Privacy policy

1. Who is responsible

Ghaith Al Khair is responsible for your personal data. Our details are at the end of this page, and you can contact us there about anything in this policy.

2. What we collect

• Your mobile number, and your name and email if you give them.
• What you order: the products, places, mosques and dates, the names you give for orders performed on someone’s behalf, and any message or prayer.
• For gifts: the recipient’s name and mobile number.
• For payments: the card type and its last four digits. Your full card details go to our payment provider, not to us.
• Technical data: your device and browser type, and what you choose on the site, such as the language.

3. Why we use it

• To take your order, distribute it, and send you its invoice, updates, photos and videos.
• To send the gift message you asked for.
• To sign you in and keep your account safe.
• To answer your questions and complaints.
• To meet our legal duties, such as keeping invoices for tax.
• To send you offers, only if you agree. You can stop them at any time.

4. Our legal basis

We use your data to carry out the orders you place with us, to meet our legal duties and, for offers, with your consent.

5. Who we share it with

We share only what each party needs:

• our payment provider, to take your payment
• WhatsApp and text-message providers, to send codes, updates and gift messages
• our distribution teams in Makkah, who see only what they need to distribute
• the authorities, when the law requires it

We do not sell your data.

6. Photos and videos of the distribution

Distribution photos and videos are taken in public places and shared with you only. We photograph and film the products and the place, and avoid showing faces. We never publish a customer’s distribution photos or videos without their permission. Videos are hosted on YouTube as unlisted videos, so only people with the link can watch them.

7. How long we keep it

We keep your data while your account is open, and afterwards for as long as the law requires, for example for invoices. Then we delete it or make it anonymous.

8. How we protect it

We protect your data with technical and organisational measures, and limit who can see it. Your data leaves Saudi Arabia only as the PDPL allows.

9. Your rights

Under the PDPL you can:

• be told how we use your data
• get a copy of your data
• correct it
• ask us to delete it, unless the law requires us to keep it
• withdraw your consent to offers at any time

To use these rights, contact us by WhatsApp or email. You can also complain to the Saudi Data and AI Authority (SDAIA).

10. Cookies and storage on your device

The site saves your cart, your language and your choices in your browser, so they are there when you come back. We don’t use them to follow you on other sites.

11. Changes to this policy

We may update this policy. The date at the top shows the latest version, and we tell you about important changes.