Privacy Policy
Last updated: April 2026
Operator Osama Alam is committed to protecting your privacy in accordance with the Saudi Personal Data Protection Law (PDPL), issued by Royal Decree M/19 of 1443H. This policy describes what data we collect, how it is used, and your full rights.
1. Data We Collect
- Full name, email address, phone number
- Delivery address (city, country, postal code)
- Order details and purchase history
- Technical data: IP address, browser type, pages visited (via Firebase Analytics)
- We do not collect or store payment card data — it is processed entirely by Moyasar
2. Purposes of Processing
- Processing, confirming, and delivering orders
- Sending transactional notifications via email
- Customer support and order-related communication
- Compliance with regulatory and tax obligations
3. Third-Party Service Providers (Data Processors)
We engage the following trusted third-party service providers to operate the platform. They operate under contracts ensuring your data is processed securely and in accordance with our obligations:
| Provider | Purpose | Data Location |
|---|---|---|
| Firebase (Google LLC) | Database, Authentication, Storage | Google data centers (outside KSA) |
| AWS SES (Amazon) | Transactional email delivery | Amazon data centers |
| Moyasar | Electronic payment processing | Saudi Arabia (SAMA-licensed) |
4. Cross-Border Data Transfers
Some data is stored on Firebase (Google) and AWS servers located outside Saudi Arabia. These servers are subject to internationally recognized data protection policies. By using the platform, you consent to this transfer under the terms stated here.
5. Data Retention
- Order and invoice data: 5 years (Saudi accounting and tax requirements)
- User account data: for the duration of activity + 12 months after closure
- Authentication sessions: 7 days (encrypted cookies)
- Email logs: 90 days
6. Your Rights Under PDPL
The Saudi Personal Data Protection Law grants you the following rights:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (unless legally required to retain)
- Withdraw consent to processing at any time
- Request a copy of your data (portability)
To exercise any of these rights, contact us at: osama.aalam@gmail.com
7. Technical Security
We apply HTTPS/TLS encryption to all communications. Authentication cookies are protected with HttpOnly, Secure, and SameSite flags. Payment data is processed exclusively by Moyasar (PCI-DSS certified) and never passes through our servers.
8. Contact & Complaints
For any privacy-related inquiry, request, or complaint, contact us via:
- Email: osama.aalam@gmail.com
- Phone: +966 546 906 905