Privacy Policy

1. Introduction

This Privacy Policy explains how [Legal entity name], trading as Deqot ("Deqot", "we", "us"),  Kingdom of Saudi Arabia, collects, uses, stores, shares and protects your personal data when you visit www.deqot.com or buy from us. We process personal data in accordance with the Personal Data Protection Law (Royal Decree No. M/19 dated 9/2/1443H, as amended) and its Implementing Regulations, the E-Commerce Law, and other applicable laws of the Kingdom of Saudi Arabia.

By using our website or placing an order, you confirm that you have read this policy. Where the law requires your consent, we will ask for it separately.

2. Data Controller and Contact

Controller: [Legal entity name] Email: [privacy email] Phone: [phone] Data protection contact: [name or title, if appointed]

3. Personal Data We Collect

  • Identity and contact data: name, mobile number, email address.
  • Delivery data: shipping and billing addresses, national address details, delivery instructions.
  • Order data: items purchased, sizes, order history, returns and refunds, communications with customer service.
  • Payment data: payment method type and transaction status. Card details are processed by our licensed payment providers; we do not store full card numbers or CVV codes.
  • Technical data: IP address, device and browser type, pages visited, cookies and similar technologies.
  • Marketing data: your subscription choices and preferences.
  • Account data: username, password (encrypted), wishlist and saved items.

We do not knowingly collect sensitive personal data (such as health, religious, or biometric data). We do not knowingly collect data from persons under 18 without a guardian's consent.

  • To create your account, process and deliver orders, and handle returns, exchanges and refunds (performance of the contract).
  • To process payments and prevent fraud (contract and legitimate interest).
  • To communicate about your order and provide customer support.
  • To send marketing messages, offers and newsletters, only with your consent, which you may withdraw at any time.
  • To improve our website, products and services through analytics.
  • To comply with legal obligations, including tax (VAT), invoicing, record keeping and requests from competent authorities.
  • To establish, exercise or defend legal claims.

We will not use your data for a purpose that is incompatible with the purpose for which it was collected, unless the law allows it or you consent.

5. Sharing Your Data

We share data only as needed with:

  • Delivery and logistics companies [names, e.g. SMSA, Aramex].
  • Payment gateways and banks [names, e.g. Mada, Visa/Mastercard, Apple Pay, Tabby, Tamara].
  • IT, hosting, analytics, email/SMS and customer-support providers acting on our instructions.
  • Government and regulatory bodies when required by law (e.g. ZATCA, Ministry of Commerce, courts).
  • A buyer or successor, if our business is restructured or sold, subject to this policy.

We do not sell your personal data.

6. Transfers Outside Saudi Arabia

Some of our service providers (for example cloud hosting or email platforms) may process data outside the Kingdom. We transfer personal data abroad only as permitted by the PDPL and its Implementing Regulations, and we put appropriate safeguards in place so that your data remains protected.

7. Cookies

We use cookies and similar tools to keep your cart, remember your preferences, secure the site, measure traffic and, with your consent, personalize marketing. You can manage non-essential cookies through our cookie banner or your browser settings. Blocking essential cookies may affect site functionality.

8. Data Retention

We keep personal data only as long as needed for the purposes above or as required by law. Order and invoice records are retained for [e.g. 10 years] to meet tax and commercial record obligations. Marketing data is kept until you withdraw consent. When data is no longer needed, we securely delete or anonymize it.

9. Your Rights

Under the PDPL you have the right to:

  • be informed about how your data is collected and used;
  • access your personal data and obtain a copy;
  • request correction of inaccurate or incomplete data;
  • request destruction of data that is no longer needed;
  • withdraw your consent at any time (this does not affect processing already done);
  • object to marketing communications.

To exercise a right, contact us at [privacy email]. We may need to verify your identity, and we will respond within the period set by law. If you are unsatisfied, you may complain to the Saudi Data and Artificial Intelligence Authority (SDAIA) as the competent authority.

10. Security

We use technical and organizational measures such as encryption in transit, access controls, secure payment processing and staff confidentiality obligations. If a personal data breach occurs that may harm you or your data, we will notify the competent authority and, where required, you, within the periods set by law.

11. Marketing Messages

You can unsubscribe at any time using the link in our emails or by replying STOP to our SMS, or by contacting us. Service messages about your orders will still be sent.

Our website may link to third-party sites (including social media). We are not responsible for their privacy practices.

13. Changes to This Policy

We may update this policy from time to time. The latest version will be posted on our website with the "Last updated" date. Material changes will be notified to you where required.

14. Contact

For any privacy question: deqotsa@gmail.com