🔐 Privacy Policy

Effective Date: January 2026

Kashmaira GCC (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data in accordance with the Saudi Arabia Personal Data Protection Law (PDPL) and applicable GCC data protection regulations.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you interact with our brand through Instagram, WhatsApp, website, or other digital platforms.

1. Information We Collect

We may collect the following types of personal data:

Personal Identification Information

·         Name

·         Phone number

·         Email address

·         Shipping address

Transaction Information

·         Order details

·         Payment confirmation data (processed via secure third-party gateways)

Communication Data

·         Messages sent via Instagram DM or WhatsApp

·         Customer support inquiries

Technical Data

·         Device information

·         IP address

·         Browsing activity (if using our website)

2. How We Use Your Information

Your data is used only for legitimate business purposes, including:

·         Processing and delivering orders

·         Providing customer support

·         Responding to inquiries

·         Sending order updates

·         Improving our products and services

·         Marketing communications (only with consent)

We do NOT sell or rent personal data to third parties.

3. Legal Basis for Processing (PDPL Compliance)

Under Saudi PDPL, we process your data based on:

·         Your explicit consent

·         Contractual necessity (order fulfillment)

·         Legal obligations

·         Legitimate business interests

4. Data Protection & Security

We implement industry-standard security measures including:

·         Secure encrypted communication

·         Restricted data access

·         Protected payment gateways

·         Confidential data handling procedures

5. Data Sharing & Third Parties

We may share limited data with:

·         Delivery partners

·         Payment service providers

·         IT service providers

All third parties are required to comply with Saudi PDPL data protection standards.

6. Data Retention Policy

We retain personal data only as long as necessary for:

·         Order processing

·         Legal compliance

·         Customer service

After this period, data is securely deleted.

7. Your Rights Under Saudi PDPL

You have the right to:

·         Access your personal data

·         Request correction of inaccurate data

·         Request deletion of your data

·         Withdraw consent at any time

·         Know how your data is used

To exercise your rights, contact us using the details below.

8. Marketing Communications

We send promotional messages only if:

·         You opt-in

·         You request updates

You can unsubscribe anytime.

9. Policy Updates

We may update this Privacy Policy periodically to reflect:

·         Legal changes

·         Business practices

·         PDPL compliance updates

Latest version will always be available on our official channels.

10. Contact Information

For privacy-related inquiries, contact us:

Kashmaira GCC

Email: support@kashmaira.com

Saudi Arabia