{"id":3,"date":"2025-09-17T16:24:31","date_gmt":"2025-09-17T16:24:31","guid":{"rendered":"https:\/\/theoutlet.sa\/?page_id=3"},"modified":"2025-12-13T14:50:05","modified_gmt":"2025-12-13T11:50:05","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/theoutlet.sa\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"

Theoutlet values the confidentiality and privacy of personal data and processes it lawfully and transparently in line with the Saudi Personal Data Protection Law (PDPL)<\/strong> and its implementing regulations. This Policy applies to our website, app, and our official communication channels (e.g., WhatsApp, email) when we provide services or communicate with you. Under the PDPL, controllers must publish a privacy policy before<\/strong> collecting personal data and explain key elements of processing.<\/p>\n

1) What data we collect<\/h2>\n

Contact details:<\/strong> name, phone number, email, address.<\/p>\n

Order & payment info:<\/strong> orders, payment method details (processed by approved payment providers), invoices.<\/p>\n

Shipping & delivery info:<\/strong> carrier, tracking numbers, delivery status.<\/p>\n

Technical & usage data:<\/strong> IP address, device\/browser type, pages viewed, cookies.<\/p>\n

Support communications:<\/strong> messages via WhatsApp\/email and contact forms.<\/p>\n

We do not request sensitive data unless necessary and lawful; if required, we will explain and obtain consent where needed. See PDPL Art. 4\u20136 for information\/consent requirements and exceptions.<\/p>\n

2) Why we use your data (legal bases)<\/h2>\n

We process personal data only for specified, legitimate purposes and using the minimum necessary data. Depending on the context, our legal bases may include: your consent<\/strong>, performance of a contract<\/strong>, legal obligation<\/strong>, legitimate interests<\/strong> (balanced against your rights and never<\/strong> for sensitive data under this basis), and protection of vital interests<\/strong>.<\/p>\n

Main purposes<\/h2>\n

Provide services & fulfill orders:<\/strong> order processing, payment, shipping, confirmations, and after-sales support.<\/p>\n

Customer care:<\/strong> respond to inquiries, handle complaints, verify identity.<\/p>\n

Improve our services:<\/strong> analytics to enhance performance and user experience (aggregated or minimally identified where possible).<\/p>\n

Communications & marketing:<\/strong> service messages; offers and promotions (opt-out any time).<\/p>\n

Compliance & fraud prevention:<\/strong> accounting\/tax records, dispute handling, security monitoring.<\/p>\n

3) Marketing & opt-out<\/h2>\n

We may send offers, discounts, and alerts. You can opt out at any time via the unsubscribe link (if available) or by contacting Customer Care. PDPL recognizes consent as a primary basis for processing, with specific conditions for marketing defined in the Regulations.<\/p>\n

4) Cookies<\/h2>\n

We only use essential cookies that are necessary for the basic operation of our website and services. These cookies enable core functions such as maintaining your session, keeping items in your cart, and supporting secure checkout.<\/p>\n

We do NOT use cookies for advertising, analytics, personalization, or any form of tracking inside the app or across other apps or websites.
You may control essential cookies through your browser settings, but disabling them may affect the basic functionality of the website.<\/p>\n

5) Sharing your data<\/h2>\n

We do not sell<\/strong> personal data. We share only what\u2019s necessary with:<\/p>\n

Service providers:<\/strong> shipping companies, payment processors, hosting\/IT, analytics vendors.<\/p>\n

Professional advisors:<\/strong> legal\/accounting (as needed).<\/p>\n

Public authorities:<\/strong> where required by applicable law or valid legal request.
\nSharing is governed by agreements and safeguards consistent with PDPL requirements.<\/p>\n

6) Cross-border transfers<\/h2>\n

If we transfer personal data outside KSA, we will do so under the PDPL\u2019s Regulation on Personal Data Transfer Outside the Kingdom<\/strong> and related guidance (e.g., adequacy decisions, appropriate safeguards like SCCs\/BCRs, risk assessments, and data-minimization). Transfers are limited to the minimum<\/strong> necessary.<\/p>\n

As of 14 September 2024, updated Transfer Regulations took effect, enabling transfers to countries deemed to have comparable protection and setting mechanisms for other destinations (e.g., SCCs\/BCRs plus safeguards).<\/p>\n

7) How long we keep data<\/h2>\n

We retain personal data only as long as needed for the purposes above, including legal obligations and dispute resolution. When no longer needed, data is securely deleted or anonymized, consistent with PDPL requirements on destruction and retention.<\/p>\n

8) Security<\/h2>\n

We apply technical and organizational measures (encryption, access controls, monitoring) to protect personal data, including during transfers, and we continually improve our controls.<\/p>\n

9) Your rights under the PDPL<\/h2>\n

Subject to PDPL and its Regulations, you have the right to:<\/p>\n

Be informed<\/strong> of the legal basis and purpose of collection.<\/p>\n

Access<\/strong> your personal data held by us.<\/p>\n

Obtain<\/strong> a readable copy of your personal data.<\/p>\n

Correct\/complete\/update<\/strong> your data.<\/p>\n

Request destruction<\/strong> in specified cases (e.g., when no longer needed for the purpose).
\nWe will respond within the periods and methods set by the Regulations.<\/p>\n

To exercise your rights, contact us at the details below.<\/p>\n

10) Data breaches<\/h2>\n

If we become aware of any breach, damage, or illegal access<\/strong> to personal data, we will notify the Competent Authority (SDAIA)<\/strong> and, where the incident could harm your data or prejudice your rights and interests, we will also notify you, in line with the Regulations and SDAIA guidance.<\/p>\n

11) Registration \/ DPO (where required)<\/h2>\n

When applicable under PDPL and the National Register of Controllers<\/strong> rules, we will register as a controller<\/strong> and, if required by the Regulations (e.g., large-scale monitoring or core processing of sensitive data), we will appoint a Data Protection Officer (DPO)<\/strong>.<\/p>\n

12) Children\u2019s data<\/h2>\n

Our services are not directed to individuals below the legal age. If we discover that we collected data from a minor without required approvals, we will delete it appropriately.<\/p>\n

13) Changes to this Policy<\/strong><\/h2>\n

We may update this Policy from time to time; the \u201cLast updated\u201d date reflects the latest version. Continued use after updates constitutes acceptance of the revised Policy.<\/p>\n

14) Contact<\/h2>\n

For privacy inquiries or requests (access\/rectification\/deletion\/marketing opt-out):<\/p>\n

Email: <\/strong>info@theoutlet.sa<\/p>\n

Support:<\/strong> 8001240636<\/p>\n","protected":false},"excerpt":{"rendered":"

Theoutlet values the confidentiality and privacy of personal data and processes it lawfully and transparently in line with the Saudi<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/theoutlet.sa\/en\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/theoutlet.sa\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/theoutlet.sa\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/theoutlet.sa\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/theoutlet.sa\/en\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":0,"href":"https:\/\/theoutlet.sa\/en\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"wp:attachment":[{"href":"https:\/\/theoutlet.sa\/en\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}