Thank you for being part of our community at Deemah. We are committed to protecting your personal information and your privacy rights. If you have any questions or concerns about our privacy practices, please feel free to contact us at customerservices@deemah.com.sa This policy explains how we collect and use your information when you: Visit our website: https://www.deemah.com.sa Interact with us in other ways, such as through sales, marketing, or events. When we mention: “Website”, we mean any of our websites that link to this policy. “Services”, we refer to our website, app, or other related services such as sales, marketing, or events. The purpose of this privacy policy is to clearly explain what data we collect, how we use it, and your rights regarding that data. If you do not agree with any part of this policy, please stop using our services. Please read this policy carefully to understand how we handle your information. 1. What Information Do We Collect? Personal Information You Disclose to Us In short: We collect personal information that you voluntarily provide to us. We collect personal information that you voluntarily give us when you express interest in obtaining information about us or our products and services, when you participate in activities on the website, or when you contact us in other ways. The personal information we collect depends on the context of your interactions with us and the website, the choices you make, and the products and features you use. The personal information we collect may include: Personal Information Provided by You: We collect email addresses, names, phone numbers, job titles, communication preferences, and other similar information. All personal information you provide must be true, complete, and accurate, and you must notify us of any changes to such personal information. Information Collected Automatically In short: Some information—such as your IP address and/or browser and device characteristics—is collected automatically when you visit our website. We automatically collect certain information when you visit, use, or navigate the website. This information does not reveal your specific identity (like your name or contact details), but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our website, and other technical information. Like many businesses, we also collect information through cookies and similar technologies. The information we collect includes: Log and Usage Data: This is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our website, and which we record in log files. Device Data: We collect device data such as information about your computer, phone, tablet, or other device you use to access the website. Location Data: We collect location data such as information about your device’s location, which may be precise or imprecise. 2. How Do We Use Your Information? In short: We process your information for purposes based on legitimate business interests, the fulfillment of our contract with you, compliance with our legal obligations, and/or your consent. We use the personal information collected through our website for a variety of business purposes, including: To send you administrative information To protect our services To enforce our terms, conditions, and policies To respond to legal requests and prevent harm To process and manage your orders To manage prize draws and competitions To deliver and facilitate the delivery of services to the user To respond to user inquiries and offer support To send you marketing and promotional communications To deliver targeted advertising to you 3. Will Your Information Be Shared with Anyone? In short: We only share information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill business obligations. We are committed to safeguarding your personal data and handling it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes. They are only permitted to process your data for specified purposes and in accordance with our instructions. We may share or transfer your personal data with the following entities: Independent third parties: Appointed to assist us in delivering services to you, provided that your consent has been obtained. Our professional advisors: Including lawyers, accountants, IT specialists, and PR consultants, when their advice or support is required. Our data storage service providers. Our affiliates and related companies. Our partners, suppliers, and service providers: Who support our business operations, such as fraud prevention, identity verification, payment processing, marketing, customer service, shipping companies, and technology services. Our merchants: So they can deliver goods or services to you, respond to complaints, or improve service quality. Financial institutions: With whom we may collaborate to offer a joint product or service. Debt collection agencies: Including credit reporting, if permitted by law. We may provide identity and credit-related information to the relevant agency. Companies: We may plan to merge with, acquire, or invest in. Other third parties: Such as dispute resolution bodies we refer you to (we will inform you of their identity whenever possible beforehand). Any other parties: With your consent or upon your instruction. We may also process your personal data for the following purposes: To prepare a proposal: Related to services we offer. To provide services: According to our scope of work or as agreed with you. To handle any complaints or feedback: You submit to us. For any other purpose: For which you voluntarily provide your personal data. Please note: Merchants from whom you purchase goods or request returns (even if through Deemah’s services) may