1. Introduction
Welcome to Al Khaiyaat ("we," "us," "our"). We are committed to protecting your privacy and ensuring the security of your personal data in accordance with the Saudi Personal Data Protection Law (PDPL) and other applicable regulations in the Kingdom of Saudi Arabia.
This Privacy and Cookie Policy explains how we collect, use, disclose, store, and protect your personal information when you use our e-commerce platform (the "Platform"), including when you browse, create an account, place orders, or contact customer support.
By accessing or using Al Khaiyaat, you acknowledge and consent to the practices described in this policy.
2. Scope of This Policy
This policy applies to all users of the Al Khaiyaat platform, including visitors, registered customers, and delivery partners. It covers:
- Personal data collected through our website and mobile application (if applicable).
- Use of cookies and similar tracking technologies.
- Your rights as a data subject under Saudi law.
3. Definitions
- Personal Data: Any information that identifies or can be used to identify an individual, such as name, email, phone number, address, payment details, etc.
- PDPL: Saudi Personal Data Protection Law (Royal Decree No. M/19 dated 09/08/1442H).
- Processing: Any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
- Data Subject: You, the individual whose data we process.
4. Information We Collect
We collect the following types of information:
a) Personal Identification Information
- Full name
- Email address
- Mobile phone number
- National ID or Iqama number (for delivery verification)
- Date of birth (if required for age-restricted products)
b) Account and Transaction Data
- Username and password
- Order history
- Payment method (credit card, Mada, Apple Pay, STC Pay, etc. – processed securely via third-party gateways)
- Billing and shipping addresses
- Customer service communications
c) Technical and Usage Data
- IP address
- Device type, browser, operating system
- Pages visited, time spent, click patterns
- Referral source (e.g., Google, social media)
d) Location Data
- Approximate location via IP address (not precise GPS unless enabled for delivery tracking)
e) Cookies and Tracking Technologies
(See Section 7 for details)
5. How We Use Your Information
We process your personal data for the following lawful purposes under PDPL:
| To process and fulfill your orders |
Contractual necessity |
| To communicate with you (order updates, support) |
Legitimate interest & contractual necessity |
| To personalize your shopping experience |
Consent (where required) |
| To improve website functionality and user experience |
Legitimate interest |
| To prevent fraud and ensure platform security |
Legal obligation & legitimate interest |
| To comply with tax, legal, and regulatory requirements |
Legal obligation |
| To send marketing communications (only with consent) |
Explicit consent |
You may withdraw consent at any time by updating your preferences in your account settings or contacting us.
6. Data Sharing and Disclosure
We do not sell your personal data. We may share your information with:
-
Service Providers: Trusted third parties who assist us in operations (e.g., payment processors, delivery couriers, cloud hosting providers), bound by strict confidentiality agreements.
-
Legal Authorities: When required by law, court order, or government request.
-
Affiliated Companies: Only if necessary for service delivery and under PDPL compliance.
All third parties are required to adhere to Saudi data protection standards.
7. Cookies and Tracking Technologies
What Are Cookies?
Cookies are small text files stored on your device that help us recognize you, remember preferences, and analyze site traffic.
Types of Cookies We Use:
| Essential Cookies |
Enable core functions (e.g., login, cart) |
Session or Persistent |
| Analytics Cookies |
Track site usage (via Google Analytics or similar) |
Up to 2 years |
| Marketing/Advertising Cookies |
Personalize ads (e.g., Facebook Pixel, Google Ads) |
Up to 1 year |
| Preference Cookies |
Remember language, currency, region |
Up to 1 year |
Managing Cookies
You can manage or disable cookies through your browser settings. However, disabling essential cookies may affect site functionality.
For more information and to opt out of third-party tracking:
8. Data Retention
We retain your personal data only as long as necessary:
-
Order data: Up to 5 years for tax and legal compliance.
-
Account data: Until you delete your account or for 2 years of inactivity.
-
Marketing consent: Until you withdraw consent.
Upon deletion, data is securely erased or anonymized.
9. Data Security
We implement technical and organizational measures to protect your data, including:
- SSL encryption (HTTPS)
- Secure payment gateways (PCI-DSS compliant)
- Regular security audits
- Restricted employee access to personal data
- Firewalls and intrusion detection systems
Despite our efforts, no online transmission is 100% secure. We encourage you to use strong passwords and log out after sessions.
10. Your Rights Under Saudi PDPL
As a data subject, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of data (subject to legal exceptions)
- Withdraw consent at any time
- Object to processing for marketing
- Lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA)
To exercise your rights, contact us at: info@alkhaiyaat.com
We will respond within 30 days as required by PDPL.
11. Children’s Privacy
Our platform is not intended for users under 18 years of age. We do not knowingly collect data from minors. If we become aware of such collection, we will take steps to delete the information.
12. International Data Transfers
While our servers are located in Saudi Arabia, some third-party service providers may process data outside the Kingdom. We ensure such transfers comply with PDPL, including through appropriate safeguards and contractual clauses.
13. Changes to This Policy
We may update this policy periodically to reflect changes in our practices or legal requirements. The updated version will be posted on our website with a new effective date. Continued use of the platform constitutes acceptance of the revised policy.
14. Contact Us
For any questions, requests, or complaints regarding your personal data or this policy, please contact:
Al Khaiyaat
Email: info@alkhaiyaat.com
Address: Ibn Asaker, Al Aziziyah, Jeddah, Saudi Arabia
You may also file a complaint with the National Cybersecurity Authority (NCA) or SDAIA if unresolved.
Thank you for trusting Al Khaiyaat. We are committed to safeguarding your privacy and delivering a secure shopping experience.
