Privacy policy

Privacy Policy

Last Updated: October 17, 2026

1. About This Privacy Policy

Dar Alharer Alabyad (“Dar Alharer Alabyad”, “the Store”, “we”, “us”, or “our”) is operated by Tarfi Collective Company (شركة تارفي كولكتيف), Commercial Registration No. 7021588400, Kingdom of Saudi Arabia.

Tarfi Collective Company is the entity responsible for determining the purposes and means of processing personal data collected through the Dar Alharer Alabyad website, online store, appointments, customer service channels, and related services.

Our online store is powered by Shopify, which provides the e-commerce technology used to deliver certain aspects of our services.

This Privacy Policy explains how we collect, use, store, disclose, transfer, protect, and destroy personal data when you visit our website, make a purchase, request an appointment, communicate with us, or otherwise use our services.

This Privacy Policy is intended to comply with the Personal Data Protection Law of the Kingdom of Saudi Arabia (“PDPL”), its Implementing Regulations, the Regulation on Personal Data Transfer Outside the Kingdom, and other applicable laws and regulations in the Kingdom of Saudi Arabia.

2. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

Contact and Identification Information

This may include:

  • Full name

  • Mobile phone number

  • Email address

  • Address

  • Billing address

  • Shipping address

Order and Transaction Information

This may include:

  • Products or designs viewed or ordered

  • Purchase history

  • Order details

  • Returns, exchanges, cancellations, and refunds

  • Payment method

  • Payment confirmation

  • Transaction records

Payment information may be processed directly by authorized payment service providers. We may receive payment confirmations and transaction information required to process and record your order.

Appointment and Tailoring Information

Where applicable, we may collect information required to provide design, tailoring, fitting, or appointment services, including:

  • Appointment date and time

  • Type of appointment or service

  • Dress or design preferences

  • Measurements and fitting information

  • Notes provided by you relating to your requested service

Account Information

If account functionality is available, this may include:

  • Account details

  • Login credentials

  • Preferences

  • Saved items

  • Wishlist information

Communications

We may collect information you provide when communicating with us through:

  • Website forms

  • Email

  • Telephone

  • WhatsApp

  • Social media

  • Customer service

  • Appointment requests

  • Other communication channels

Device and Technical Information

When you use our website, certain information may be collected automatically, including:

  • IP address

  • Browser type

  • Device information

  • Operating system

  • Device identifiers

  • Website activity

  • Pages viewed

  • Interaction with website features

  • Cookies and similar technologies

3. How We Collect Personal Data

We may collect personal data:

  • Directly from you when you place an order, request an appointment, contact us, create an account, subscribe to communications, or otherwise provide information to us.

  • Automatically when you use our website through cookies, analytics tools, server logs, and similar technologies.

  • From service providers that assist us with payments, website hosting, e-commerce, customer service, appointment management, delivery, analytics, or other business functions.

  • From third parties where permitted by applicable law.

We will not collect personal data in a manner that is misleading, deceptive, or inconsistent with applicable laws.

4. Mandatory and Optional Information

Certain information is required for us to provide requested services.

For example, your name, contact information, order details, delivery information, and required payment information may be necessary to process an order or complete a transaction.

If required information is not provided, we may be unable to process an order, deliver a product, confirm an appointment, or provide the requested service.

Other information, such as marketing preferences, reviews, optional profile information, or participation in promotional activities, may be optional.

5. Purposes and Legal Bases for Processing

We process personal data only for specific and legitimate purposes and based on an appropriate legal basis under applicable Saudi law.

Depending on the circumstances, the legal basis may include your consent, performance or preparation of a contract with you, compliance with legal obligations, or legitimate interests where permitted by applicable law and where such interests do not prejudice your rights and interests.

