Your privacy

The information we use

Depending on the services you use, this includes the contact person’s name and contact details, business details, delivery address and the location you select, account identifier, order details, payment references and status, and customer-service correspondence. Hosting and security services may record necessary technical information such as connection addresses and request times. Information identifying a business’s employee or representative is still personal data.

Required and optional fields are identified. Without information needed for sign-in or delivery, we may be unable to provide that service; subscribing to offers is optional. Do not send card details or sensitive information that is unnecessary for your request.

Why we use it

Account and order data are processed to manage the contractual relationship and deliver the service. Information required for invoices and records is processed to meet applicable legal obligations. Security and fraud-prevention data are processed only as needed and on an appropriate lawful basis; any reliance on legitimate interests must respect your rights and interests.

Reading this privacy policy is not blanket consent to every use of your data. When we rely on consent for a particular purpose, we request it clearly and separately. You may withdraw it without affecting earlier lawful processing or processing needed on another lawful basis.

Service providers and processing locations

The platform is hosted on an OVHcloud server. MyPonic manages sign-in codes and sessions on its server and uses Brevo to deliver email verification codes when that method is enabled. The email provider receives the recipient address and message content and may retain them and process delivery and engagement data according to its settings. Customer sessions are separate from staff sessions and permissions. Available sign-in methods appear on the Account screen. When online payment is enabled, Moyasar processes the payment and the platform retains the references and status needed to follow it up.

Necessary information may be shared with delivery, messaging, and technical-support providers according to the service used, or with competent authorities where legally required. We do not assume all processing takes place within Saudi Arabia; services may involve processing abroad. Any transfer must meet applicable legal requirements and safeguards. You may request information about recipients, processing locations, and the relevant safeguards.

Browser storage

The store uses browser storage for your language choice, session cart, and payment-attempt tracking. When enabled, the account service uses storage needed to keep you signed in. Clearing storage may remove your local cart or require another sign-in; it does not delete our order records.

Site fonts are served from files hosted with the site. The store currently runs no marketing analytics or advertising trackers. If optional tracking is added, we will explain its purposes, providers, and choices before activation and obtain consent where required.

Retention and protection

We retain information only to the extent and for the time needed for its purpose, applicable legal obligations, or an ongoing dispute requiring retention, and then delete it or remove identifying details as appropriate. Retention varies by record type; closing an account does not immediately erase invoices or records that must legally be retained.

Access is restricted according to work needs, and measures are taken to protect the data. Backups also have protection and retention cycles; we do not promise immediate removal of every copy when a deletion request is submitted.

Your rights and requests

You may request information about processing, access to your data and a readable copy, correction, completion or updating, and destruction where provided by law. You may also withdraw consent where it is the basis for processing.

Send requests through the store’s published contact channel when available. We check identity only as needed to protect your data and handle rights requests without delay within the statutory period of no more than 30 days. If a lawful extension applies, we tell you its reason and duration in advance; the extension cannot exceed a further 30 days. You may complain to the Saudi Data and Artificial Intelligence Authority through the National Data Governance Platform.

Offers and service messages

Receiving offers and product news is separate from creating an account or buying. You can switch it off in your account’s communication preferences or through the available unsubscribe method. Declining offers does not affect verification messages or order updates needed for the service. Order messages do not count as consent to marketing.