Introduction

We greatly value the privacy of visitors to SabaShop store and are committed to protecting it. This policy explains how we collect, use, store, and share your personal information in line with applicable laws, including the Saudi Personal Data Protection Law (PDPL) where it applies.[web:8][web:26]

By agreeing to our use of cookies and similar tracking technologies in accordance with the terms of this policy when you first visit our website, you permit us to use these technologies each time you visit our site.[web:11]

Collecting Personal Information

The following personal information may be collected, stored, and used: information about your device and browser including your IP address, approximate geographic location, browser type and version, and operating system.[web:11][web:26]

Information about your visits to and use of this website, including the referral source, duration of visit, pages viewed, navigation paths, and interactions with products and content.[web:11]

Information that you provide when registering on our website, such as your name, email address, mobile number, and billing and shipping addresses.

Information that you provide when creating a profile on our site, such as your name, profile picture, gender, date of birth, mailing address, delivery address (if different), mobile number, and payment details (noting that full card data is processed through secure payment providers and is not stored by us in full).[web:11][web:26]

Information, such as your name and email address, that you enter to set up subscriptions for our email newsletters and/or news alerts.

Information that you enter while using the services on our site, including contact forms and after‑sales service requests.

Information generated while using our website, including when you use the site, how often, under what circumstances you use it, and events related to your shopping cart and order completion.[web:11]

Information relating to anything you purchase, services you use, or transactions you make through our website, which may include your name, address, telephone number, email address, payment method details, and order history.

Information that you post to our website for publication online, which may include your username, profile pictures, and the content of your posts.

Information contained in any correspondence you send to us by email or through our website, including the content of the correspondence and metadata.

Any other personal information you send to us when you contact us or use our services.

Before you disclose to us the personal information of another person, you must obtain that person's consent to both the disclosure and processing of that personal information in accordance with this policy.

Using Your Personal Information

Personal information submitted to us through SabaShop store is used for the purposes outlined in this policy or on the relevant pages of the site. We may use your personal information for the following purposes:

• Managing and operating our website and online store.
• Customizing our website for you and improving your shopping experience.
• Enabling your use of the services available on our website, including account creation and order management.
• Sending goods purchased through the website to you and arranging shipping and delivery services.
• Providing services purchased through our website and related after‑sales services.
• Sending statements, invoices, and payment reminders to you, and collecting payments from you.
• Sending non‑marketing commercial communications, such as information about your orders or changes to our services or policies.
• Sending email notifications that you have specifically requested.
• Sending our email newsletter to you, if you have requested it (you can inform us at any time if you no longer require the newsletter, or unsubscribe using the provided links).
• Sending marketing communications related to our business or selected third parties we believe may interest you, by mail or – if you have specifically agreed to it – by email, SMS, or similar technologies (you can inform us at any time if you no longer require these marketing communications or wish to object to direct marketing).
• Providing aggregated statistical information to third parties about our users (but those third parties will not be able to identify any individual user from that information).
• Analyzing the use of our site, measuring the performance of advertising campaigns, and improving ad targeting on platforms such as Google and TikTok and other advertising platforms.[web:3][web:6][web:12]

Dealing with inquiries and complaints made by or about you relating to our website or your orders.

• Keeping our website secure, monitoring for fraudulent or abusive behavior, and preventing fraud.
• Verifying compliance with the terms and conditions governing the use of our website (including monitoring private messages sent through our website where applicable).
• Any other uses necessary to provide our services or required by law, provided they remain compatible with the purposes for which the data was originally collected.[web:8][web:14]

If you submit personal information for publication on our website, we will publish and otherwise use that information in accordance with the license you grant us.

You can adjust your privacy settings to limit the publication of your information on our website, and you can modify these settings using website privacy controls where available.

We will not, without your express consent, supply your personal information to any third party for the purpose of their or any other third party's direct marketing.

Use of Analytics, Advertising Tools, and TikTok Integration

We use analytics, measurement, and advertising tools on our website such as Google Analytics and Google Ads, as well as TikTok integration via Shopify, which may include the TikTok Pixel, Events API, and advanced matching features, to measure the performance of our campaigns, understand how visitors use our store, and improve the ads shown to them.[web:3][web:6][web:12]

Through these tools and integrations, TikTok and other partners may receive information about your interactions with our website, such as pages viewed, products browsed or added to cart, and purchases, as well as device and browser information. In some cases, this data may be associated with hashed contact information you provide (such as email address or phone number) according to the data‑sharing settings we choose within the TikTok app on Shopify.[web:3][web:12]

We use this data for the following purposes: (1) to deliver, measure, and improve advertising on TikTok and other platforms, (2) to understand and analyze campaign performance, (3) to improve your shopping experience on our site, and (4) to help prevent fraud and enhance the security of our website.[web:3][web:12]

Cookies and similar technologies are used for these purposes. By continuing to use our site and accepting cookies, you consent to the collection and use of this data to the extent permitted by applicable law. You can manage your cookie preferences through your browser settings or any consent tools we make available on the site, noting that disabling cookies or certain tracking technologies may affect some website features or the effectiveness of advertising.[web:11][web:26]

Disclosure of Personal Information

We may disclose your personal information to any of our employees, officers, insurers, professional advisers, agents, suppliers, or subcontractors as reasonably necessary for the purposes set out in this policy.

