security of the Processing on an ongoing basis. BAB shall continuously enhance and improve Technical and Organizational Measures.

21.3 Personnel requirements

BAB ensures that persons authorized to Process the Personal Data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality.

21.4 Confidentiality

BAB agrees that it shall maintain the Personal Data in confidence. In particular, BAB agrees that it shall not disclose any Personal Data supplied to BAB by, for, or on behalf of Client to any third party without Client's prior consent, except as foreseen and required for the performance of the Service under the Agreement or mandatory law.

21.5 Data Subject Rights

21.5.1 Where Client so instructs BAB, BAB shall transfer, correct, delete or block Personal Data if Client receives a request from a Data Subject to exercise the Data Subject's right of access, right to rectification, restriction of Processing, erasure (“right to be forgotten”), data portability, object to the Processing, or its right not to be subject to an automated individual decision making (“Data Subject Request”).

21.5.2 BAB shall promptly notify Client if BAB receives a Data Subject Request. Taking into account the nature of the Processing, BAB shall assist Client, for the fulfilment of Client’s obligation to respond to a Data Subject Request under Data Protection Laws. BAB shall assist Client in responding to such Data Subject Request, to the extent BAB is legally permitted to do so and the response to such Data Subject Request is required under Data Protection Laws. To the extent legally permitted, Client shall be responsible for any costs arising from BAB’s provision of such assistance.

21.6 Assistance with Client’s compliance

BAB shall provide to Client further assistance reasonably required to ensure compliance with Client's obligations under Data Protection Laws, including with respect to: (a) data protection impact assessment, by providing such information and cooperation as Client may require for the purpose of assisting Client in carrying out a data protection impact assessment and periodic reviews to assess if the Processing of Personal Data is performed in compliance with the data protection impact assessment; (b) prior consultation with a data protection supervisory authority regarding high risk Processing.

21.7 Compliance, information and audit

21.7.1 BAB has obtained the third-party certifications set forth in the Security & Compliance section on the website of BAB, which provides information on Technical and Organizational Measures and data security. Upon Client’s written request, and subject to the confidentiality obligations set forth in the Agreement, Processor shall make available to Client, that is not a competitor of BAB (or Client’s independent, third-party auditor that is not a competitor of BAB) a copy of BAB’s then most recent third-party certifications and information regarding the IT architecture and security, as applicable and reasonably requested.

21.7.2 Client has the right to appoint an accredited external expert at most once per year to audit the procedures regarding the data Processing for Client. BAB will cooperate with such audit upon a reasonable prior written notice of no less than ten working days. Client shall reimburse BAB for any time expended by BAB for any such audit at BAB’s then-current professional services rates, which shall be made available to Client upon request. Before the commencement of any such audit, the Parties shall mutually agree upon the scope, timing, and duration of the audit in addition to the reimbursement rate for which Client shall be responsible.

21.7.3 BAB is entitled to request that the external expert signs a confidentiality declaration in favor of BAB. The confidentiality declaration shall contain the terms and conditions that are usual for this type of declaration. Any report or statement provided by the external expert shall be made available to BAB. Client shall ensure that the audit hinders BAB 's operations as little as possible.

21.8 Records

BAB shall maintain complete, accurate and up to date records of Processing activities carried out on behalf of its Clients.

21.9 Affiliates and Sub-processors

21.9.1 Some or all of BAB’s obligations under the Agreement may be performed by Affiliates of BAB. For the purpose hereof an “Affiliate” means a legal entity directly or indirectly Controlling, Controlled by, or under common Control with BAB, for so long as such Control lasts. "Control" shall exist through the direct or indirect ownership of more than 50% of the share capital of the legal entity or of more than 50% of the issued share capital entitling the holders to vote for the election of directors or persons performing similar functions. BAB and its Affiliates have entered into intra-company arrangements, under which its Affiliates Processing Personal Data adopt safeguards consistent with those of BAB. BAB is responsible for compliance of its Affiliates' with this Agreement.