We may process personal data for the following purposes:

Providing Our Services

Including:

  • Processing orders

  • Processing payments

  • Managing appointments

  • Providing tailoring and fitting services

  • Delivering products

  • Processing returns and exchanges

  • Managing customer accounts

  • Responding to inquiries

  • Providing customer support

Communicating With You

We may contact you regarding:

  • Orders

  • Appointments

  • Payments

  • Deliveries

  • Customer service requests

  • Changes affecting our services

  • Other communications necessary for our relationship with you

Marketing and Advertising

Where permitted by applicable law and where any required consent has been obtained, we may use your contact details and certain information about your interactions with our services to send promotional communications through channels such as:

  • Email

  • SMS

  • WhatsApp

  • Digital advertising platforms

You may withdraw your consent to marketing communications at any time.

Improving Our Services

We may analyze website usage, customer preferences, and service performance to:

  • Improve our website

  • Improve our products and services

  • Understand customer preferences

  • Measure website performance

  • Improve the customer experience

Security and Fraud Prevention

We may process information to:

  • Protect our website and systems

  • Verify transactions

  • Detect or prevent fraud

  • Investigate suspicious activity

  • Protect customers and our business

Legal and Regulatory Compliance

We may process and retain information where necessary to comply with applicable Saudi laws, regulations, lawful government requests, court orders, accounting requirements, tax obligations, or to establish, exercise, or defend legal claims.

6. Cookies and Similar Technologies

Our website may use cookies, pixels, local storage, analytics tools, and similar technologies.

These technologies may be used to:

  • Operate the website

  • Remember preferences

  • Maintain shopping sessions

  • Measure website performance

  • Understand how customers use our website

  • Prevent fraud

  • Provide personalized functionality

  • Support advertising and marketing where permitted

Where consent is legally required for non-essential cookies or similar technologies, such technologies will be used in accordance with applicable consent requirements.

You may manage certain cookie preferences through your browser or any privacy controls made available on our website.

7. Disclosure of Personal Data

We may disclose personal data only where necessary and permitted under applicable law.

Recipients may include:

  • Shopify

  • Payment service providers

  • Banks and financial institutions involved in processing payments

  • Delivery and logistics providers

  • Technology and hosting service providers

  • Customer support providers

  • Appointment and booking service providers

  • Analytics providers

  • Marketing and advertising providers, where legally permitted

  • Professional advisers such as accountants, auditors, or legal advisers

  • Government, regulatory, judicial, or law enforcement authorities where disclosure is legally required

Service providers processing personal data on our behalf are expected to process such information only as necessary to provide their services and in accordance with applicable contractual and legal requirements.

We may also disclose information in connection with a lawful merger, acquisition, restructuring, financing, sale of assets, or similar business transaction, subject to applicable law.

8. Shopify

Our online store is powered by Shopify.

Shopify may collect and process certain information relating to your access to and use of our online store in order to provide its services to us and to operate and improve the Shopify platform.

Certain information submitted through our online store may therefore be processed by Shopify and its authorized service providers.

Shopify's own processing activities are also subject to its applicable privacy policies and terms.

9. Transfer of Personal Data Outside Saudi Arabia

Some of our technology and service providers, including international e-commerce, cloud, payment, analytics, communication, or technology providers, may process or store personal data outside the Kingdom of Saudi Arabia.

Where personal data is transferred or disclosed outside the Kingdom, we will take the measures required under the Saudi Personal Data Protection Law, its Implementing Regulations, and the Regulation on Personal Data Transfer Outside the Kingdom.

Where applicable, this may include assessing the purpose and necessity of the transfer, limiting transferred data to what is required, evaluating the level of protection available, and implementing legally recognized safeguards or transfer mechanisms.

We will not transfer personal data outside the Kingdom in a manner that violates applicable Saudi law.

10. Storage and Retention of Personal Data

Personal data may be stored using our internal systems or through authorized technology, cloud, e-commerce, payment, and service providers located inside or outside the Kingdom of Saudi Arabia, subject to applicable legal requirements.

We retain personal data only for as long as necessary to:

  • Fulfill the purposes for which it was collected

  • Provide our services

  • Maintain business and transaction records

  • Comply with applicable legal, accounting, tax, regulatory, and contractual requirements

  • Resolve disputes

  • