Privacy Policy

Updated Date: 21 May 2026

This Privacy Policy applies to Personal Data processed by A&B in the course of Our business and the Services provided through the Website.

This Privacy Policy details how Your Personal Data may be gathered and used by A&B; we recommend that You read this Privacy Policy carefully. You accept the gathering and use of Your Personal Data by A&B and any third parties that A&B may engage to facilitate the Website and its Services. 

This Privacy Policy is intended to comply with applicable laws and regulations in the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL). 

The following terms shall have the meanings assigned to each of them unless expressly stated otherwise in the text; and all references to the singular shall include the plural and vice versa:

Purpose of Collecting and Using Data

We use Your information for the following purposes: 

• Processing and confirming orders 

• Delivering Products 

• Providing customer support 

• Sending transactional updates related to orders or shipping 

• Sending marketing communications (Customer may Opt-out) 

• Improving Our website, services, and customer experience 

• Analytics and website performance monitoring 

• Fraud prevention and security monitoring 

• Retargeting and advertising on platforms such as Meta Platforms and Google 

We only use personal data for legitimate business purposes and in accordance with applicable laws. 

Legal Grounds for Processing Personal Data

1. Consent of the User.

2. Performance of contractual obligations.

3. Legitimate interests of A&B.

Data Collected and Collection Methods

Directly Collected Data

• Full name 

• Phone number 

• Email address 

• Shipping address 

• Billing address 

• Order details and purchase history 

Indirectly Collected Data

Technical & Device Information 

• IP address 

• Browser type 

• Device type 

• Operating system 

• Website usage data 

• Referral source 

• Time zone 

• Pages viewed and browsing activity 

Cookies & Tracking Technologies 

We may collect information through: 

• Cookies 

• Pixels 

• Analytics tools 

• Advertising technologies 

This helps Us improve website performance, User experience, and advertising relevance. 

Payment Information 

We do not store or process full payment card details directly. Payments are securely processed through trusted third-party payment providers and gateways. 

Service Providers and Integrated Applications

A&B may work with third-party companies and individuals for website design, consulting, analytics, marketing, and software tools. As a result We may share personal information with trusted third parties, including but not limited to:

• Payment providers 

• Shipping and logistics partners 

• Advertising platforms (such as Meta Platforms and Google) 

• Analytics providers 

• Email and SMS communication providers 

• Technology and hosting providers 

Data Storage

A&B stores and processes personal information using Shopify's secure cloud infrastructure and trusted third-party service providers that support the operation of our online store. Shopify uses globally distributed cloud infrastructure and may store or process data in multiple geographic locations depending on operational, security, and performance requirements. Appropriate technical and organizational measures are implemented to protect personal information in accordance with applicable privacy laws.

Your data may also be securely stored through: 

• Shopify infrastructure 

• Trusted third-party service providers 

• Analytics and marketing platforms 

• Customer support systems 

Data Retention & Destruction

We retain personal information only for as long as necessary to: 

• Fulfill orders 

• Provide services 

• Comply with legal, tax, accounting, or regulatory obligations 

• Resolve disputes 

• Enforce our agreements 

We retain Users’ Personal Data in accordance with the provisions of this Privacy Policy. However, in certain cases, A&B may also destroy such data in accordance with the Personal Data Protection Law, including but not limited to the following:

• Upon completion or fulfillment of the purpose for which the Users’ Personal Data was collected, provided this does not conflict with the Personal Data Protection Law, within three hundred sixty-five (365) days from fulfillment of the purpose. Nevertheless, A&B may retain such data after removing any information that could identify the User.

• Upon the user’s request to destroy their data, provided this does not conflict with the Personal Data Protection Law and does not affect A&B’s ability to provide services to the User.

Marketing Communications 

We may contact customers through email, SMS and/or WhatsApp 

Marketing communications are sent only where permitted by law and based on customer consent where required. 

Customers may unsubscribe or opt out of marketing communications at any time by: 

• Clicking the unsubscribe link in emails 

• Contacting us directly 

• Adjusting communication preferences where available 

We do not knowingly send unsolicited marketing communications in violation of applicable laws

Privacy Assurance

A&B undertakes not to sell, lease, or share Users’ Personal Data without express consent except as required by law.

Disclosure of Data

We undertake not to disclose Users’ Personal Data except in the following cases and in accordance with the Personal Data Protection Law:

• For the purpose of providing the user with the services requested through the website;

• Upon obtaining the written consent of the user who is the owner of the personal data;

• If the Personal Data was collected from another publicly available source;

• If the entity requesting disclosure is a governmental authority for security purposes, implementation of another law, or to satisfy judicial requirements;

• If disclosure is necessary to protect public health or safety, or to protect the life or health of specific individual(s). The implementing regulations shall specify the relevant controls and procedures.

• If the disclosure is limited to processing the disclosed Personal Data in a manner that does not lead to identifying the user or any other specific person, thereby removing the status of Personal Data from such information.

Your Rights Under PDPL 

Users whose data has been collected by A&B shall have the following rights in accordance with the Personal Data Protection Law:

• Right to Be Informed: The User has the right to know the purpose for collecting their personal data, the legal basis for processing it, the methods of its collection, retention, destruction, and disclosure. All of this has been explained in this Privacy Policy.

• Right of Access to and Obtaining Personal Data: The User has the right to access the personal data collected from them and retained by A&B, and to obtain a copy thereof that matches the records maintained by A&B, within thirty (30) days from the date of the User’s last use of the website or receipt of services, whichever occurs later.

• Right to Request Correction, Updating, and Completion: The User has the right to request correction, updating, or completion of their personal data on the website by contacting A&B via the email address provided at the end of this Privacy Policy.

• Right to Destruction: Subject to the Personal Data Protection Law, the User has the right to request destruction of their personal data in accordance with the mechanism described in this Privacy Policy.

The User may request to exercise any of the above rights by contacting A&B via the email address provided at the end of this Privacy Policy. A&B shall respond within a period not exceeding thirty (30) days, and A&B may extend this period if fulfilling the User’s request requires additional unforeseen effort. Except where otherwise required by law, the user shall not be charged any fees for exercising any of the above rights.

To exercise your rights, please contact us at: 

support@aandblabel.com

We may request verification of identity before processing certain requests. 

Limitation of Liability

A&B will make reasonable efforts to protect User’s Personal Data. However, transmissions and operations conducted over the Internet cannot be guaranteed to be completely secure. Accordingly, the User’s use of the Website constitutes acknowledgment and acceptance that A&B shall not bear any liability for the disclosure of Your information resulting from errors by any party in transmission or operations, or from any unauthorized acts carried out by any third party.

Amendments to the Privacy Policy

A&B reserves the right to amend or update this Privacy Policy at any time. Continued use of the website constitutes acceptance of the changes.

Complaints

If the User is not satisfied with the handling of a complaint, they may submit a complaint to the Saudi Data and Artificial Intelligence Authority (SDAIA).