21.9.2 Client acknowledges and agrees that (a) BAB’s Affiliates may be retained as Sub-processors; and (b) BAB and BAB’s Affiliates respectively may engage third-party Sub-processors in connection with the provision of the Services. Provided always BAB or a BAB Affiliate has entered into a written agreement with each Sub-processor containing data protection obligations not less protective than those in this Agreement with respect to the protection of Personal Data to the extent applicable to the nature of the Service provided by such Sub-processor.

21.9.3 BAB shall be responsible for each of its Sub-processors to the same extent BAB would be responsible if performing the services of each Sub-processor directly under the terms of the Agreement.

21.10 Breach Notification

In respect of a Personal Data Breach, BAB shall: (a) notify Client of a Personal Data Breach involving BAB or a sub-contractor without undue delay (but in no event later than forty-eight hours after becoming aware of the Personal Data Breach). (b) provide reasonable cooperation and assistance to Client in relation to any action to be taken in response to a Personal Data Breach under applicable Data Protection Laws, such as Art. 33(3) and 34(3) GDPR, including regarding any communication of the Personal Data Breach to the Data Subject and data protection authorities.

BAB will promptly investigate a Personal Data Breach and take reasonable measures to identify its root cause(s) and prevent a recurrence. As information is collected or otherwise becomes available, unless prohibited by law, BAB will provide Client with a description of the Personal Data Breach, the type of data that was the subject of the Personal Data Breach, and other information Client may reasonably request. The Parties agree to coordinate in good faith on developing the content of any related public statements or any required notices for the affected Data Subjects and/or the relevant data protection authorities.

22. Storage, retention and deletion of Personal Data

BAB shall Process and retain data, including Personal Data, in accordance with applicable law, regulations, including but not limited to national telecom legislation and Data Protection Laws. The data, including Personal Data, submitted to the platform of BAB shall be Processed and stored in accordance with the BAB’s data retention policy. The Personal Data shall be retained for no longer than is necessary for providing the Services under the Agreement, for the purposes as states in Part I and as far as required under applicable law. BAB shall de-identify or depersonalize data into anonymized data after the applicable retention period. This results in data that includes no Personal Data or unique identifiers that could later be used to refer to the Personal Data to which the data was once associated.

23. Description of Processing

23.1 Nature and Purpose of Processing

BAB will Process Personal Data as necessary to perform the Services pursuant to the Agreement, as further specified in the Agreement, and as further instructed by Client in its use of the Services.

23.2 Categories of Data Subjects

Client may submit data to BAB in using the Service, the content of which is determined and controlled by Client in its sole discretion, and which may include, but is not limited to Personal Data relating to the following categories of Data Subjects: • (Potential) customers (who are natural persons) of Client or its clients; • Employees, contractors, advisors, freelancers or persons hired by (customers of) Client; • Contact persons of Client’s prospects, customers and business partners; • Client’s users authorized by Client to use the Services.

23.3 Type of Personal Data

Client may submit Personal Data to the Services, the extent of which is determined and controlled by Client in its sole discretion, and which may include, but is not limited to the following categories of Personal Data: First and last name, Contact information (company, address, email, phone), IP address.

24. Purposes of Processing

The Personal Data is Processed for the following purposes: Provision of the Services as detailed in the Agreement.

Part III. Messaging

In the event that messaging Services are a part of the Service provided to Client under the Agreement, the following conditions apply:

25. General

The Client is responsible for the content of all messages sent by Client and guarantees that these comply with Applicable Law.

26. Additional Terms and Conditions SMS Messaging

26.1 The messaging account(s) of Client have a standard message limit of 50,000 messages. BAB will send Client an electronic notice (e-mail) when Client reaches 75% of the standard message limit.

26.2 After receiving the message limit notification, Client will be able to pay for the messages for which no payment has been received by BAB. Due and timely payment will prevent the messaging account from being (temporarily) suspended when the message limit is reached. Client may request an increase of the applicable message limit. Client hereby agrees that BAB may, in its sole discretion, modify (increase or decrease) or cancel the message limit at any time by email notification to Client and with immediate effect. Any requested change of the message limit requires written approval of BAB. Until the credit limit has been increased or messages have been paid by Client, BAB has the right to suspend the Services without further notice and/or any liability. BAB is under no obligation to send SMS messages until payment is received and/or the limit is increased and accepts no liability for the consequences of said SMS messages not being received by the End Users.

