Privacy policy

This policy explains how Dawaak Commercial Company (“Dawaak”, “we”) collects, uses and protects your personal data when you use dawaak.com, in line with the Saudi Personal Data Protection Law (PDPL) and its regulations.

1. Who is responsible for your data

Data controller: Dawaak Commercial Company, Commercial Registration 1010797212, national address RHTA6443, Al Taawun, Riyadh 12475. For anything about your data: info@dawaak.com.

2. What we collect

• What you enter in the quote or enquiry form: name, business name and type, city, email, mobile number if given, Commercial Registration number if given, quantities, preferred delivery date, your message, the request type, your consent to this policy, and whether you agree to receive offers by email. We also add a reference number and the page language.
• Emails you send us: if you write to info@dawaak.com we receive your name, email address, message and any attachments, and handle them the same way.
• Visit source attached to your request: the first page you landed on, the page you sent the request from, the referring site, and campaign identifiers in the link if present (such as utm_source, gclid or fbclid). We use them to know which channel brought you to us.
• Technical data: the server records general operational data such as IP address, browser type and request time, for security and abuse prevention. The copy of your request in the site dashboard also stores your IP address and browser type at the time of sending, for the same purpose. To limit repeated sending, we keep a hashed form of your IP address for 15 minutes only, after which it is deleted automatically.
• Cookies and measurement tools: we use Google Analytics to understand visits and the most used pages, and it runs only after you agree in the cookie banner. We do not currently use advertising tools. See section 6.

We do not ask for health information or prescriptions through the site; please do not enter them in the form.

3. Why we use it

• To answer your request or question, prepare a quote and contact you about it.
• To send offers and updates by email, only if you opt in; you can unsubscribe at any time by replying to any of our emails or writing to info@dawaak.com.
• To protect the site and form from spam and abuse.
• To understand and improve how the site is used, after you accept analytics cookies.

Legal basis: answering your request and preparing a quote, at your request and with your consent when you send the form; marketing emails, only with your separate optional consent; site security, on our legitimate interest; analytics and advertising, only with your cookie consent.

4. Who we share it with

We do not sell personal data. We share it only with service providers working for us, and only as needed:

• Our hosting and email provider (Hostinger), which stores the site, its database and copies of requests, and sends its emails.
• Our site security plugin (Wordfence), which screens visits to block attacks and may send suspicious IP addresses to its servers for checking.
• Our backup service, which keeps copies of the site and its database with a cloud storage provider under restricted access.
• Google (Google Analytics for analytics, and advertising tools once enabled), only after your consent.
• Authorities, when the law requires it.

Data may be stored and processed outside Saudi Arabia (for example in the European Union and the United States) by our hosting provider, security plugin and backup service, and by analytics and advertising tools once enabled, limited to what is needed and under the contractual safeguards required by the Saudi regulation on transferring personal data outside the Kingdom.

5. How long we keep it

Quote requests and related correspondence are kept for up to three years after the last contact, unless another law requires longer, and are then deleted or anonymised. If you unsubscribe, we stop sending offers to you straight away. Server logs are deleted automatically on the hosting provider’s schedule, and backups are replaced automatically by newer ones.

6. Cookies

• Necessary: needed for the site to work and stay secure; no consent required.
• Analytics: help us understand visits and the most used pages. Only with your consent.
• Advertising: measure ad campaigns once enabled. Only with your consent.

You can change your choice at any time from the “Cookie settings” link at the bottom of the site. Only in the current browser tab, until you close it, we keep the visit source in your browser so it can be attached to your request if you send one. We also keep the numbers of your last 20 requests in your browser’s local storage, only so the same request is not counted twice; you can remove them by clearing this site’s data in your browser.

7. Your rights

Under the PDPL you have the right to:

• Be informed about how your data is collected and processed.
• Access your data and receive a copy.
• Ask for your data to be corrected or completed.
• Ask for your data to be destroyed when it is no longer needed.
• Withdraw your consent at any time, without affecting processing done before.

To use any of these rights, email info@dawaak.com; we may ask you to confirm your identity first, and we reply within 30 days. You may also complain to the Saudi Data and AI Authority (SDAIA) via sdaia.gov.sa.

8. Security

We use an encrypted connection (HTTPS), limit access to requests to the staff who need it, and protect the form against automated messages.

9. Children

The site and form are meant for adults and businesses; we do not knowingly collect data from anyone under 18.

10. Changes

We may update this policy when needed; the last-updated date is shown at the top of the page.