Privacy policy

Introduction

At ROMAÉ, we are committed to protecting your privacy in accordance with the laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL). This Privacy Policy explains how we collect, use, process, store, and protect your personal data when you use our website or services.

Personal Data We Collect

We may collect and process the following types of personal data:

Full name
Contact details (phone number, email address)
National address, shipping and billing address
Payment information (processed securely via third-party providers)
Order history and preferences
Technical data (IP address, browser type, device information, cookies)

Legal Basis for Processing (PDPL Compliance)

We process your personal data based on one or more of the following legal grounds:

Your explicit consent
Performance of a contract (e.g., order fulfillment)
Compliance with legal or regulatory obligations
Legitimate business interests, where such processing does not override your rights

How We Use Your Data

Your personal data is used for the following purposes:

Processing and delivering your orders
Managing payments and transactions
Communicating with you regarding orders or customer support
Improving our website, services, and user experience
Sending marketing communications (only with your consent)

Data Sharing

ROMAÉ does not sell your personal data. We may share your data with:

Payment service providers
Shipping and logistics partners
IT, hosting, and website service providers

All third parties are required to process your data securely and in compliance with applicable laws, including PDPL.

International Data Transfers

If your personal data is transferred outside the Kingdom of Saudi Arabia, such transfers will be conducted in accordance with PDPL requirements, ensuring that your data receives an adequate level of protection.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by applicable laws and regulations in Saudi Arabia.

Data Security

ROMAÉ implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure.

Your Rights Under PDPL

Under the Personal Data Protection Law, you have the right to:

Be informed about how your personal data is collected and used
Access your personal data
Request correction of inaccurate or incomplete data
Request deletion of your data (where legally applicable)
Withdraw your consent at any time (without affecting prior processing)

To exercise your rights, please contact us using the details below.

Cookies

We use cookies and similar technologies to:

Enhance your browsing experience
Analyze website traffic
Personalize your experience

You can manage or disable cookies through your browser settings.

Complaints

If you believe your data protection rights have been violated, you have the right to file a complaint with the competent authority in the Kingdom of Saudi Arabia.