Privacy Policy
Privacy Policy (Relin Store)
This Privacy Policy has been prepared to ensure the protection of user data and to comply with best practices and local and international standards in processing "personal data" and "personally identifiable information," which refers to information that can be used on its own or with other information to identify a specific individual. By using this website, you agree to the terms outlined in this policy.
This policy complies with the Saudi Personal Data Protection Law issued by the Saudi Data and Artificial Intelligence Authority (SDAIA) and its executive regulations.
Data Collected
The personal data we may collect includes:
1.2. Methods of Data Collection:
Purpose of Data Collection:
2.1. We use personal data for the following purposes:
Information Protection:
3.1. We are committed to protecting your personal data through:
3.2. We also use SSL technology to secure sensitive information, and payment data is not stored on our servers.
Cookies:
4.1. We use cookies to enhance website performance, including the following purposes:
4.2. You may control cookies through your browser settings; however, disabling them may affect certain website features.
Data Sharing:
5.1. We do not sell or exchange personal data with any external party, except:
5.2. Non-personal data may be shared for statistical or marketing purposes.
Data Subject Rights:
Regarding data processed or hosted through technical systems provided by authorized service providers acting as data processors, Relin Store will follow up on deletion or restriction requests with the processing entity and fulfill the necessary regulatory procedures without imposing additional burdens on the data subject.
6.2. Data subjects may exercise these rights by contacting us through the means provided below. Responses will be provided during business hours from Sunday to Thursday at no cost.
Legal Basis for Data Collection and Processing:
Personal data is collected and processed based on one of the following legal bases:
Clarification: When logging in or completing a purchase on our website, a clear notice is displayed to the customer stating:
"By proceeding with the order, you agree to the Privacy Policy."
Completion of registration or payment constitutes official and documented consent to the Privacy Policy and to receiving marketing messages related to our products and services.
If a contractual relationship exists, data will be retained until all legal and contractual obligations are fulfilled, after which it will be securely and permanently deleted.
Data Retention and Disposal:
We retain personal data for no more than three (3) years from the date the purpose of collection ends, unless legal, judicial, or contractual requirements require longer retention. After the retention period, data will be securely destroyed in a manner that prevents recovery or reuse.
Data Subject Access Request (DSAR)
“The data subject may request access to their data, obtain a copy, request modification, or withdraw consent by contacting us via email at [email protected]. Requests will be responded to within a maximum of 30 days.”
Data Processing Risk Assessment (DPIA)
“Relin Store conducts periodic assessments of personal data processing risks (DPIA) in accordance with data protection regulations.”
Consent Documentation Clause
Records of the data subject’s consent—including the time, method, and means of obtaining consent—are maintained through technical systems approved by Relin Store, including systems provided by technical service providers acting as data processors, in accordance with contractual and regulatory frameworks compliant with the Personal Data Protection Law.
Relin Store remains responsible, as the data controller, for enabling data subjects to review or verify their consent records upon request.
Where technically necessary, coordination may be made with the technical service provider to complete the request in accordance with approved regulatory procedures.
Data Breach Handling:
In the event of a personal data breach, regulatory procedures will be followed and notifications will be issued within the legally approved timeframe in accordance with the requirements of the competent authority.
External Links:
The website may contain links to external websites for which we are not responsible. Please review the privacy policies of those websites before using them.