Privacy Policy

PRIVACY POLICY — SOUQ ZAHI (Cubic AlZahi Trading Est.)

Website: www.souqzahi.com Last updated: [DD Month 2026] Jurisdiction: Kingdom of Saudi Arabia

This Privacy Policy explains how Cubic AlZahi Trading Est. ("we", "us", "our") collects, uses, discloses, and protects your personal data when you visit or make a purchase through www.souqzahi.com (the "Website"). We are committed to handling your data in accordance with the Personal Data Protection Law of the Kingdom of Saudi Arabia (the "PDPL") and its Implementing Regulations, overseen by the Saudi Data & Artificial Intelligence Authority (SDAIA).

1. Who We Are The data controller responsible for your personal data is Cubic AlZahi Trading Est., a commercial establishment registered in the Kingdom of Saudi Arabia, operating the online store at www.souqzahi.com.

Commercial Registration (CR) No.: [CR NUMBER]
Registered address: [Street, City, Postal Code], Saudi Arabia
Contact email: [info@souqzahi.com]
Contact phone: [+966 XX XXX XXXX]

2. Personal Data We Collect Data you provide:

Identity & contact details: full name, email address, mobile number.
Account credentials: username and an encrypted password (we do not store passwords in readable form).
Order & delivery details: shipping and billing address, products purchased, order history.
Communications: messages you send us via contact forms, email, chat, or support.

Data collected automatically:

Device & usage data: IP address, browser type, device identifiers, pages viewed, time spent.
Cookies and similar technologies (see Section 7).

Payment data: Card and payment details are processed directly by our authorized payment gateway [e.g. Moyasar / HyperPay / PayTabs / Mada]. We do not store full card numbers on our servers.

Sensitive data: We do not intentionally collect sensitive personal data (such as religious, health, biometric, or genetic information). Please do not submit such data unless specifically requested and with your explicit consent.

3. How & Why We Use Your Data

To create and manage your account and verify your identity.
To process, fulfil, and deliver your orders, including returns and refunds.
To communicate with you about orders, enquiries, and support.
To process payments through our authorized payment providers.
To send marketing communications — only where you have given opt-in consent (see Section 8).
To improve the Website, our products, and the customer experience.
To detect, prevent, and address fraud, security, and technical issues.
To comply with legal, regulatory, accounting, and tax obligations in Saudi Arabia.

4. Legal Basis & Consent We process personal data on lawful grounds, including your consent, performance of a contract with you (such as completing your order), compliance with a legal obligation, and our legitimate interests where these do not override your rights. Where we rely on consent (for example, direct marketing), you may withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing done before withdrawal.

5. How We Share & Disclose Data We do not sell your personal data. We share it only with parties who help us operate the Website and serve you, under appropriate confidentiality and data-protection safeguards:

Payment processors — to securely process transactions.
Shipping & logistics partners — to deliver orders.
Technology & hosting providers — who host and maintain the Website.
Marketing & analytics providers — where applicable and consented to.
Government authorities & regulators — where required by Saudi law or valid legal process.

6. Cross-Border Data Transfers Some service providers may be located outside Saudi Arabia. Where we transfer your personal data abroad, we do so only in accordance with the PDPL and the Regulations on Personal Data Transfer outside the Kingdom — ensuring an adequate level of protection and that the transfer does not compromise your rights or the Kingdom's interests.

7. Cookies & Tracking Technologies We use cookies and similar technologies to keep you signed in, remember your cart and preferences, measure performance, and — where you consent — deliver relevant marketing. You can manage or disable cookies through your browser settings, though some features may not work without them. Where required, we will request consent through a cookie banner before placing non-essential cookies.

8. Marketing Communications We send direct marketing (such as promotional emails or SMS) only where you have given prior opt-in consent. Every marketing message includes a clear way to opt out or unsubscribe. We never use sensitive personal data for marketing.

9. Data Retention We keep your personal data only as long as necessary to fulfil the purposes in this policy, including legal, tax, accounting, and regulatory requirements in Saudi Arabia. When data is no longer needed, we securely delete or anonymize it.

10. Data Security We apply appropriate organizational, administrative, and technical measures to protect your data — including encryption in transit, restricted access controls, and secure hosting. While no internet transmission is completely secure, we work continuously to safeguard your information. In the event of a personal data breach that may cause you harm, we will notify SDAIA and affected individuals as required by the PDPL.

11. Your Rights Under the PDPL

Right to be informed — to know the legal basis and purpose for collecting your data.
Right of access — to request access to the data we hold about you.
Right to correction — to request that inaccurate or incomplete data be corrected.
Right to destruction — to request deletion of data no longer needed.
Right to withdraw consent — to withdraw consent for processing at any time.
Right to obtain your data — to request a copy in a readable format.

To exercise any of these rights, contact us using the details in Section 13. We will respond within the period required by the PDPL, at no charge except in limited cases permitted by law.

12. Children's Privacy The Website is not directed at children, and we do not knowingly collect personal data from minors without the consent of a parent or legal guardian. If you believe a minor has provided us with personal data, please contact us.

13. Contact Us & Complaints Cubic AlZahi Trading Est. Email: [privacy@souqzahi.com] Phone: [+966 XX XXX XXXX] Address: [Street, City, Postal Code], Saudi Arabia

If you believe your data rights have been breached, you may also lodge a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA) via sdaia.gov.sa.

14. Changes to This Policy We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date indicates when it was last revised. Significant changes will be communicated through the Website or by direct notice where appropriate.