PRIVACY POLICY
At HAF TRADING, we are committed to protecting the privacy and confidentiality of personal and business data in accordance with the Saudi Personal Data Protection Law (PDPL) and applicable regulations in the Kingdom of Saudi Arabia.
This Privacy Policy explains how we collect, use, store, and protect information when you use our website or services.
Information We Collect
Personal Information (B2C)
- Full name
- Mobile number
- Email address
- Delivery / national address
- Order, invoice, and transaction details
- Device, browser, and IP information
Business Information (B2B
- Company name
- Commercial Registration (CR) number
- VAT number
- Business address
- Authorized contact person details
- Business email and phone number
- Purchase and invoicing history
We do not collect or store Mada, credit card, or debit card details.
All payments are securely processed through licensed payment service providers.
Purpose of Data Collection
We collect and use data for:
- Order processing and fulfillment
- Managing B2C and B2B accounts
- Invoicing and ZATCA tax compliance
- Delivery and logistics
- Customer support and communication
- Fraud prevention and security
- Legal and regulatory compliance
- Service improvement
Legal Basis (PDPL)
Data is processed based on:
- Customer consent
- Contractual necessity
- Legal obligations
- Legitimate business interests
Data Sharing
Data may be shared only with:
- Licensed delivery and logistics partners
- Approved payment service providers (Mada, STC Pay, Apple Pay, Tabby, Tamara, etc.)
- Government authorities when required by law
We do not sell or rent customer or business data.
Data Security & Storage
We apply appropriate technical and organizational measures to protect data.
Data may be stored inside or outside Saudi Arabia in compliance with Saudi regulations.
Cookies
We use cookies to improve website functionality, performance, and user experience.
Your Rights (PDPL)
You have the right to:
- Access your data
- Request correction or deletion (subject to legal requirements)
- Withdraw consent for marketing
Data Retention
Data is retained only as long as necessary to meet legal, tax, and business requirements.
Policy Updates
This Privacy Policy may be updated periodically. Updates will be posted on this page.
