Sunaih Company โ Commercial Registration No. 7037073181, Tax No. 315002784100003. An online store on the domain shop.saniyh.com, Riyadh, Saudi Arabia. Contact: info@saniyh.com โ WhatsApp 0558327555.
This policy explains the data Saniyh Store collects when you use it, the legal basis for each use, who it is shared with, how long it is kept, and your rights regarding it and how to exercise them.
Version 2.1 โ effective September 23, 2026.
Data we collect
- Order data: Name, mobile number, email, delivery address, and details of what you ordered.
- Account data: If you create an account โ username, order history, and saved addresses.
- National ID or Iqama number: If you activate the wallet and loyalty program, so we can verify that each person has only one account. It is stored, never shown in full to anyone, and not used for anything else.
- Gender and date of birth: If you activate the wallet and loyalty program โ to manage your membership in the program. They are not shown to anyone and not used for anything else.
- Business data: If you add it โ name, VAT number, commercial registration, and national address โ to issue your tax invoices in the business's name.
- Technical data: IP address, device type, and browser.
- Visit source: How you reached us โ the referral link or ad campaign tag.
Why we use your data โ and the legal basis for each purpose
- Processing and delivering your order and contacting you about it โ Basis: performance of a contract to which you are a party.
- After-sales service, warranty, and returns โ Basis: performance of the contract.
- Issuing invoices and meeting our tax and legal obligations โ Basis: legal obligation.
- Protecting the store from unauthorized login attempts and fraud โ Basis: legitimate interest (information security).
- Measuring store performance and improving our ads โ Basis: your consent alone, which you may withdraw at any time.
- Marketing messages โ Basis: your consent alone, which you may withdraw at any time.
Measurement and advertising tools โ none of them run before you consent
No third-party tool is loaded and no request is sent before you consent โ neither their scripts nor their cookies. On your first visit, a banner lets you choose to accept or decline, and declining doesn't stop you from browsing or buying.
After you consent, we use:
- Google Analytics 4 โ to measure visits and the purchase journey.
- Google Ads โ to measure conversions from our ad campaigns.
- Meta Pixel โ to measure Facebook and Instagram ad performance.
- Snap Pixel โ to measure Snapchat ad performance.
- TikTok Pixel โ to measure TikTok ad performance.
These tools collect browsing data (pages you visit, products you view, and purchases) and link it to a pseudonymous identifier unique to you โ it is not your name, but it is persistent and distinguishes you from others. We do not sell or rent your data.
With Snapchat only, and only on the order confirmation page, we send your email address hashed (SHA-256) โ that is, converted into an unreadable code โ so Snap can match the purchase to an ad you saw. This happens only after you consent.
And an in-house counter we built runs at all times: we record the page you visited, how you arrived, and your device type, using a computed identifier that changes every day so it is not linked to you and does not track you across days. It sets no cookie, never leaves our server, and is not shared with any third party; its only purpose is to know how many visits we get and where they come from. Its basis is our legitimate interest in measuring our store's performance.
Data transfer outside the Kingdom
The providers of the measurement tools above โ Google, Meta, Snapchat, and TikTok โ are companies outside Saudi Arabia, and the browsing data described is processed on their servers abroad. This transfer happens only after you consent to it, and is limited to the data described above and to the stated purpose only.
Your order, invoice, and account data are kept by us and on our hosting servers, and are not transferred outside the Kingdom for marketing purposes.
Data sharing
We share only the minimum necessary, and only with those needed to fulfill your order: the shipping company (name, address, and mobile number),the installation technician when you request the service, andAlinma Bank when paying by card (order amount and number). We may disclose data if required to do so by a competent judicial or regulatory authority.
What we don't do
- We do not sell or rent your data to anyone.
- We do not store your card details. You enter them directly on Alinma Bank's secure page, and they never pass through our store.
- We do not send you marketing messages unless you consent, and you may withdraw consent at any time.
Cookies
The store uses cookies that are essential to its operation: keeping your cart contents, maintaining your login session, and remembering your preferences and your choice in the privacy banner. Disabling them in your browser may prevent you from completing an order. Cookies from measurement tools are set only after you consent.
Data protection
The store runs over an encrypted connection (HTTPS), and access to the admin panel is restricted to designated accounts. We log the IP addresses of failed login attempts and automatically block repeated ones โ this is purely a security use.
Retention period
- Orders and invoices: for the period required by Saudi regulations for invoicing, zakat, and tax โ we have no choice in this.
- Account data and ID number: for as long as your account exists, and destroyed when it is deleted, to the extent this doesn't conflict with our legal obligations.
- Marketing data: deleted as soon as you withdraw your consent.
- Failed login attempt logs and internal counter data: a short period not exceeding what the security and statistical purpose requires.
A request to delete your account does not cover order and invoice records, because keeping them is a legal obligation we have no choice in.
Your rights
- To be informed of what we collect about you and why โ this policy is your notice.
- To access your data held by us and request a copy of it.
- To obtain it in a clear, readable format that you can transfer.
- To correct any inaccurate or incomplete data.
- To request destruction of your data โ to the extent this doesn't conflict with our legal obligations.
- To withdraw your consent to measurement or marketing at any time, as easily as you gave it.
- To object to processing based on our legitimate interest, and to request that it be restricted while your objection is reviewed.
To exercise any of these rights, email us at info@saniyh.com from the same email registered to your account, or from the mobile number linked to your order. We will respond within no more than thirty (30) days, and if we need additional time, we will notify you of it and the reason before the initial period ends.
If you are not satisfied with our response, you may file a complaint with the competent personal data protection authority in the Kingdom (the Saudi Data & AI Authority โ SDAIA).
Minors
This store is intended for those aged 18 and over. We do not knowingly collect data from anyone younger; if we learn that data reached us from a minor without their guardian's consent, we will destroy it once notified. If you are a parent or guardian and believe that data of someone in your care has reached us, email us at info@saniyh.com.
Changes to this policy
We may update this policy. The version published on this page applies from its publication date, and the last-updated date is shown at the bottom. If a change is material and affects processing based on your consent, we will ask for your consent again.
Change your choice at any time
You can review your choice regarding measurement tools whenever you like:
Last updated: September 23, 2026 ยท Version 2.1