Privacy policy
Last updated
This policy explains how we handle your personal data when you use the Armexia store, in line with the Saudi Personal Data Protection Law (PDPL) and its regulations. The controller of your data is «[Legal entity name]».
What we collect
- Account data: name, mobile number and email
- Company data for business accounts: company name, commercial registration, VAT number, uploaded documents and contact person details
- Addresses: shipping, billing and national address
- Orders, quotations, invoices, return requests and their photos
- Refund details such as your IBAN, when needed
- Your messages to us and support tickets
- Technical data: IP address, device and browser type, sign-in history and approximate city
We do not store your full card details; they are processed by licensed payment gateways.
Why we use it, and on what basis
- To fulfil, deliver and invoice your orders and handle returns and refunds, as part of our contract with you
- To verify company accounts, prevent fraud and secure your account, in our legitimate interest and for your protection
- To keep invoices and accounting and tax records, as the law requires
- To send order and shipping updates by SMS, email and WhatsApp, to fulfil your order
- To send marketing and offers, only with your consent, which you can withdraw at any time
- To improve the store and measure how it is used
Who we share it with
We do not sell your data. We share only what is needed with:
- Carriers, to deliver your order
- Payment gateways and instalment providers such as Tabby and Tamara, when you choose them
- ZATCA, to clear and report e-invoices
- Hosting, messaging and email providers who work on our behalf under data protection obligations
- Public authorities, where the law requires it
Where data is stored and transfers
Store data is held with a cloud provider in «[Data hosting location]». Where a service requires data to be transferred or processed outside the Kingdom, we follow the conditions set by the PDPL and the regulation on transferring personal data outside the Kingdom, and limit the transfer to what is strictly necessary.
How long we keep it
- Account data, for as long as your account exists
- Orders and invoices, for the period required by tax and accounting law, even after the account is deleted
- Conversations with the automated assistant, for twelve months
- Anything else is deleted or de-identified once its purpose has been met
Your rights
- To be informed how your data is collected and used
- To access your data and obtain a copy
- To correct or update it; most of it can be edited from your account page
- To ask for its destruction once it is no longer needed, unless the law requires us to keep it
- To withdraw consent for processing that relies on consent, including marketing
You can request deletion of your account from your account settings; the request is reviewed within 30 days. To exercise your other rights, contact us through the channels on the Contact us page and we will respond within the statutory periods. You may also lodge a complaint with the Saudi Data and AI Authority (SDAIA).
Other people's data
If you give us someone else's details, such as a delivery recipient or an authorised employee on your company account, you confirm that you are entitled to share them and have told that person about this policy.
Minors
The store is intended for adults and businesses, and we do not knowingly collect data from anyone under eighteen.
Cookies
We use cookies that are needed to run the store, such as session, cart and sign-in cookies, cookies that remember your preferences such as language, and possibly cookies that measure usage. You can manage them in your browser settings; disabling essential cookies may stop some features working.
How we protect it
We use encrypted connections and encryption of stored data, one-time code verification, and role-based staff access with an audit log. If an incident affects your data, we will notify you and the competent authority as the law requires.
Changes to this policy
We may update this policy and will publish the updated version here, and tell you about material changes.
Last updated: «[Last updated date]»