27. Additional Terms and Conditions Social Media and Push Services

27.1 Social Media and Push Services provide the Client with the possibility to communicate, share information with, and regarding individual End Users using Social Media applications and/or in-app push messaging. It is the sole responsibility of the Client to ensure the communication, the information obtained and sent to the End User is sufficiently secured and protected, and that Client has obtained the required informed consent of each individual End User, or has a lawful basis, before Processing or transferring any information of said End User using social media channels or push messaging. BAB shall not have any responsibility in this regard and BAB shall provide (access to) Social Media and Push Services and all information on “as is” and “as available” basis.

27.2 The terms and conditions of the organizations providing the various social media platforms and services integrated in the Service are applicable to the use of the Service by Client. It is Clients responsibility to ensure compliance with said general terms and conditions and Applicable Law.

Part IV. Voice

In the event that Voice Services are a part of the Service provided to Client under the Agreement, the following conditions apply:

28. Additional Terms and Conditions Voice

28.1 Client guarantees that it will refrain from: (i) using the Voice Services for other than normal use as intended by BAB, (ii) infringing intellectual property rights of third parties, (iii) misusing allocated access codes or issuing such to third parties, (iv) teasing, spamming, offending, causing hurt or annoyance, hacking or causing a nuisance in some other way, (v) establish connections on a large scale to sales numbers or services, (vi) as well as every action as a result of which payments owing to BAB are improperly restricted.

28.2 Client shall not use or permit others to use the Voice Services in a manner that is fraudulent or unauthorized. BAB may, without notice and without liability, interrupt all Client's communications to prevent or terminate fraudulent and/or unauthorized activities.

28.3 BAB is obligated to use reasonable efforts to enable interoperability of services in order to make telephone numbers reachable from as many networks as possible. However, BAB must rely on the interoperability of services of Operator(s) in each country for end-to-end connectivity. BAB does not warrant and represent that all telephone numbers from all networks will be reachable at all times.

28.4 Client is responsible to securely connect its network or systems with the Platform of BAB. Client is responsible for all Traffic submitted to the Platform of BAB or initiated from the Client account and is without exceptions also fully responsible for the payment of all aforementioned Traffic. Client is responsible for its own calling behavior, call destinations and Traffic to and/or through the Platform of BAB.

28.5 Client is required to send along the correct information with regard to the location where the call is initiated/set up (“Caller” or “Sender ID”) with every call that comes through the Platform of BAB via the connection of Client. Withholding that actual location information - intentionally or by accident - is in any case, but certainly in the event of trying to lower costs, considered to be unreasonable use of the Service by Client and is strictly forbidden. In this event, BAB may take immediate proportionate measures including but not limited to applying a surcharge and disconnecting the Service. 28.6 Client shall indemnify, defend and hold harmless BAB and its affiliates against all liabilities, losses, damages, claims, penalties, fines and costs (including reasonable legal costs) resulting from or arising out of the failure by Client to comply with this article.

Part V. Premium SMS, Direct Carrier Billing and Premium Voice Services

In the event that Premium SMS, Direct Carrier Billing and/or Premium Voice is/are a part of the Service provided to Client under the Agreement, the following conditions apply:

29. General

29.1 The Applicable Law as referred to in Article 2.4 of the Terms and Conditions includes, but is not limited to the Paid SMS and Mobile Internet Services Code of Conduct, at www.payinfo.nl for services in the Netherlands and GOF guidelines for SMS/MMS Services and the Royal Decree establishing the Ethical Code for Telecommunications for Services in Belgium, and also (ii) all regulations, guidelines, conditions, policy rules or other requirements that are used by Operators in the country where the Service and/or the End User Service is delivered.

29.2. Under the Agreement and these Terms and Conditions it is not allowed to offer any gaming and betting. If Client offers a End User Service including any form of game, betting, game of chance, additional conditions need to be agreed with BAB.

