Privacy Policy

eBen FZE ("eBen", "we", "us") is a UAE-based B2B employee-experience company, part of the eBHL group, with offices in Abu Dhabi, Ajman, Riyadh and Cairo. In most client relationships, the employer is the "controller" of employee personal data and eBen acts as a "processor" providing the platform and services on the employer's behalf. Where eBen determines the purposes of processing — for example, for its own marketing or website analytics — eBen acts as a controller in its own right.

• Account data: name, work email, job title, employer and login credentials.
• Employment-context data: role, location, team, tenure and similar information provided by an employer to configure benefits, recognition and sentiment features.
• Usage & technical data: device, browser, IP address, log data and interactions with the Services.
• Communications: messages sent through contact forms, support channels, or in connection with a booked call.

We use personal data to provide and support the Services, to communicate with Users, to maintain security, and to improve our products. Where eBen acts as controller, our lawful bases typically include performance of a contract, our legitimate interests in operating and improving our Services, compliance with legal obligations, and, where required, your consent.

Where an employer provides eBen with employee data to configure benefits, recognition, sentiment or community features, that employer is generally the controller of that data and is responsible for ensuring it has a lawful basis and, where required, has informed its employees. eBen processes that data under instructions from the employer and the terms of the applicable agreement.

We may share limited personal data with benefit vendors (where a User opts into a specific offer), technology sub-processors that host or support the Services, and professional advisers, always under confidentiality and data protection obligations consistent with this policy. We do not sell personal data.

As a regional business with offices across the UAE, Saudi Arabia and Egypt, and using internationally hosted infrastructure, personal data may be transferred across borders. Where this occurs, we take steps intended to ensure an appropriate level of protection, consistent with applicable UAE data protection law and, where relevant, GDPR-equivalent safeguards such as standard contractual clauses.

We retain personal data for as long as necessary to provide the Services, comply with legal and contractual obligations, and resolve disputes, after which it is deleted or anonymized in line with our data retention practices and the applicable client agreement.

We apply administrative, technical and physical safeguards designed to protect personal data against unauthorized access, loss, misuse or alteration, including access controls, encryption in transit, and regular review of our security practices. No system can be guaranteed completely secure, and we encourage Users to safeguard their own credentials.

Subject to applicable law — including UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and, where applicable, GDPR-equivalent standards — you may have the right to access, correct, erase or restrict the processing of your personal data, to object to certain processing, to request data portability, and to withdraw consent where processing is based on consent.

Where an employer is the controller of your data, we recommend contacting your employer first. You may also contact eBen's privacy team using the details below and we will route your request appropriately.

We use cookies and similar technologies to operate our website, remember preferences and understand aggregate usage. For more detail, please see our Cookie Policy.

The Services are intended for use by working-age adults in a business context and are not directed at children. We do not knowingly collect personal data from children.

For privacy questions, requests, or complaints, contact us at welcome@eben.work. We will respond within a reasonable time and, where applicable, you may also have the right to lodge a complaint with your local data protection authority.