Privacy Policy

Who handles your data?

Adivasi Herbal Adivasi Herbal A store for hair care products, and deals with the data associated with its online store, orders and support channels. The contact point for privacy requests is support@adivasi-herbal.com Or WhatsApp +966 57 067 8527.

This policy applies to the data of customers, visitors to the store and applicants via its forms. When you use a link to an external service, the policy of that service also applies to what you provide directly to it.

What data we collect and how?

• Ordering and delivery: Name, mobile number, email, shipping address, products, quantity, order status and payment information needed to proceed with the transaction.
• Account and support: Account information, messages, inquiries or files that you choose to send, records of processing requests and problems.
• Wholesale and cooperation models: Contact data, activity of the applicant, his business links and application information that he fills in the form.
• Technical usage data: They may include the IP network address, browser and device type, browser pages, cookies and security logs, depending on the enabled tools.

We collect data directly from forms or correspondence, and from technical services necessary for the operation of the store. The fields necessary for payment and delivery are necessary for the execution of the order; unnecessary marketing or additional data remain optional.

Processing purposes and systemic justification

We use the order data to carry out the purchase, delivery and communication about it, process billing and transaction data to fulfill statutory obligations. Limited data is also used to protect accounts and address fraud and malfunctions within the applicable regulatory justifications.

When marketing messages or certain measurement tools and advertisements are based on your consent, you can withdraw that consent. Acceptance of the privacy policy or just visiting the store is not an independent consent to all marketing purposes.

Participating payment and shipping service providers

We share the necessary amount of data with service providers to fulfill a specific purpose: delivery companies such as J&T, Aramex or RedBox depending on the shipment; Stripe for electronic payment; Kinsta for the operation and hosting of the store; and Google Workspace to provide mail and support. When communicating via Whatsapp, WhatsApp/Meta processes messages and data in accordance with its policies as well.

The payment gateway processes the card details; the support team does not need the full card number or security code to complete your order. The store may retain the transaction reference, status and limited payment information returned by the provider.

We do not sell your personal data. We may disclose the requested information to a competent authority when there is a legal obligation, or to the providers of analysis and advertising when those tools are activated and the necessary justifications are available.

Cookies and analytics

Basic cookies help to run the basket, account and save the purchase session. Metrics or advertising tools may use other files to understand traffic and optimize campaigns depending on store settings and required approvals.

You can control cookies from your browser settings and from the privacy preferences interface if available. Disabling essential files may affect logging in or retaining the content of the basket.

Preservation, hosting and protection

Order and account information is stored in the store's systems at the hosting provider, and payment, mail and support services may process information inside or outside Saudi Arabia depending on the service structure. The data protection and transfer requirements that apply to such processing are observed.

We keep records of orders and invoices for the duration necessary for execution, accounting and regulatory obligations and settlement of claims. Account and support data and forms are reviewed according to the purpose and need, and are deleted or anonymized when the need ends and there is no systematic reason for retention. You can request a statement on how long your data will be kept.

Access controls, connection protection and operational procedures are used to limit unauthorized access. Do not send your card data or unnecessary documents via support messages.

How to exercise your rights

The rights applicable under the Saudi personal data protection system include knowing how your data is processed, accessing it and obtaining a copy of it, requesting correction, completion or updating, requesting destruction in accordance with the terms of the system, and withdrawing consent when it is the basis for processing.

Send your request to the mentioned mail with a verifiable means of communication and a description of the required data or right. We may ask for limited information to verify your identity before disclosing or modifying data. We explain the result of the request or the reason for the necessary retention within the applicable statutory periods.

You can turn off marketing messages via the provided unsubscribe link or with a direct request to support. A complaint may be filed with the Competent Authority, the Saudi data and artificial intelligence authority (Sadaya), regarding a violation related to your data. Review Official information on the protection of personal data.

Children and updates

Procurement services and cooperation models are not oriented to the collection of children's data. If you send us a child's data without the need or proper authorization, contact us to review it and take the applicable action.

The date this policy was updated is shown at the top of the page. We post modifications when services or processing requirements change, and request new consent when necessary; posting an update alone does not replace the requested consent.