We may disclose your personal information to any member of our group of companies (meaning our subsidiaries, our ultimate holding company, and all its subsidiaries) as reasonably necessary for the purposes set out in this policy.

In addition, we may share certain data with external service providers who help us operate our online store, fulfill orders, process payments, analyze data, and run advertising campaigns (such as payment gateways, shipping companies, and advertising platforms including TikTok and Google). Their use of this data is limited to providing these services to us and must comply with applicable laws.[web:3][web:11][web:12]

We may disclose your personal information:

• To the extent that we are required to do so by law, regulation, or official order.
• In connection with any ongoing or prospective legal proceedings.
• To establish, exercise, or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk).
• To the buyer (or prospective buyer) of any business or asset that we are (or are contemplating) selling.
• To any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information.

Except as provided in this policy, we will not provide your personal information to third parties.

International Data Transfers

Information that we collect may be stored, processed, and transferred between any of the countries in which we or our service providers operate, in order to enable us to use the information in accordance with this policy, subject to the conditions and safeguards required under the Saudi PDPL where applicable.[web:8][web:14][web:26]

Some of these countries may not have data protection laws equivalent to those in your country of residence. In such cases, we seek to take appropriate measures to protect your personal information as permitted by law.[web:14][web:26]

You acknowledge that data transfers over the internet are inherently insecure, and we cannot guarantee the security of data sent over the internet, although we take reasonable steps to protect it.

You are responsible for keeping the password you use for accessing our website confidential; we will not ask you for your password (except when you log in to our website).

Retention of Personal Information

• This section sets out our data retention policies and procedures, which are designed to help ensure that we comply with our legal obligations regarding the retention and deletion of personal information.[web:8][web:26]
• Personal information that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes, unless a longer retention period is required or permitted by law.[web:14][web:26]
• Notwithstanding the other provisions of this section, we will retain documents (including electronic documents) containing personal data:
• To the extent that we are required to do so by law or applicable regulations.
• If we believe that the documents may be relevant to any ongoing or prospective legal proceedings.
• To establish, exercise, or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk).

Security of Your Personal Information

• We will take reasonable technical and organizational precautions to prevent the loss, misuse, or alteration of your personal information, in line with best practices and applicable legal requirements where possible.[web:8][web:14]
• We will store all the personal information you provide on our secure servers or those of our trusted service providers (which are password‑ and firewall‑protected and may use encryption where appropriate).
• All electronic financial transactions entered into through our website will be protected by encryption technology via our payment service providers.[web:11]
• You acknowledge that the transmission of information over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet, although we will take reasonable steps to protect your information.
• You are responsible for keeping the password you use for accessing our website confidential; we will not ask you for your password (except when you log in to our website).

Your Rights

Subject to the Saudi PDPL and other applicable laws, you may instruct us to provide you with any personal information we hold about you. Provision of such information will be subject to you supplying appropriate evidence of your identity (such as your registered mobile number, ID, or email address).[web:8][web:14][web:26]

We may withhold personal information that you request to the extent permitted by law.

You may request correction or updating of inaccurate or incomplete personal data, and in some cases you may request deletion of your personal data or restriction of its processing, where this is legally and practically possible.[web:14][web:26]

You may instruct us at any time not to process your personal information for direct marketing purposes, including profiling related to such marketing, and we will stop using your data for this purpose.

In practice, you will either expressly agree in advance to our use of your personal information for marketing purposes (for example, by subscribing to newsletters or accepting marketing cookies), or we will provide you with a clear opportunity to opt out of the use of your personal information for marketing purposes at any time.[web:11][web:26]

Amendments

We may update this policy from time to time by publishing a new version on our website. You should check this page occasionally to ensure you understand any changes to this policy. We may notify you of changes to this policy by email or by displaying a notice on our website.

Third-Party Websites

Our website contains links and details about third‑party websites. Please note that we have no control over the privacy policies and practices of third parties, and we are not responsible for them. We recommend that you review the privacy policies of those websites before providing any personal information through them.[web:11]

Updating Information

Please let us know if the personal information we hold about you needs correction or updating. You can contact us using the details provided on our “Contact Us” page or through our customer service channels available on the site.[web:11]

Cookies

Our website uses cookies and similar technologies. A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.[web:11]

Cookies may be either "persistent" cookies or "session" cookies:

• A persistent cookie is stored by the web browser and will remain valid until its expiration date, unless deleted by the user before that date.
• A session cookie will expire at the end of the user's session, i.e., when the web browser is closed.

Cookies typically do not contain any information that personally identifies a user. However, personal information that we store about you may be linked to the information stored in cookies obtained from them.

Examples of purposes for which we use cookies on our website include: recognizing a computer when a user visits the website; tracking users as they navigate the website; enabling the use of the shopping cart; improving website usability; analyzing website use; administering the website; preventing fraud and enhancing website security; customizing the website for each user; and showing targeted advertisements that may be of particular interest to some users on platforms such as Google and TikTok.[web:3][web:11][web:12]

Most browsers allow you to refuse to accept cookies or to delete them through your browser settings. Blocking or deleting cookies may have a negative impact on the usability of many websites, including our site, and if you block cookies you may not be able to use all the features on our website.[web:11]