Privacy policy

Privacy Policy

1. Data Collection

We collect personal information to provide and improve our services. This includes:

  • Direct Information: Name, shipping address, billing address, email, and phone number provided during checkout.
  • Payment Data: We use encrypted third-party payment gateways (such as Mada, Apple Pay, or credit card processors). We do not store your full card details on our servers.
  • Automated Data: IP addresses, device type, and browsing behavior collected via cookies to enhance your shopping experience.

2. Legal Basis for Processing

In accordance with KSA PDPL and UAE Law, we process your data based on:

  • Consent: Your explicit agreement when signing up or purchasing.
  • Contractual Necessity: To fulfill and ship your orders.
  • Legal Obligation: To comply with local tax and commercial regulations (e.g., Saudi ZATCA requirements).

3. Use of Information

Your data is used specifically for:

  • Processing and delivering your orders.
  • Communicating order updates via SMS or Email.
  • Preventing fraudulent transactions.
  • Marketing communications (only if you have opted in).

4. Data Sharing & Third Parties

We only share your information with essential service providers:

  • Logistics Partners: To deliver your packages within KSA, UAE, and internationally.
  • E-commerce Platform: Our store is hosted on Shopify, which processes data securely.
  • Regulatory Authorities: When required by Saudi or Emirati law.
  • No Sale of Data: We do not sell your personal data to third parties.

5. Data Storage & International Transfers

Your data may be processed on servers located outside of your home country (via Shopify’s global infrastructure). We ensure that these transfers comply with local data sovereignty rules and maintain a high level of encryption.

6. Your Rights

Under Middle Eastern data protection laws, you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request that we update inaccurate information.
  • Destruction: Request the deletion of your data (subject to legal retention periods for tax/audit purposes).
  • Withdraw Consent: Opt-out of marketing at any time.

7. Security

We implement industry-standard security measures, including SSL encryption, to protect your data. However, no method of transmission over the internet is 100% secure