This Privacy Policy has been prepared to ensure the protection of users’ personal data and compliance with the Personal Data Protection Law applicable in the Kingdom of Saudi Arabia.
“Personal Data” refers to any information that can directly or indirectly identify an individual.
By using the Monoloot Store website or completing any registration or purchase, you expressly acknowledge and consent to the collection, use, and processing of your personal data in accordance with this Privacy Policy.
1. Personal Data Collected
We may collect the following personal data when you use the website:
Full name
Email address
Mobile number
Postal address
2. Methods of Data Collection
Personal data is collected through the following methods:
Directly when registering on the website, placing orders, or contacting us
Indirectly through cookies while browsing the website
3. Purpose of Data Collection
We use personal data for the following purposes:
Completing registrations, purchases, and order processing
Improving user experience and personalizing content
Responding to inquiries and complaints
Sending updates, notifications, and marketing offers after obtaining the user’s prior consent, with the option to unsubscribe at any time
Analyzing data in an aggregated and non-identifiable manner to improve and enhance service quality
4. Data Protection
We are committed to protecting personal data through the following measures:
Storing data on secure servers, whether inside or outside the Kingdom of Saudi Arabia, in accordance with applicable legal and regulatory requirements
Using encryption technologies and network security measures
Restricting access to personal data to authorized employees or parties only
We also use SSL technology to secure sensitive information. Payment data is not stored on our servers and is processed exclusively through authorized payment service providers.
5. Cookies
We use cookies to enhance website performance, including:
Remembering shopping cart contents
Saving user preferences
Analyzing user behavior to improve services
Users may control cookie settings through their browser. Disabling cookies may affect certain website features.
6. Data Sharing
We do not sell, rent, or exchange personal data with third parties, except in the following cases:
Sharing data with website operation partners or service providers (such as payment gateways and shipping companies), strictly to the extent necessary to provide the service
Where disclosure is required by law or pursuant to a judicial order
Sharing non-personal or anonymized data for statistical or analytical purposes
7. Data Subject Rights
Data subjects have the following rights:
The right to know how their personal data is collected and used
The right to access their personal data
The right to request correction of inaccurate data
The right to request deletion of data, unless retention is required by law or contract
The right to withdraw consent for data processing
These rights may be exercised by contacting us using the details below. We will respond within seven (7) business days at no cost, unless otherwise stipulated by law.
8. Legal Basis for Data Processing
Personal data is collected and processed based on:
User consent, or
A legal or contractual obligation requiring such processing
Consent may be withdrawn at any time unless continued processing is required by law.
9. Data Retention and Destruction
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable laws, for a maximum period of three (3) years, unless otherwise required by law or contract.
Certain data may be retained for longer periods if required for legal, financial, or dispute-related purposes.
After the retention period expires, data is securely destroyed in a manner that prevents recovery or reuse.
9.1 User Accounts and Closure
Where a user account is maintained:
We may retain account data after obtaining the user’s consent
Users are provided with a clear and simple mechanism to request account closure
10. Personal Data Breaches
In the event of a personal data breach:
Relevant authorities and affected users will be notified within three (3) days from the date the breach is identified
Details regarding the scope of the breach, its impact, and remedial measures will be provided
Such notification does not constitute an automatic admission of liability and will be handled in accordance with applicable laws and regulatory decisions.
11. External Links
The website may contain links to external websites that are not under our control. We are not responsible for the privacy practices of such websites, and users are advised to review their privacy policies separately.
12. Personal Data Protection Responsibility
The management of Monoloot Store is legally responsible for personal data protection, compliance with applicable laws, and handling any related requests or complaints.
Any complaints or inquiries related to this Privacy Policy or personal data processing may be submitted through the contact details provided above.
14. Amendments to the Privacy Policy
We reserve the right to amend this Privacy Policy when necessary.
Users will be notified of material changes, and continued use of the website after such updates shall constitute explicit acceptance of the amended policy.
15. Governing Language
The Arabic version of this Privacy Policy shall prevail for interpretation purposes. In the event of any inconsistency, the Arabic version shall take precedence.