have their own privacy policies. Deemah is not responsible for their actions or privacy practices. We also process your personal data to comply with legal obligations, such as: To meet our regulatory and legal responsibilities. To respond to requests from tax authorities, courts, or other official bodies. In this context, we may share your data with: Our legal advisors: If legal consultation or support is needed. Our auditors: If sharing such information is part of their supervisory duties. Third parties: Assisting us with identity verification. Regulatory authorities or law enforcement agencies: When legally required to do so. 4. Who Will Your Information Be Shared With? In short: We only share information with the following categories of third parties. We share and disclose your information only with the following categories of third-party entities: Advertising, direct marketing, and lead generation Billing and invoicing Data analytics services Data backup and security Performance monitoring tools Product engineering and design tools Sales and marketing tools 5. Do We Use Cookies and Other Tracking Technologies? In short: We may use cookies and other tracking technologies to collect and store your information. We may use cookies and similar tracking technologies to access or store information. Specific details about how we use these technologies and how you can refuse certain cookies can be found in our Cookie Notice. 6. How Long Do We Keep Your Information? In short: We retain your information for as long as necessary to fulfill the purposes outlined in this privacy policy, unless otherwise required by law. We retain personal data for as long as you remain an active user, and we may continue to retain it for the period necessary to: Fulfill the purposes described in this policy Comply with legal obligations Enforce agreements and legal policies Resolve disputes Meet regulatory, accounting, or reporting requirements Your personal information may be stored for up to five years after your access to the services ends. Deemah ensures that personal data is deleted once this necessary retention period ends. We can provide more specific information about how long we retain your personal data upon request. Please contact us using the details provided in the “Contact Us” section. 7. How Do We Keep Your Information Safe? In short: We aim to protect your personal information through a system of organizational and technical security measures. We have implemented appropriate security measures to prevent the accidental loss, misuse, unauthorized access, alteration, or disclosure of your personal information. Additionally, we limit access to your personal data to employees, agents, or third parties who have a business need to know. These individuals will process your personal information only based on our instructions and are bound by confidentiality obligations. 8. Do We Collect Information from Minors? In short: We do not knowingly collect data from or market to children under the age of 18. We do not knowingly request or collect personal data from children under 18 years of age, nor do we market to them. By using the website, you affirm that you are at least 18 years old or that you are the parent or legal guardian of a minor and consent to that minor’s use of the website. 9. What Are Your Privacy Rights? Under the Personal Data Protection Law (PDPL), you have the following rights regarding your personal data: Right to be Informed: You have the right to be informed about the legal basis and purpose for collecting your personal data. Right of Access: You have the right to access your personal data stored with us. Right to Obtain Data: You may request your stored personal data in a clear and readable format. Right to Rectify and Update: You have the right to request correction, completion, or updating of your personal data held by us. Right to Erasure: You have the right to request the deletion of your personal data when it is no longer needed, subject to legal requirements. Right to Withdraw Consent: You may withdraw your consent to the processing of your personal data at any time, unless legal grounds require otherwise. To exercise any of these rights, please contact us using the information provided in the “Contact Us” section. We will respond to your request within the timeframe specified by the PDPL. For any personal data held by third parties, including our service and content providers, you will need to contact them directly to exercise your rights under the PDPL. 10. Controls for Do-Not-Track Features Most web browsers, some mobile operating systems, and mobile applications include a Do-Not-Track (“DNT”) feature or setting that you can activate to signal your privacy preference — that you do not want your online browsing activities to be monitored and collected. 11. Do We Update This Policy? In short: Yes, we will update this policy as necessary to remain compliant with relevant laws. We may update this Privacy Policy from time to time. The updated version will be indicated by a revised “Last Updated” date and will become effective as soon as it is accessible. 12. How Can You Contact Us About This Policy? If you have any questions or comments about this policy, you can email us at:customerservices@deemah.com.sa 13. How Can You Review, Update, or Delete the Data We Collect from You? Depending on the laws applicable in your country, you may have the right to request access to, correction of, or deletion of the personal information we collect from you under certain circumstances.To request to review, update, or delete your personal data, please contact us via email at:customerservices@deemah.com.sa