Riyadh · Jeddah · Dammam · Al Khobar · Jubail

Same-day delivery in 5 cities Midnight delivery for surprise moments The Eid collection is live

Privacy Policy

1. About this policy

Arabian Ward (“we”, “us” or “our”) operates https://arabianward.webzaty.com and sells flowers, cakes, chocolates, gift baskets and other gifts for delivery within Saudi Arabia.

Legal entity: [To be defined]

Commercial Registration: [To be defined]

Address: [To be defined]

Privacy contact: orders@arabianward.webzaty.com | Customer support: orders@arabianward.webzaty.com

This policy explains what personal data we collect, why and how we process it, who may receive it, how long we retain it and how you may exercise your rights.

This policy is issued in Arabic and English. In case of any inconsistency between the two versions, the Arabic version prevails.

2. Personal data we collect

Depending on how you use the website, we may collect:

  • Customer/account data: name, email, phone number, account details, saved addresses and communication preferences.
  • Order/delivery data: products purchased, order number and value, recipient name, address and phone, requested delivery date/time, delivery instructions, gift messages and personalization details.
  • Payment data: payment status, transaction references, payment method and limited transaction information from our payment provider. Full card details and security codes are intended to be handled by the payment provider where its hosted/tokenized process is used.
  • Customer-service data: messages, complaints, and relevant photos or videos you submit to resolve an order issue.
  • Technical/usage data: IP address, device/browser information, website interactions, cookies, session information, referral source and analytics events, depending on configuration and consent requirements.

If you order for another person, ensure that the information provided is accurate and that you have an appropriate basis to provide it for fulfilment. We will not intentionally request sensitive personal data unless necessary, lawful and appropriately protected.

3. Purposes and legal basis

We process personal data to administer accounts; accept and fulfil orders; deliver gifts; process payments and refunds; prevent fraud; provide order updates and customer support; coordinate suppliers and couriers; meet legal, tax and accounting obligations; protect website security; improve services; and send marketing communications where the required consent or other lawful basis exists.

The legal basis may include contractual necessity, legal obligations, consent or another basis permitted under Saudi Arabia’s Personal Data Protection Law (PDPL) and its Implementing Regulations. You may withdraw consent where processing depends on it, subject to applicable law. Withdrawal does not affect the lawfulness of prior processing.

4. Cookies and similar technologies

The website may use essential cookies for cart, checkout, account sessions, security and preferences. Subject to configuration and applicable consent requirements, analytics or advertising technologies may also be used. You can manage available preferences through website controls or browser settings. Disabling essential cookies may affect website functionality. Before launch, we will identify actual cookies, analytics services and advertising pixels and update this section accordingly.

5. Sharing personal data

Where necessary and lawful, we may share data with florists, bakeries, gift suppliers, fulfilment partners, couriers, payment gateways, banks, hosting and WooCommerce providers, security and technical providers, email and customer-support services, professional advisers, auditors, insurers and competent authorities where required or permitted by law. We share only information reasonably needed for the purpose—for example, delivery partners may need the recipient’s name, phone, address and instructions. Appropriate contractual and security arrangements will be established with providers processing data on our behalf. We do not sell personal data as a business model.

6. International transfers

Some hosting, analytics, payment or communication providers may process data outside Saudi Arabia. Before enabling such services, we will assess transfers and ensure compliance with the PDPL, its Implementing Regulations and applicable transfer requirements. Actual providers, countries and safeguards will be confirmed before launch and documented where required.

7. Retention and deletion

We retain data only as long as necessary for its purpose, taking account of legal, accounting, tax, dispute-resolution and regulatory obligations. Order records may be retained for statutory periods; account data while active and as necessary afterward; support records to resolve complaints and protect rights; marketing preferences to administer consent and opt-outs; and technical logs for security/operational purposes. When data is no longer needed and no lawful retention ground applies, it will be deleted, destroyed or anonymized appropriately. A retention schedule will be documented before launch.

8. Security

We will implement appropriate technical, administrative and organizational safeguards, which may include access controls, secure authentication, encryption, backups, monitoring, confidentiality obligations and provider safeguards. No electronic system can be guaranteed completely secure. We will assess and respond to personal-data incidents under applicable legal requirements, including required notifications.

9. Your rights

Subject to the PDPL and its Implementing Regulations, you may have rights to be informed about collection and purposes; request access or a copy where provided by law; request correction, completion or updating; request destruction where legal conditions are met; withdraw consent where applicable; and exercise other rights under law. Requests may be subject to exceptions, identity verification and lawful retention obligations. Contact orders@arabianward.webzaty.com. We may verify your identity and will respond within the applicable legal timeframe.

10. Children’s data

The website is intended for customers able to enter the relevant purchase transaction. We do not knowingly seek children’s personal data beyond information incidentally included in a gift order, such as a recipient’s first name, where lawful and necessary for delivery. Contact us if you believe data has been provided unlawfully.

11. Third-party websites

Links to payment providers, social networks, messaging platforms or other websites are governed by those parties’ privacy policies. Please review them when using third-party services.

12. Marketing

We send promotional communications only where the required consent or other lawful basis exists. Unsubscribe using the available mechanism or contact orders@arabianward.webzaty.com. Essential service communications, such as order confirmations, payment updates and delivery notifications, may continue.

13. Changes

We may update this policy to reflect changes in our business, website, providers or legal requirements. The updated version and “Last updated” date will be published. Additional notice or consent will be provided where required by law.

14. Contact

Arabian Ward | Legal entity: [To be defined] | Address: [To be defined]

Privacy email: orders@arabianward.webzaty.com | WhatsApp: [To be defined]