Skip to main content

LEGAL · PRIVACY

Privacy Policy

This Privacy Policy explains how STRIXON — operated by Strixon Store ("STRIXON", "we", "us") — collects, uses, shares, and protects your personal data when you visit strixonstore.com or place an order with us.

We process personal data in accordance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia and its Implementing Regulations. By using our website, you acknowledge the practices described here. This document is provided for transparency and does not by itself create rights beyond those granted by applicable law.

On this page
  1. Personal data we collect
  2. How we use your data
  3. Legal basis for processing
  4. Cookies & similar technologies
  5. Third-party service providers
  6. When we disclose data
  7. International transfers
  8. How long we keep data
  9. How we protect your data
  10. Your rights under the PDPL
  11. Children's privacy
  12. Changes to this policy
  13. Contact us

Personal data we collect

We collect only the data we need to run the store, fulfil your orders, and improve your experience:

  • Account & identity — name, email address, and mobile number (in +966 format) when you create an account or place an order.
  • Order & delivery — the items you buy, the shipping and billing address, and the recipient details needed to deliver your parcel.
  • Payment — payment is processed by our payment provider (Tap Payments). We receive a confirmation and limited transaction details; we do not store your full card number on our servers.
  • Communications — messages you send us by email, WhatsApp, or our contact form, and our replies.
  • Technical & usage — IP address, browser and device type, language preference, and pages viewed, collected through cookies and similar technologies (see the Cookies section).

We do not intentionally collect sensitive personal data, and we ask that you do not send it to us.

How we use your data

We use personal data for clearly defined purposes:

  • to process, fulfil, and deliver your orders, and to handle returns and refunds;
  • to create and manage your account and authenticate you securely;
  • to send transactional messages — order confirmations, shipping and delivery updates, and password resets;
  • to provide customer support and respond to your enquiries;
  • to operate, secure, and improve the website, and to prevent fraud and abuse;
  • to meet our legal, tax, and regulatory obligations in the Kingdom of Saudi Arabia.

We send marketing messages only where permitted, and you can opt out at any time using the unsubscribe link or by contacting us.

Cookies & similar technologies

We use cookies and similar technologies to keep the site working and to understand how it is used:

  • Essential cookies — required for core functions such as your session, language preference, security, and anti-forgery protection. The site does not work properly without these.
  • Analytics cookies — basic site analytics that help us measure traffic and improve the store. These are used only where permitted.

You can manage or block cookies in your browser settings. Blocking essential cookies may break parts of the site.

Third-party service providers

We share personal data with trusted providers strictly so they can perform services on our behalf, under contracts that require them to protect your data:

  • Payment processingTap Payments, to take payment securely. Card data is handled by the processor, not stored by us.
  • Shipping & deliveryAramex (and any future delivery partner), to ship your order and provide tracking. They receive the recipient name, address, and contact number.
  • Analytics — basic site-analytics providers, to measure usage in aggregate.
  • Email & messaging — our email and messaging providers, to send transactional notifications.

We do not sell your personal data.

When we disclose data

Beyond the service providers above, we disclose personal data only:

  • when required by a competent authority, court order, or applicable law in the Kingdom of Saudi Arabia;
  • to establish, exercise, or defend legal claims, or to prevent fraud or harm;
  • in connection with a business transfer (such as a merger or acquisition), where the recipient agrees to honour this policy.

International transfers

We aim to store and process personal data within the Kingdom of Saudi Arabia. Some of the service providers we rely on — for example website analytics — may process limited data on servers outside the Kingdom.

Where data is transferred outside Saudi Arabia, we do so only in accordance with the PDPL and its transfer conditions, and we require the recipient to apply an adequate level of protection for your personal data.

How long we keep data

We keep personal data only for as long as needed for the purpose it was collected, or as required by law:

  • Order & invoice records — retained for at least 6 years, as required by Saudi tax and accounting regulations (ZATCA).
  • Account data — kept while your account is active; deleted or anonymised on request, subject to legal retention.
  • Support messages — kept for up to 24 months to handle follow-ups.

When data is no longer needed, we securely delete or anonymise it.

How we protect your data

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS/TLS), access controls, and secure handling of payments through our PCI-compliant payment provider.

No method of transmission or storage is perfectly secure, but we work to safeguard your data and to respond promptly to any incident as required by the PDPL.

Your rights under the PDPL

Subject to the conditions of the PDPL, you have the right to:

  • Be informed — know how and why your personal data is processed;
  • Access — request a copy of the personal data we hold about you;
  • Correction — ask us to correct inaccurate or incomplete data;
  • Deletion — ask us to delete your data where there is no legal reason to keep it;
  • Object & withdraw consent — object to certain processing and withdraw any consent you gave, without affecting prior lawful processing.

To exercise any right, contact us using the details below. We may verify your identity before acting, and we will respond within the period required by law. You may also lodge a complaint with the competent Saudi data-protection authority.

Children's privacy

Our store is intended for adults. We do not knowingly collect personal data from children without the consent of a parent or guardian. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be communicated where appropriate. Please review this page periodically.

Contact us

For any question about this policy or your personal data, or to exercise your rights, contact us:

STRIXON is operated by Strixon Store, Kingdom of Saudi Arabia — Commercial Registration No. 5800110452, VAT No. 312509518400003.