At HADIHA, we sell calm — not your data. This policy explains what personal information we collect when you visit or buy from hadiha.com, how we use it, and the rights you have over it.

This policy is written to comply with the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations, and with the Saudi E-Commerce Law.

1. Who we are

hadiha.com is operated by Company MUHTABAR AL-LABA Ltd., a company registered in the Kingdom of Saudi Arabia under Commercial Registration No. 4030191611, with its registered address at Al-Isai Center, Prince Sultan Street, Al-Misra District, Jeddah, Saudi Arabia.

For anything relating to your personal data, contact us at hello@hadiha.com.

2. What we collect

Information you give us

• Name, email address and mobile number
• Shipping and billing address
• Order history and the contents of your cart
• Messages you send us through the contact form, email or social channels
• Product reviews or content you choose to post
• Your email address if you subscribe to our newsletter

Information collected automatically

• Device and browser type, operating system and language
• IP address and approximate location (city level)
• Pages viewed, products browsed, time on site and referring website
• Cookies and similar technologies (see section 5)

Payment information

We do not collect, see or store your full card details. Payments are processed by our payment providers (such as Shopify Payments, Mada, Apple Pay and other methods available at checkout), who handle card data under their own security standards (PCI-DSS). We receive only a confirmation of payment and the last four digits of the card.

3. Why we use it

• To fulfil your order — process payment, arrange delivery, issue your tax invoice and handle returns.
• To support you — answer questions, resolve issues and follow up on orders.
• To improve the store — understand which products and pages are useful, and fix what isn't working.
• To market to you — send offers and updates, but only if you have opted in. You can unsubscribe at any time.
• To meet legal obligations — including tax, ZATCA invoicing, accounting and anti-fraud requirements.

We process your data on the basis of performing our contract with you, your consent (for marketing and non-essential cookies), our legitimate interests, and our legal obligations.

4. Who we share it with

We do not sell your personal data. We share it only with parties who need it to run the store:

• Shopify — our e-commerce platform and hosting provider
• Payment providers — to process and verify transactions
• Shipping and courier partners — to deliver your order
• Analytics and marketing tools — to measure store and campaign performance
• Government authorities — where disclosure is required by Saudi law or by a lawful order

5. Cookies

Cookies are small files stored on your device. We use:

• Essential cookies — keep you logged in and keep your cart working. These cannot be switched off.
• Analytics cookies — tell us how the site is used.
• Marketing cookies — let us show relevant ads and measure campaigns.

You can block or delete cookies in your browser settings. Blocking essential cookies will stop parts of the store from working.

6. Transfers outside the Kingdom

Some of our service providers store data on servers outside Saudi Arabia. Where that happens, we transfer data only in line with the PDPL and only to providers who apply an adequate level of protection.

7. How long we keep it

We keep your data only as long as needed for the purpose it was collected, and for as long as Saudi commercial, tax and accounting law requires us to retain transaction records. After that it is deleted or anonymised.

8. Your rights

Under the PDPL you have the right to:

• Be informed about how and why your data is processed
• Access a copy of the data we hold about you
• Request correction of data that is inaccurate or incomplete
• Request deletion of your data, where we are not required to keep it
• Withdraw your consent to marketing at any time

To exercise any of these, email hello@hadiha.com. We will respond within the period set by the PDPL. If you are not satisfied with our response, you may file a complaint with the Saudi Data & AI Authority (SDAIA).

9. Security

The site runs over an encrypted (SSL) connection and access to customer data is limited to staff who need it to do their job. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information.

10. Children

Our products are sold to adults. You must be 18 or older to place an order, or have the consent of a parent or guardian. We do not knowingly collect personal data from children. If you believe a child has given us their data, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. The current version is always shown on this page with its "last updated" date. Continuing to use the site after a change means you accept the updated policy.

12. Contact us

Company MUHTABAR AL-LABA Ltd.
Al-Isai Center, Prince Sultan Street, Al-Misra District, Jeddah, Saudi Arabia
Email: hello@hadiha.com