Privacy Policy

Last updated: April 2026

Operator Osama Alam is committed to protecting your privacy in accordance with the Saudi Personal Data Protection Law (PDPL), issued by Royal Decree M/19 of 1443H. This policy describes what data we collect, how it is used, and your full rights.

1. Data We Collect

Full name, email address, phone number
Delivery address (city, country, postal code)
Order details and purchase history
Technical data: IP address, browser type, pages visited (via Firebase Analytics)
We do not collect or store payment card data — it is processed entirely by Moyasar

2. Purposes of Processing

Processing, confirming, and delivering orders
Sending transactional notifications via email
Customer support and order-related communication
Compliance with regulatory and tax obligations

3. Third-Party Service Providers (Data Processors)

We engage the following trusted third-party service providers to operate the platform. They operate under contracts ensuring your data is processed securely and in accordance with our obligations:

Provider	Purpose	Data Location
Firebase (Google LLC)	Database, Authentication, Storage	Google data centers (outside KSA)
AWS SES (Amazon)	Transactional email delivery	Amazon data centers
Moyasar	Electronic payment processing	Saudi Arabia (SAMA-licensed)

4. Cross-Border Data Transfers

Some data is stored on Firebase (Google) and AWS servers located outside Saudi Arabia. These servers are subject to internationally recognized data protection policies. By using the platform, you consent to this transfer under the terms stated here.

5. Data Retention

Order and invoice data: 5 years (Saudi accounting and tax requirements)
User account data: for the duration of activity + 12 months after closure
Authentication sessions: 7 days (encrypted cookies)
Email logs: 90 days

6. Your Rights Under PDPL

The Saudi Personal Data Protection Law grants you the following rights:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data (unless legally required to retain)
Withdraw consent to processing at any time
Request a copy of your data (portability)

To exercise any of these rights, contact us at: osama.aalam@gmail.com

7. Technical Security

We apply HTTPS/TLS encryption to all communications. Authentication cookies are protected with HttpOnly, Secure, and SameSite flags. Payment data is processed exclusively by Moyasar (PCI-DSS certified) and never passes through our servers.

8. Contact & Complaints

For any privacy-related inquiry, request, or complaint, contact us via:

Email: osama.aalam@gmail.com
Phone: +966 50 654 2290