Al-Shamlool Store Privacy Policy
Al-Shamlool Trading Company is committed to protecting the privacy of its online store users in accordance with the Personal Data Protection Law (PDPL) issued by Royal Decree No. (M/19) dated 9/2/1443 AH, as well as the provisions of the E-Commerce Law's Executive Regulations. Data is collected only with your explicit consent, to achieve the primary purpose of the website transaction, and in strict adherence to the principle of minimum necessary data.
2. Data We Collect
2.1 Data Collected Directly from the User:
Full Name,
Email,
Mobile Number,
Address (Residential or Postal),
Identity Data, if necessary.
2.2 Data Collected Indirectly:
Data related to your device or browser when browsing (such as cookies and IP address).
3. Scope of Data Use
We use data for the following purposes:
Fulfilling purchase orders and store services.
Communicating with you regarding your orders, offers, or updates.
Supporting and improving the online store experience.
Managing the business relationship and complying with legal and regulatory requirements in the Kingdom
4. Data Retention Period
Data is only retained for the period necessary to fulfill its purpose—for example, processing the order or managing the relationship—unless your explicit consent is obtained for a longer period or there is no legal requirement to retain it.
5. Data Protection and Sharing with Third Parties
Data is stored in a secure environment within the Kingdom of Saudi Arabia, in accordance with the technical, organizational, and technological standards approved by the National Cybersecurity Authority.
Data is not shared with any third party except when required by law or with your explicit consent.
6. Your Rights as a User
Under the PDPL, you have the right to:
Correction of inaccurate personal data.
Request deletion of data when the purpose for which it was collected has ended or you withdraw your consent, if there are no legal grounds for processing it.
Object to processing and exercise your right to withdraw your consent at any time.
7. Data Breach
In the event of a data breach or leak, we are committed to notifying the Ministry of Commerce and the relevant authority within 72 hours or three days of discovering the incident, depending on the requirements of the entities involved.
8. Disclosure and Transparency
We are committed to clearly displaying the basic information on the website:
Company name, address, contact information, commercial registration, and tax number (if applicable).
In addition to this Privacy Policy, the website also provides a return and exchange policy, an explanation of the complaints procedure, and the terms of the electronic contract, including payment, shipping, warranty, or subsequent service details.
9. Policy Amendments
This policy may be updated periodically to ensure it is consistent with legal or regulatory changes. We will notify you of any amendments via the website or through agreed communication channels.
