At "Hanaya" Jewelry, we believe that trust and privacy are integral parts of the luxury jewelry buying experience. Therefore, we commit to the highest levels of care, responsibility, and confidentiality in handling all information we collect from visitors and users of our online store. This policy aims to clarify how we collect, process, use, and protect your personal information when you interact with our services or use the store, in accordance with the applicable laws in the Kingdom of Saudi Arabia and the best global practices in e-commerce and luxury jewelry. By using the store, you explicitly agree to the terms outlined in this policy.

Information Collection and Use

At "Hanaya," we ensure to collect only the necessary information to enhance your experience, complete your orders, and provide our services. This includes information you provide directly or that is automatically collected when using the store.

Personal Information

Includes full name, phone number, email address, shipping and billing addresses, and any other information entered when creating an account or completing a purchase. Payment data (such as credit or bank cards) is processed exclusively through secure and certified electronic payment gateways and is not stored on our servers.

Transaction-Related Information

We collect information related to your orders, such as order details, purchase history, warranty or return requests, and any correspondence or communication with our customer service team.

Technical Information

When browsing the store, some technical information may be automatically collected, such as IP address, browser type, operating system, pages visited, and browsing duration, through cookies and similar technologies.
We use this information for legitimate operational, commercial, and legal purposes, including order processing, customer service, improving your experience, marketing communications (with your consent), and legal and security compliance, especially for high-value transactions.

Cookies

"Hanaya" store uses cookies to enhance browsing experience, analyze store usage, and remember user preferences. You can control cookie settings through your browser but disabling them may affect some store functions.

Information Sharing and Protection

"Hanaya" does not sell, rent, or trade your personal data. However, some data may be shared with trusted third parties when operationally necessary, such as shipping companies, payment gateway providers, and technical service providers, only to the extent required to deliver the service. Data may also be disclosed if required by law or in response to a legal request from a competent authority. In case of merger or acquisition, data may be transferred as part of the process, with adherence to the same level of protection stated in this policy.

"Hanaya" applies advanced technical and organizational security measures to protect data, including secure servers, internal access controls, and encryption. Due to the high value of our products, some transactions may undergo additional verification to reduce fraud. Despite our best efforts, absolute security of any electronic system cannot be guaranteed.

Data Security and Breach Notification under PDPL

"Hanaya" places utmost importance on protecting your personal data and applies strict governance standards to ensure data processing is limited to its specified purposes. In the event of any security breach or personal data leak that may harm data or user privacy, we commit to the following:

Immediate Notification

Commitment to notify the competent authority (SDAIA/National Data Management Office) within the legally specified timeframe (72 hours) from the time we become aware of a breach that may cause significant harm.

User Notification

If the breach poses a risk to your rights or data, we will promptly inform you via email or official channels, explaining the nature of the breach, affected data, actions taken to mitigate its effects, and recommendations to protect your accounts.

Data Governance

All data processing operations at "Hanaya" are subject to periodic audits to ensure compliance with the Saudi Personal Data Protection Law, with designated data protection officers to ensure the highest technical and organizational security standards.

Data Retention and User Rights

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, whether operational, contractual, or legal. After the purpose ends, data is securely deleted or anonymized unless longer retention is legally required.

You have the right, under applicable laws, to request access to your personal data, correct or update it, or request its deletion. You may also unsubscribe from marketing communications at any time.

General Provisions

"Hanaya" store does not target collecting personal data from individuals under 18 years old. If we discover data belonging to a minor, we will delete it immediately.

If you access our store from outside the Kingdom of Saudi Arabia, you agree that your data may be processed or transferred within the Kingdom or other countries where "Hanaya" or our service providers operate, with our commitment to applying appropriate protection standards.
Correspondence with customer service may be recorded or saved for documentation and quality improvement purposes.