29.3 To avoid excessive abuse of the offered functionality (system and GSM network), Operators have the possibility to charge a fee for unsuccessful transactions, provided that the number of unsuccessful transactions exceed 25% of the total of successful transactions. This fee for unsuccessful transactions, charged by the Operator will be passed on to Client transparently.

29.4 Client is obligated to report to BAB in writing on each new End User Service, each new keyword and each amendment within and End User Service five (5) Working Days prior to activation.

29.5 Without prejudice to BAB’s right to compensation for damages, if the Client acts or has acted contrary to a material obligation in this Part V and/or Applicable Law, BAB will be entitled to a suspension of Client’s current and future outstanding payments, if available, for three (3) months in order to compensate possible End User compensations and to comply with (if any) claims for penalties resulting from the breach of Client.

30. Revenue model and revenue payment by BAB

30.1 BAB shall pay the revenue generated for the Client in accordance with the schedules as available on www.BAB.com/products/pricing/.

30.2 The revenue generated for the benefit of Client shall be based on the records of BAB. The records of BAB are based on the number of transactions for which the Operator payouts have actually been paid to BAB and have been received by BAB.

30.3 On average BAB shall send Client an "out-payment overview" within ten (10) days following the month during which the Traffic took place. BAB shall pay the revenue detailed in the "out-payment overview" to the account of Client within the payment term mentioned in the "out-payment overview". Client does not need to send an invoice to BAB.

30.4 BAB receives the relevant amounts for the Client Services from different Operators at different times. Regardless of anything to the contrary herein, BAB is not obligated to make any payments to the Client, if BAB has not received the corresponding payment from the Operators and BAB is not obligated to pay to the Client more than it has received from the Operators for the respective Client Services. If BAB receives a partial or reduced payment from the Operators, the Client’s share shall be reduced accordingly. In the event BAB makes any payment to the Client before receiving full payment from the Operators, BAB reserves the right to reclaim the payment from the Client in the event the Operator does not transfer said full payment to BAB in due time. Operators disclaim their payment liability for transactions that they have failed to collect from, or have refunded to, the End-Users, and BAB has no payment obligations towards the Client in this case.

30.5 Regardless of anything to the contrary herein, BAB reserves the right to suspend the Client's use of the Service, withhold payments or reverse previous payments to the Client upon the occurrence of any of the following situations: (i) any suspected breach of the Agreement by the Client, pending BAB's reasonable investigation of the breach; (ii) an End-User making a claim to BAB for a refund or other reversal; (iii) BAB believes that the transactions and/or Client Services are illegal, involve misconduct or fraud or otherwise violate the Applicable Law; or (iv) an Operator or competent authority requests from, or applies towards BAB a suspension of services and/or withholding or reversal of payments.

30.6 End-Users have a chargeback or other refund right and BAB may claim such refunds (plus a processing fee imposed by Operators) from the Client or deduct them from payments to the Client.

30.7 BAB may set off any payment obligation that BAB may have to the Client against any payment obligation that the Client may have to BAB, for example (i) any losses, fines, penalties, damages, taxes or expenses which the Client shall compensate under the Agreement and/or Applicable Law (ii) amounts overpaid to the Client due to a reversal, refund, chargeback or other adjustment or (iii) any other amounts owed by the Client to BAB.

30.8 Each Party shall be liable for their own tax obligations. In case it is required by law or competent authority, BAB and/or the Operator have the right to pay or withhold applicable taxes and charges (e.g. VAT and withholding tax) from the payments to the Client, providing the Client with the necessary evidence upon request.

30.9 The Parties shall promptly provide each other with documentation as may be required by the other Party in order for the other Party to fulfil its obligations under the Agreement or required by law, competent authorities or Operators.

30.10 If the Client wishes to dispute any payment from BAB, this shall be done within ten (10) days as of the date of receipt of such payment. Failure to do so during the aforementioned limitation period shall result in the Client having accepted the correctness of the payment. In the event of disputes regarding payments, the Party disputing the payments shall (a) provide details regarding the dispute and the reasons thereof; and (b) furnish the other Party with relevant proof in support of its dispute. Both Parties shall jointly determine the cause of any deviation to facilitate BAB to seek clarification from the Operators and the data of the Operators shall be conclusive evidence.

