Privacy policy

Privacy Policy

Last updated: 15 July 2026

Sweety1 respects the privacy of visitors and customers of www.sweety1.com and this policy explains the types of personal data we may collect, why we use it, the parties we may share it with, how long we retain it, and the choices and rights available to data subjects. Data is handled in accordance with the laws applicable in the Kingdom of Saudi Arabia.

1. Responsible entity and contact details

Entity responsible for the store: Khalid Abdullah Issa Alabdullah Trading Establishment – Sweety1.

Trade name: Sweety1

Unified Commercial Registration No.: 7016055035

Location: Kingdom of Saudi Arabia – Eastern Province.

Email: support@sweety1.com

WhatsApp or phone: 966550308561

2. Data we may collect

Depending on how the customer uses the website, we may collect the following data:

Name and contact details, such as mobile number and email address.
Billing and delivery addresses, city, district, street, and postal code.
Order details, products, amounts, correspondence history, and customer service records.
Account information and language and marketing preferences when creating an account or subscribing.
Limited payment data and payment status; full card details are generally processed by the payment provider.
Information provided by the customer to fulfill digital service orders, such as a link, username, or wallet identifier, depending on the service.
Technical data, such as IP address, device and browser type, access logs, and pages visited.
Cookies and similar technologies.
Any information voluntarily submitted by the customer through forms, email, WhatsApp, or customer service channels.

3. Sources of data

We obtain data directly from customers when they browse, register, make purchases, or contact us. We may also obtain order-related information from Shopify, payment providers, shipping companies, anti-fraud services, and digital service providers to the extent necessary to provide the service and fulfill the order.

4. Purposes of using data

We use personal data, when necessary, for the following purposes:

Creating and verifying orders and collecting payments.
Preparing, shipping, and delivering products and sending order and tracking updates.
Fulfilling digital services and cards, providing support, and providing refills where available.
Managing returns, exchanges, warranties, maintenance requests, and complaints.
Communicating with customers about their orders, accounts, or inquiries.
Protecting the website and payments from fraud, misuse, and security risks.
Improving the store, products, and user experience and measuring performance.
Sending offers and marketing messages where consent or an appropriate legal basis exists.
Meeting legal, accounting, and tax requirements and protecting the rights of the store and its customers.

5. Legal basis for processing data

Data is processed when necessary to fulfill the contract and order agreed with the customer, comply with a legal obligation, protect the legitimate interests of the store and its customers, or on the basis of the customer's consent where consent is required.

6. Cookies

The website uses cookies and similar technologies to operate the shopping cart, support sign-in, save preferences, analyze website performance, and provide more relevant content and experiences. Customers can manage cookies through their browser settings. Disabling essential cookies may prevent some website functions from working.

7. Sharing data

We do not sell customers' personal data. We may share the necessary amount of data with the following parties:

Shopify and hosting and technical service providers.
Banks, payment gateways, and payment service providers.
Shipping, delivery, storage, and order fulfillment companies.
Digital service and product providers when the customer orders these services.
Analytics, security, customer service, and marketing providers.
Advisers, auditors, and accountants when necessary.
Government or judicial authorities where there is a legal obligation or lawful request.

Service providers are required to use the data only within the scope of their assigned task, in accordance with applicable agreements and laws.

8. Transferring data outside the Kingdom

Some hosting, payment, analytics, shipping, or fulfillment services may require data to be processed or stored outside the Kingdom of Saudi Arabia. In such cases, we seek to apply the appropriate legal requirements and safeguards according to the nature of the data and the recipient.

9. Data retention period

We retain data for as long as necessary to achieve the stated purposes, fulfill orders, warranties, and maintenance, meet accounting, tax, and legal requirements, resolve disputes, and protect rights. Once the data is no longer needed, it is deleted, destroyed, or converted into data that does not identify its subject, unless laws require a longer retention period.

10. Data protection and security

We apply reasonable organizational and technical measures to protect data against unauthorized access, use, alteration, disclosure, or loss. However, no electronic method is completely secure. Customers should therefore keep their sign-in details, passwords, and verification codes confidential and not share them with others.

11. Data subject rights

Subject to the limits and procedures established by applicable laws, data subjects may have the following rights:

To know how their data is collected and the purposes for which it is processed.
To access their personal data and request a copy.
To request that inaccurate data be corrected, completed, or updated.
To request destruction of data when the legal conditions for doing so are met.
To withdraw consent where processing is based on consent, without affecting processing carried out before consent was withdrawn.
To object to or complain about data processing.

To submit a request concerning personal data, please contact the email address stated in this policy, specifying the type of request and providing the information needed to verify the requester's identity. A request may be refused or restricted where permitted by law, such as where records must be retained or others' rights must be protected.

12. Marketing messages

We may send offers or marketing updates when the customer consents or where permitted by law. Customers can unsubscribe through the link in the message or by contacting us. Unsubscribing from marketing messages does not affect essential order, payment, shipping, or service messages.

13. Children's data

The store is not intended to deliberately collect children's data. Purchases for a minor must be made by their guardian or with the guardian's consent, as required by law.

14. Third-party links and services

The website may contain links, applications, or services belonging to third parties. When customers access these services, their data is subject to those parties' privacy policies. We do not control their independent practices.

15. Updates to this Privacy Policy

We may update this policy when the store's services or legal requirements change. The updated version is published on this page with the date of the latest update. We recommend reviewing it periodically.