LEGAL · PRIVACY
Privacy Policy
Last updated 13 June 2026
This Privacy Policy explains how STRIXON — operated by Strixon Store ("STRIXON", "we", "us") — collects, uses, shares, and protects your personal data when you visit strixonstore.com or place an order with us.
We process personal data in accordance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia and its Implementing Regulations. By using our website, you acknowledge the practices described here. This document is provided for transparency and does not by itself create rights beyond those granted by applicable law.
On this page
- Personal data we collect
- How we use your data
- Legal basis for processing
- Cookies & similar technologies
- Third-party service providers
- When we disclose data
- International transfers
- How long we keep data
- How we protect your data
- Your rights under the PDPL
- Children's privacy
- Changes to this policy
- Contact us
Personal data we collect
We collect only the data we need to run the store, fulfil your orders, and improve your experience:
- Account & identity — name, email address, and mobile number (in +966 format) when you create an account or place an order.
- Order & delivery — the items you buy, the shipping and billing address, and the recipient details needed to deliver your parcel.
- Payment — payment is processed by our payment provider (Tap Payments). We receive a confirmation and limited transaction details; we do not store your full card number on our servers.
- Communications — messages you send us by email, WhatsApp, or our contact form, and our replies.
- Technical & usage — IP address, browser and device type, language preference, and pages viewed, collected through cookies and similar technologies (see the Cookies section).
We do not intentionally collect sensitive personal data, and we ask that you do not send it to us.
How we use your data
We use personal data for clearly defined purposes:
- to process, fulfil, and deliver your orders, and to handle returns and refunds;
- to create and manage your account and authenticate you securely;
- to send transactional messages — order confirmations, shipping and delivery updates, and password resets;
- to provide customer support and respond to your enquiries;
- to operate, secure, and improve the website, and to prevent fraud and abuse;
- to meet our legal, tax, and regulatory obligations in the Kingdom of Saudi Arabia.
We send marketing messages only where permitted, and you can opt out at any time using the unsubscribe link or by contacting us.
Legal basis for processing
Under the PDPL we rely on one or more of the following legal bases to process your personal data:
- Performance of a contract — to take and fulfil your order and provide the services you request.
- Legitimate interests — to secure the website, prevent fraud, and improve our services, balanced against your rights.
- Legal obligation — to comply with tax, accounting, and consumer-protection requirements.
- Consent — for optional activities such as marketing messages and non-essential cookies, which you may withdraw at any time.
Cookies & similar technologies
We use cookies and similar technologies to keep the site working and to understand how it is used:
- Essential cookies — required for core functions such as your session, language preference, security, and anti-forgery protection. The site does not work properly without these.
- Analytics cookies — basic site analytics that help us measure traffic and improve the store. These are used only where permitted.
You can manage or block cookies in your browser settings. Blocking essential cookies may break parts of the site.
Third-party service providers
We share personal data with trusted providers strictly so they can perform services on our behalf, under contracts that require them to protect your data:
- Payment processing — Tap Payments, to take payment securely. Card data is handled by the processor, not stored by us.
- Shipping & delivery — Aramex (and any future delivery partner), to ship your order and provide tracking. They receive the recipient name, address, and contact number.
- Analytics — basic site-analytics providers, to measure usage in aggregate.
- Email & messaging — our email and messaging providers, to send transactional notifications.
We do not sell your personal data.
When we disclose data
Beyond the service providers above, we disclose personal data only:
- when required by a competent authority, court order, or applicable law in the Kingdom of Saudi Arabia;
- to establish, exercise, or defend legal claims, or to prevent fraud or harm;
- in connection with a business transfer (such as a merger or acquisition), where the recipient agrees to honour this policy.
International transfers
We aim to store and process personal data within the Kingdom of Saudi Arabia. Some of the service providers we rely on — for example website analytics — may process limited data on servers outside the Kingdom.
Where data is transferred outside Saudi Arabia, we do so only in accordance with the PDPL and its transfer conditions, and we require the recipient to apply an adequate level of protection for your personal data.
How long we keep data
We keep personal data only for as long as needed for the purpose it was collected, or as required by law:
- Order & invoice records — retained for at least 6 years, as required by Saudi tax and accounting regulations (ZATCA).
- Account data — kept while your account is active; deleted or anonymised on request, subject to legal retention.
- Support messages — kept for up to 24 months to handle follow-ups.
When data is no longer needed, we securely delete or anonymise it.
How we protect your data
We apply appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS/TLS), access controls, and secure handling of payments through our PCI-compliant payment provider.
No method of transmission or storage is perfectly secure, but we work to safeguard your data and to respond promptly to any incident as required by the PDPL.
Your rights under the PDPL
Subject to the conditions of the PDPL, you have the right to:
- Be informed — know how and why your personal data is processed;
- Access — request a copy of the personal data we hold about you;
- Correction — ask us to correct inaccurate or incomplete data;
- Deletion — ask us to delete your data where there is no legal reason to keep it;
- Object & withdraw consent — object to certain processing and withdraw any consent you gave, without affecting prior lawful processing.
To exercise any right, contact us using the details below. We may verify your identity before acting, and we will respond within the period required by law. You may also lodge a complaint with the competent Saudi data-protection authority.
Children's privacy
Our store is intended for adults. We do not knowingly collect personal data from children without the consent of a parent or guardian. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or the law. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be communicated where appropriate. Please review this page periodically.
Contact us
For any question about this policy or your personal data, or to exercise your rights, contact us:
- Email — support@strixonstore.com
- Phone / WhatsApp — +966 50 422 8580
STRIXON is operated by Strixon Store, Kingdom of Saudi Arabia — Commercial Registration No. 5800110452, VAT No. 312509518400003.