سياسة الخصوصية

We collect what we need to get your order to you, and nothing beyond that. We do not sell your data. Ever.

Last updated: 26 August 2026

Order KSA is the trading name of ARMAA ELJAZZERA UNITED ESTABLISHMENT, a business registered in the Kingdom of Saudi Arabia. This policy covers our website at orderksa.com, the Order KSA app, and any conversation you have with us on WhatsApp, email or our contact form.

We handle personal data in line with the Personal Data Protection Law of the Kingdom of Saudi Arabia, issued under Royal Decree M/19, and its Implementing Regulations. Using our store means you have read this and understand it.

1. Who you are dealing with

Registered name	ARMAA ELJAZZERA UNITED ESTABLISHMENT
Trading as	Order KSA
Commercial Registration	[CR NUMBER]
VAT Registration	[VAT NUMBER]
Based in	Dammam, Kingdom of Saudi Arabia
Email	customerservice@orderksa.com
WhatsApp	+966 56 475 7889

2. What we know about you

Things you tell us

• Your name, email address and mobile number
• Where to deliver, including your city and district
• Your login details, if you create an account
• What you have ordered, saved to your wishlist, or reviewed
• Anything you write to us on WhatsApp, email or the contact form
• Whether you want to hear from us by email or SMS

Things we notice

• What device, browser and language you are using
• Your IP address, and the rough area it points to
• Which pages and products you looked at, and how you found us
• Cookies and similar identifiers, explained in section 6

Your full card number, expiry date and security code are not on either list. We do not collect them and we do not store them.

3. Why we need it

• To pack your order, ship it, and get it to your door
• To confirm your payment and issue the tax invoice Saudi law requires
• To handle a return, an exchange, a refund or a warranty claim
• To answer you when you get in touch
• To run your account
• To send you offers and new arrivals, but only if you asked us to
• To make the store, the app and the service better
• To spot and stop fraud
• To meet our legal, tax and accounting obligations in the Kingdom

We do not run automated decisions about you that carry legal consequences.

4. What gives us the right

We process your data when we need it to fulfil an order for you, when we have a legitimate business interest that does not override your rights, when the law requires it of us, or when you have given us your consent. Where consent is the basis, you can take it back at any time. Section 8 explains how.

5. Who else sees it

Only the people who need it to get your order to you, and only the part they need.

Our store platform	Shopify Inc., which hosts orderksa.com and handles order data for us
Payment providers	Our gateway, and the networks behind mada, Visa, Mastercard and Apple Pay
Tabby and Tamara	If you choose to pay in instalments. Your plan is with them, under their privacy policy
Delivery partners	So your parcel arrives and you can track it
Messaging tools	The email, SMS and WhatsApp services we use to reach you
Analytics and ads	Google, Meta, TikTok and Snapchat, and only if you accepted those cookies
Authorities	Where the law, a court, or a competent authority in the Kingdom lawfully requires it

We do not sell your personal data to anyone, for any reason.

6. Cookies, plainly

Cookies keep your cart from emptying, remember whether you are browsing in Arabic or English, show us which products people actually look at, and let us show you relevant ads.

Essential	Your cart and checkout will not work without these, so they cannot be switched off
Performance	Tell us which pages and products are working and which are not
Marketing	Let us and our advertising partners show you relevant ads and measure them

The banner on your first visit is where you accept or decline the non-essential ones. You can change your mind any time through the cookie preferences link in our footer, or clear them through your browser. If you block the essential ones, checkout will stop working.

7. When data leaves the Kingdom

Some of the services we rely on, including our store platform and analytics partners, run on servers outside Saudi Arabia. When your data goes with them, we do it under the conditions set out in the Personal Data Protection Law and its Implementing Regulations, and we require those providers to protect it with proper technical and organisational safeguards.

8. What you can ask us to do

The Personal Data Protection Law gives you these rights, and we will act on them:

• Ask why. Know the purpose and the legal basis for anything we hold
• See it. Get access to the personal data we have about you
• Take a copy. Receive it in a clear, readable format
• Fix it. Have anything wrong, incomplete or out of date corrected
• Delete it. Have it removed once we no longer need it for the reason we collected it
• Change your mind. Withdraw consent at any time, where consent was the basis
• Stop the marketing. Unsubscribe from any email, or reply STOP to any SMS

Email customerservice@orderksa.com or message us on WhatsApp at +966 56 475 7889. We reply within the period the regulations require, and we may ask you to confirm who you are first, which protects you as much as us.

To delete your app account and everything attached to it, use our account deletion page.

If you think we have handled your data badly, you can raise it with the Saudi Data and Artificial Intelligence Authority (SDAIA). We would rather you told us first, but the right is yours.

9. How long we keep it

Only as long as we need it for the reasons on this page. Orders, invoices and tax records stay for the period Saudi commercial and tax law sets, which is not our choice to make. Your account and marketing data stays until you ask us to delete it or withdraw your consent, and then it is deleted or anonymised, apart from anything we are legally required to hold on to.

10. How we protect it

The store runs on an encrypted HTTPS connection and payment data is handled by PCI DSS compliant providers. Inside the business, access is limited to the people whose job needs it, and our service providers are held to the same standard.

No system on the internet is completely secure, and we will not pretend otherwise. What we can promise is that we take reasonable steps to protect your data, and that if a breach happens we will tell you and the competent authority where the law requires it.

11. Children

Our store is for customers aged 18 and over, and we do not knowingly collect data from children. If you believe a child has given us their details, tell us and we will delete them.

12. Links to other places

Our site and app link out to social platforms, payment providers and other websites. Once you are there, their rules apply, not ours. It is worth reading their policies before you hand over anything.

13. If this policy changes

We will update this page when our practices change or the law does, and the date at the top always shows the last revision. If a change is significant, we will not bury it. We will email you or put a notice on the site.