Privacy Policy
Last updated: 20 August 2026
What we collect
We collect only what is necessary to operate accounts, stores, orders, payments, shipping, support and analytics.
How we protect it
Sensitive data is encrypted and masked by default, while access is governed by independent permissions and audit logs.
Merchant customer data
Merchants remain responsible for their use of customer data. Tawlefah provides tools for export, correction, deletion and retention according to permissions.
Data sharing
We share data only to provide the service, with consent, or to meet a legal obligation—and only to the minimum extent necessary.
Privacy rights
We support access, correction, deletion and processing-restriction requests where required by law.
Markets
Appropriate controls apply in Saudi Arabia and Canada based on the country, data type and purpose of processing.