Privacy Policy
Privacy Policy and Personal Data Protection
Introduction and General Provisions
Al-Asasyah Company places the protection of privacy and the safeguarding of personal data among its highest priorities. This policy aims to clarify the principles and controls we follow when collecting, processing, and storing personal data, whether obtained through our website, digital platforms, purchases from our physical retail outlets and stores, or through the use of our service centers, technical support, and after-sales services.
We are committed to processing all personal data in full compliance with applicable laws and regulations, including the Saudi Personal Data Protection Law issued under Royal Decree No. (M/19), dated 9/2/1443 AH, and Council of Ministers Resolution No. (98), dated 7/2/1443 AH, together with the relevant implementing regulations and other applicable laws in the Kingdom of Saudi Arabia.
First: Scope of Data Processing and Purposes of Use
We are committed to applying the principle of data minimization, whereby we collect only the data necessary to fulfill specific and legitimate purposes, after obtaining your explicit consent or establishing another lawful basis for processing. The categories of data processing are as follows:
1. Technical Use and Browsing
Data collected: Internet Protocol (IP) address, URL, browser type, and information about the device being used.
Purpose: To improve the operational performance of the website and adapt the user interface to suit different devices and browsing requirements.
2. Account and Profile Management
Data collected: First name, last name, email address, residential address, phone number, payment information, and password.
Purpose: To complete registration procedures, create personal accounts, and activate customer-specific services.
3. Retail Store and In-Person Sales Services
Data collected: Full name, phone number, email address, and residential address.
Purpose: To issue electronic invoices, organize deliveries and shipping, and provide after-sales and warranty services.
4. Newsletters and Marketing Communications
Data collected: First name, last name, email address, and phone number.
Purpose: To send updates, email newsletters, promotional offers, and notifications relating to products or services.
5. Blog and Content Interaction
Data collected: Name, email address, IP address, and information voluntarily provided through comment forms and subscription forms.
Purpose: To manage contributions and interactions and improve the experience of blog visitors.
6. Closed-Circuit Television (CCTV) Systems in Stores
Data collected: Video footage and visual recordings captured inside stores and service outlets.
Purpose: To enhance public safety, prevent theft or vandalism, and protect the security of employees and customers.
These recordings are stored in secure environments for a specified period. Access is restricted to authorized personnel and designated individuals, including when necessary to assist security authorities.
Second: Cookies
Nature and Purpose of Cookies
We use small text files stored on your browser or smart device, known as cookies, to ensure that our website operates efficiently, facilitate navigation, analyze platform performance, and improve the customer experience.
Managing Your Preferences
Your internet browser allows you to accept, reject, or delete cookies at any time through its settings. Please note that disabling certain operational cookies may affect the performance of some website functions or limit access to certain features.
Third: Legal Bases for Processing Personal Data
We rely on one or more of the following legal bases when processing your personal data:
Explicit consent: Your direct consent to the processing of your data for specific purposes.
Contractual and legal obligations: Processing necessary to perform contracts entered into with you or to comply with applicable laws and regulatory requirements in the Kingdom of Saudi Arabia.
Legitimate interests: Processing necessary to achieve the legitimate interests of the data subject where contact with them is not possible, or the legitimate interests of the organization, provided that such processing fully complies with the applicable law and its implementing regulations.
Fourth: Data Sharing and Disclosure
We categorically undertake not to sell or rent personal data to any third party. Disclosure of personal data is limited to specific circumstances and purposes related to operations or legal requirements, subject to strict contractual obligations and controls, and may involve the following parties:
External service providers and suppliers: Such as shipping and delivery companies and electronic payment service providers, where necessary to complete transactions.
Promotional communications: Sending updates and marketing notifications through various communication channels, including email, text messages, push notifications, and WhatsApp, while ensuring your right to unsubscribe at any time.
Legal advisers: Where necessary to resolve disputes and defend legal rights.
Government and official authorities: Where disclosure is legally required or mandated by explicit judicial or regulatory orders.
Fifth: Data Subject Rights
Under the Saudi Personal Data Protection Law, you are entitled to the following legal rights:
Right to be informed: To know the legal basis and purpose for collecting your personal data and how it will be processed.
Right of access: To request access to your personal data held by us and obtain a copy of it.
Right to rectification and updating: To request the correction or completion of data that you consider inaccurate or incomplete.
Right to erasure: To request the deletion and destruction of your personal data once the purpose for which it was collected has ended, unless a legal provision or contractual requirement obliges us to retain it.
Right to withdraw consent: To withdraw your consent to the processing of your personal data at any time, without affecting processing previously carried out on other lawful grounds.
Marketing Messages: You may unsubscribe from marketing communications at any time through your personal account settings or by using the unsubscribe link provided at the bottom of marketing emails.
Sixth: Data Security and Retention
Security measures: We implement advanced technical and administrative safeguards in accordance with recognized international standards to protect personal data against loss, unauthorized access, alteration, or disclosure. In the event of a security incident, we are committed to handling it in accordance with procedures that comply with applicable legal requirements.
Shared responsibility: Customers are responsible for protecting the confidentiality of their login credentials and passwords and must not share them with any other party.
Retention period: We retain personal data only for the period necessary to fulfill the purposes for which it was collected. Once that period has ended, the data will be securely destroyed and disposed of, unless applicable laws or regulations require a longer retention period.
Seventh: Updates and Contact Information
Policy amendments: We reserve the right to update or amend this policy as necessary to accommodate operational or regulatory requirements. Any amendments will take effect upon publication on this page.
Contact information: To exercise your legal rights or submit inquiries regarding the protection of your personal data, you may contact our Data Protection Department using the following email address:
Email: info@al-asasyah.com