سياسة الخصوصيةPrivacy Policy

For the purposes of this privacy policy, the following definitions apply:

Personal data: any data that can identify an individual, including name, contact details, financial information and location data.

User: any individual who interacts with our services and agrees to this privacy policy.

Sensitive data: data revealing racial or ethnic origin, political opinions, religious beliefs, biometric data, health data, or any other data classified as sensitive under Saudi law.

Cookies: small files stored on the user’s device to enhance the user experience.

Data controller: the entity (Sanabel Alkhair) that determines the purposes and means of processing personal data.

Data processing: any operation performed on personal data, including its collection, storage and destruction.

Consent: the user’s explicit and clear agreement to the processing of their personal data.

Retention period: the period during which the data controller retains personal data.

Third-party API services: external services integrated into our app to provide specific functions, such as YouTube API services for live streaming.

We collect personally identifiable information from users in various ways, including but not limited to when users visit the app, register with the Sanabel Alkhair app, place orders, connect third-party accounts (such as Google/YouTube for live streaming), or take part in other activities. Users may be asked to provide their full name, email address, phone number and banking information (including payment verification details).

We may collect certain non-personal information about users when they interact with the app. This may include the type of smartphone and technical details about the user’s connection to the app, such as the internet service provider, device operating system and app usage statistics.

We collect and use users’ personal data for the following purposes:

Improving customer service: your information helps us respond more effectively to customer service requests and support needs.

Improving the app: we continually strive to improve our offering based on the information and feedback we receive from you.

Periodic emails: we may use the email address users provide to process orders and send information and updates related to their orders.

Live streaming services: for vendors using our live streaming feature, we collect and process the data needed to create and manage live streams through YouTube API services.

Marketing and direct marketing: we may send you information by phone, SMS or email about products or services you have requested or that we think may interest you, where you have agreed to such communications. If you choose to enable or keep receiving push notifications on your device, we may send notifications related to the services you requested, as well as information about our services and offers. You can unsubscribe from notifications at any time by changing your device settings or by contacting us at info@sanabel-alkhair.com.

We may contact you from time to time regarding your initial enquiry. You can ask us to stop contacting you at any time by emailing info@sanabel-alkhair.com. If you do not want your data used in this way, or if you change your mind about future communications, please let us know using the contact details below and/or update your profile accordingly. We may use your personal data to send you direct marketing communications about our offers, experiences or related services in the form of email or targeted online advertising, if you have agreed to these purposes.

We process your data on one or more of the following legal bases:

Consent: where required, we obtain your explicit consent to collect and process your data.

Contractual obligations: to provide the services you requested.

Legal obligations: to comply with the laws of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL), Anti-Money Laundering (AML) regulations, and other applicable laws.

Legitimate interests: to improve our services and provide a better user experience.

We adopt appropriate data collection, storage and processing practices, as well as security measures, to protect your data from unauthorised access, alteration, disclosure or destruction. Sensitive and private data exchanged between Sanabel Alkhair and its users is transmitted over secure communication channels and is encrypted and protected using approved digital methods.

Security measures include:

Encrypted data transmission using HTTPS/TLS protocols

Secure token storage for API and authentication credentials

Regular security audits and vulnerability assessments

Access controls that limit employee access to personal data

Secure destruction of data when it is no longer needed

At Sanabel Alkhair, we do not sell, trade or rent users’ personal identification data to others. We may share aggregated demographic information not linked to any personal identification data with our partners, affiliates and advertisers for the purposes described above. We do not share your data with any official government entity unless required by an official request addressed to our company in security or criminal matters.

We may share data with the following categories of third parties:

Service providers: companies that help us operate our platform (payment processors, cloud hosting, analytics)

Legal requirements: where required by law or to protect our legal rights

We use cookies to improve your experience on our platform by collecting usage data that helps us understand how users interact with our services. We may use third-party analytics tools to collect data about user activity and platform performance. These tools do not collect information that directly identifies users, and the data is used only to improve our services.

Types of cookies we use:

Essential cookies: required for the app to work properly

Analytics cookies: help us understand how users interact with our services

Preference cookies: remember your settings and preferences

You can control cookie settings through your device or browser settings.

Your personal data may be transferred outside the Kingdom of Saudi Arabia in specific circumstances, such as:

To fulfil contractual obligations

To comply with Saudi laws

To use third-party services (such as YouTube API services) that may process data in other jurisdictions

Data transfers will only take place where adequate safeguards exist to protect your data in accordance with the Personal Data Protection Law. When YouTube API services are used, data may be processed by Google in accordance with its own privacy policy.

We retain your data only for as long as necessary to fulfil the purposes described in this policy or as required by Saudi law. Retention periods for different types of data are as follows:

General personal data: retained for as long as necessary to provide our services or comply with legal obligations, after which it is securely destroyed unless retention is required for legal reasons.

Financial and transaction data: retained for five (5) years after the transaction is completed or the business relationship ends.

Employment records (if any): retained for two (2) years after employment ends.

E-commerce data: retained for three (3) years from the transaction date.

Cybersecurity data: retained for five (5) years in accordance with the requirements of the National Cybersecurity Authority.

YouTube/live streaming data: active session data is deleted when the stream ends; historical stream records are retained for three (3) years or until you request deletion.

You have the following rights regarding your personal data:

Right of access: you can request access to your personal data, including data collected through third-party services such as the YouTube API.

Right to rectification: you can request that your data be corrected or updated.

Right to erasure: you can request deletion of your personal data when it is no longer necessary for the purpose for which it was collected.

Right to withdraw consent: you can withdraw your consent at any time, including revoking access to connected third-party accounts.

Right to data portability: you can request a copy of your data in a commonly used format.

Right to object: you may object to certain types of data processing.

To exercise any of these rights, please contact us at info@sanabel-alkhair.com.

Our services are not intended for users under 18 years of age. We do not knowingly collect personal data from children. If we learn that we have collected personal data from a child without parental consent, we will take steps to delete that information.

Our app may contain advertisements or links to third-party websites and services. We do not control and are not responsible for the content or practices of those sites. We recommend reviewing the privacy policies of those sites before interacting with them.

Third-party services integrated into our app include:

YouTube API services: for live streaming (governed by Google’s privacy policy)

Payment processors: for secure payment processing

Analytics services: to understand app usage and performance

We reserve the right to update this privacy policy at any time. The updated version will be published on our website, and you will be notified of any significant changes. Your continued use of our services after updates are published constitutes your acceptance of the updated terms.

Last updated: January 2026

This privacy policy and any disputes arising from it are governed by the laws of the Kingdom of Saudi Arabia. Any legal proceedings or disputes relating to this policy are subject exclusively to the jurisdiction of the courts of the Kingdom of Saudi Arabia.

If you have any questions or enquiries about this policy, including questions about the use of YouTube API data, please contact us at:

Email: info@sanabel-alkhair.com

Website: https://sanabel-alkhair.com

Address: Kingdom of Saudi Arabia

YouTube Terms of Service: https://www.youtube.com/t/terms

Google Privacy Policy: https://policies.google.com/privacy

Google security settings (to manage connected apps): https://myaccount.google.com/permissions