This Privacy Policy describes how Bijouterie Sarab ("we", "us", or "our") collects, uses, and shares your personal information when you visit or make a purchase from bijouteriesarab.com (the "Site"). By using the Site, you agree to the collection and use of information in accordance with this policy. This policy was last updated on 25 June 2026.

1. Information We Collect

When you visit the Site or place an order, we may collect the following categories of personal information:

• Identity & Contact: Full name, email address, phone number, billing and shipping address
• Payment Information: Payment card details or mobile wallet credentials processed securely by our payment providers. We do not store full card numbers on our servers.
• Order & Transaction Data: Details of products purchased, order history, and correspondence related to your orders
• Device & Usage Data: IP address, browser type, pages visited, time spent on pages, referring URLs, and other diagnostic data collected automatically via cookies and similar technologies
• Communications: Any messages, inquiries, or feedback you send us

2. How We Use Your Information

We use the information we collect to:

• Process, fulfill, and deliver your orders
• Send order confirmations, tracking updates, and customer support communications
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Improve and personalise your experience on the Site
• Send marketing communications where you have provided consent or where permitted by applicable law — you may opt out at any time
• Comply with our legal obligations under applicable laws, including the Saudi Personal Data Protection Law (PDPL) and the EU General Data Protection Regulation (GDPR) where applicable

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data on the following legal bases:

• Contract: Processing necessary to fulfill your order and deliver products to you
• Legal obligation: Processing necessary to comply with applicable laws
• Legitimate interests: Fraud prevention, security, and improving our services
• Consent: Marketing communications, where you have opted in

4. Sharing Your Information

We do not sell your personal information. We may share your data with the following trusted third parties solely to operate the Site and fulfill your orders:

• Shopify Inc. — our e-commerce platform provider (data processing agreement in place)
• Paymob — payment processing services
• Tamara — buy-now-pay-later financing services
• Shipping carriers and logistics partners — to deliver your orders (name, address, phone)
• Legal and regulatory authorities — where required by law, court order, or to protect our rights

All third-party service providers are contractually required to handle your data securely and only for the purposes we specify.

5. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and serve relevant advertising. You may control cookie settings through your browser preferences. Disabling certain cookies may affect the functionality of the Site. By continuing to use the Site, you consent to our use of cookies as described in this policy.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, including for legal, accounting, and regulatory compliance requirements. Order records are typically retained for a minimum of 5 years in accordance with applicable commercial law. You may request deletion of your data at any time, subject to our legal retention obligations.

7. International Data Transfers

Your information may be transferred to, and processed in, countries other than your country of residence, including countries that may not offer the same level of data protection as your home country. Where such transfers occur, we ensure appropriate safeguards are in place, including standard contractual clauses or other approved transfer mechanisms.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data, subject to legal retention requirements
• Portability: Request transfer of your data in a machine-readable format
• Objection: Object to processing based on legitimate interests or for marketing purposes
• Withdrawal of consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us via our contact page. We will respond within 30 days.

9. Security

We implement commercially reasonable technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Children's Privacy

Our Site is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will take steps to delete such information.

11. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated effective date. Your continued use of the Site following any changes constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

12. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us. We are committed to resolving any complaints or concerns promptly and fairly.