Privacy Policy

1. Scope of this policy

This policy applies to merchants who use Takamul and to visitors of our marketing websites. When merchants process the personal data of their own customers through their stores, the merchant acts as the data controller and Takamul acts as a data processor on their behalf.

2. Personal data we collect

We collect the data needed to provide and improve the Services. The categories include:

• Account data: name, business name, email, +966 phone number and login credentials.
• Billing data: plan, invoices, VAT details and payment metadata (we do not store full card numbers).
• Usage data: device, browser, IP address, pages viewed and feature interactions.
• Support data: messages, tickets and any information you choose to share with our team.

3. How we use your data

We process personal data on lawful bases recognised under the PDPL, including performance of our contract with you, your consent, our legitimate interests, and compliance with legal obligations.

• To create and manage your account and provide the Services.
• To process payments and issue VAT-compliant invoices.
• To provide support, security, fraud prevention and service notices.
• To improve our products and, with your consent, send relevant marketing.

4. When we share data

We do not sell your personal data. We share it only with trusted parties who help us run the Services, and only as needed.

• Payment providers such as mada, Apple Pay, STC Pay, Visa/Mastercard, Tabby and Tamara to process transactions.
• Shipping carriers such as SMSA, Aramex, Saudi Post (SPL) and Naqel to fulfil orders.
• Infrastructure, analytics and communication vendors bound by confidentiality obligations.
• Government or regulatory authorities where required by Saudi law.

5. Data location and transfers

We aim to host personal data within the Kingdom of Saudi Arabia or in locations that provide an adequate level of protection. Where data is transferred outside the Kingdom, we apply the safeguards required by the PDPL and its regulations.

6. How long we keep data

We retain personal data only for as long as needed to provide the Services and to meet legal, tax and accounting obligations in Saudi Arabia, after which it is securely deleted or anonymised.

7. Your rights under the PDPL

Subject to applicable law, you have rights over your personal data. To exercise them, contact us using the details below and we will respond within the timeframes set by the regulations.

• The right to be informed about how your data is processed.
• The right to access and obtain a copy of your data.
• The right to request correction of inaccurate data.
• The right to request deletion of your data where permitted.
• The right to withdraw consent at any time.

8. How we protect data

We apply technical and organisational measures including encryption in transit, access controls, monitoring and regular reviews. No system is perfectly secure, but we work continuously to safeguard your data.

9. Children

The Services are intended for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 18 years of age.

10. Contacting us about privacy

For privacy questions, requests, or to reach our data protection contact, please use the contact options at the end of this page. We take every request seriously.