30.11 The End-User’s payment may be declined by Operators for several reasons, e.g. the verification data is incorrect, the End-User could not be identified due to failing security checks, insufficient funds on the End-User’s account, the End-User’s agreement has expired, Operators system disruptions etc. BAB is not responsible for any declined or failed payments.

31. Complaints by End Users and Operators

31.1 The Client is responsible for processing complaints from End Users in connection with the End User Service in the local language.

31.2 The Parties shall under all circumstances adhere to the deadlines and provisions set in the Applicable Law for processing complaints by End Users.

31.3 The Parties are jointly responsible for replying to questions from Operators in relation to the End User Service.

31.4 For the handling of complaints from End Users – regarding the End User Service – by BAB, Client may be charged for an administration fee of € 5,- per handled complaint. For each End User compensation by BAB, Client shall be charged for an administration fee of € 35, for each End User compensation plus the actual amount compensated to the End User by BAB.

31.5 For each End User compensation made by an operator – regarding the End User Service –, BAB shall charge Client for an administration fee of € 35,- for each group of End User compensations – as mentioned on the invoice of the Operator – plus the actual amount compensated to the End User.

31.6 Additional costs from complaint handling charged by the operator will be passed on to Client transparently.

31.7 If the Client acts or has acted contrary to an obligation in Applicable Law and BAB – e.g. according to article 36 of the Paid SMS and Mobile Internet Services Code of Conduct -, is requested or obliged in any way to handle a refund campaign to End Users, BAB will be entitled to an instantly due and payable fee in the amount of € 5,000 (five thousand euro), to cover for the costs of such refund campaign and Client shall pay said fee without prejudice to BAB’s right to compensation for damage in accordance with the provisions of Article 13.

31.8 To avoid excessive abuse of the offered functionality (system and GSM network), Operators have the possibility to charge unsuccessful transactions as a fine, provided that the number of unsuccessful transactions exceed 25% of the total of successful transactions. This penalty for unsuccessful transactions, charged by the Operator will be passed on to Client transparently.

Part VI. Pre-paid

In the event that Client uses any Service(s) on a Pre-Paid Basis and/or account, the following conditions apply:

32. Additional Terms and Conditions Pre-Paid

32.1 Definition Pre-Paid Client: the Client who uses the Service on a pre-paid basis. The Pre-Paid Client will make occasional payments to BAB, which are credited to his account. The credit allows the Pre-Paid Client to use the Services.

32.2 If Client has a pre-paid account, charges are incurred for the use of some Services, which are debited from Clients’ pre-paid account. Services subject to charges can only be used if the applicable minimum amount has been paid into the Pre-Paid Clients’ account.

32.3 Pre-paid credits and balance can be used by the Pre-Paid Client the day following the day the amount is received by BAB. Pre-paid credit is non-refundable and will expire twelve (12) months after the date on which the Pre-Paid Client purchased the prepaid balance.

32.4 The Pre-Paid Client is in default when the credit card payment is being charged back. BAB is entitled to close down the Pre-Paid Client’s account when a credit card payment is being charged back.

32.5 Client will indemnify BAB against misuse of pre-paid balance by third parties.

32.6 Pre-Paid Clients can terminate the Agreement at any time in writing. If at the time of such termination the Pre-Paid Client has any credit left, the Pre-Paid Client can submit a written request for restitution of this remaining credit.

32.7 BAB, is entitled to refuse a Pre-Paid Client registration to its’ service without giving reasons and to terminate an existing membership without giving reasons. Registration may only be made once per person or legal entity. The account will be deleted if the account is not charged within three (3) months of registration, or within three months after all credit has been used.

Part VII. Tickets

In the event that any ticketing solution offered by BAB is/are a part of the Service provided to Client under the Agreement, the Terms and Conditions of BAB Tickets will apply to such Service.