Your privacy is our responsibility
Version 1.0 | May 2025
Saudi E-Commerce Law M/126 (1440H) | Executive Regulations 1441H | NCA Cybersecurity Guidelines CGESP 1:2019
1. Legal Commitment
Legal Ref: Article 5, Executive Regulations of the Saudi E-Commerce Law
We Shoppers is fully committed to protecting your personal data under Saudi E-Commerce Law (Royal Decree M/126, 1440H), its Executive Regulations (1441H/2020), and all applicable Saudi regulations.
2. Data We Collect
Legal Ref: Article 5/2 — Executive Regulations: Data Minimization Principle
A. Identity Data
- Full legal name as on the official identity document
- National ID or Iqama — verified exclusively via Nafath
- Date of birth and nationality
B. Contact Data
- Saudi mobile number — for OTPs and order updates
- Email address — for invoices and official correspondence
- Shipping and delivery address: postal code, district, city, region
C. Financial Data
- Payment in officially recognized currencies (SAR, USD, GBP, EGP, KWD, and others) — via SAMA-certified, ZATCA-compliant encrypted gateways only
- We do not store full credit card numbers on our systems
D. Technical Data
- IP address, device type, operating system, and browser
- Geolocation data to facilitate matching and delivery accuracy
- Activity logs for technical support and dispute resolution
3. How We Use Your Data
Legal Ref: Article 5/2/B — Executive Regulations
- Identity verification via Nafath for a safe and trusted environment
- Facilitating communication between the client and personal shopper
- Processing payments and issuing ZATCA-compliant e-invoices
- Sending order and delivery notifications
- Improving application performance and resolving technical issues
- Complying with all applicable legal and regulatory requirements
NOTICE: We do not use your data for targeted marketing or advertising without your prior explicit consent.
4. Data Sharing with Third Parties
Legal Ref: Article 5/2/B — Executive Regulations
We do not sell or trade your personal data. We may share limited data only in these specific cases:
Government Authorities
Upon official documented request — user notified unless legally restricted.
Technology Partners
SAMA-certified payment gateways and Nafath — solely to complete transactions.
Personal Shoppers
Only contact details and delivery address necessary to fulfill the assigned order.
5. Data Security
Legal Ref: Article 5/2/A | NCA Cybersecurity Guidelines CGESP 1:2019
- All data encrypted in transit using TLS 1.3
- Stored data encrypted using AES-256
- Two-Factor Authentication (2FA) at login
- Periodic access permission reviews and audit logs
- Full compliance with NCA cybersecurity guidelines
6. Breach Notification
Legal Ref: Article 5/2/D — Executive Regulations
- Notify the Ministry of Commerce and affected users within 3 business days of becoming aware of a breach
- Disclose the nature, impact, and corrective measures taken
- Comply with all directives issued by the competent authorities
7. Your Rights
- Access, review, and correct your personal data held by us
- Request deletion subject to mandatory legal retention periods
- Opt out of marketing communications at any time
- Close your account fully and easily from the application settings
Privacy Contact
info@weshoppers.com — Requests responded to within 24 hours
8. Cookies
The application uses cookies to enhance your experience and remember preferences. You may manage them through your device settings. Disabling cookies may affect certain app features.
9. Policy Updates
Legal Ref: Article 18/B — Executive Regulations
For any material amendment, registered users will be notified at least 7 days before it takes effect. Continued use after the amendment constitutes explicit acceptance.
