Privacy policy

Privacy Policy for Aroma360.sa

 

Effective Date

1st June 2025

1. Data Controller

The data controller for the Site is:

CNNB Arabia for Trading LLC/CR Number: 1010913834
Al Takhasosi - Olaya District - Postal Code 12333
Riyadh, Kingdom of Saudi Arabia
Email: care@aroma360.sa
Whatsapp Message: +971 588 402 413 

 

2. Applicable Law

This Privacy Policy complies with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia, issued by Royal Decree No. M/19 (2021) and its implementing regulations.

 

3. Data We Collect

We may collect the following categories of personal data:
- Identity Data: Name, email address, phone number, delivery address
- Transaction Data: Purchase history, payment details (excluding full card numbers)
- Technical Data: IP address, browser type, device information
- Usage Data: Pages visited, time spent, interaction with our emails or ads
- Marketing Data: Preferences for receiving marketing communications

We do not intentionally collect sensitive personal data (e.g. health, religion, biometric data).

 

4. How We Collect Your Data

We collect data:
- Directly from you when you place an order, subscribe to our marketing, or contact us
- Automatically via cookies and similar technologies
- From third-party platforms (e.g., Klaviyo for email, Attentive for SMS)

 

5. Use of Personal Data

We use your data to:
- Process and deliver orders
- Provide customer service and respond to inquiries
- Send order confirmations and transactional emails
- Send abandoned cart reminders via email and SMS (with prior consent)
- Improve the Site, services, and user experience
- Send marketing messages with your consent
- Comply with legal obligations

 

6. Marketing & Cookies

We use cookies and tracking pixels to:
- Understand user behavior on our Site
- Send personalized marketing emails or SMS with your opt-in

You can opt-out of email marketing by clicking "unsubscribe" and of SMS by replying "STOP" to any message.

 

7. Data Sharing

We may share your data with:
- Third-party logistics providers and payment processors
- Marketing service providers (e.g., Klaviyo, Attentive)
- KSA government authorities if required by law
- No personal data is sold or shared for unrelated third-party purposes

 

8. International Data Transfers

Where personal data is transferred outside the KSA (e.g., to the US), we ensure adequate safeguards such as contractual clauses with third-party processors.

 

9. Data Retention

We retain your data only for as long as necessary to:
- Fulfill the purpose it was collected for
- Comply with legal and accounting requirements

 

10. Your Rights

Under KSA PDPL, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Withdraw consent at any time
- Object to processing under certain conditions

You may exercise these rights by contacting care@aroma360.sa.

 

11. Security

We implement appropriate technical and organizational measures to secure your data from unauthorized access, alteration, or disclosure

 

12. Children’s Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect data from children without parental consent.

 

13. Contact

If you have questions about this policy or wish to exercise your rights, contact us at:
Email: care@aroma360.sa
Whatsapp Message: +971 588 402 413 
Mailing Address: CNNB Arabia for Trading LLC/CR Number: 1010913834, Al Takhasosi - Olaya District - Postal Code 12333, Riyadh, KSA

 

14. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the 'Effective Date' indicated above.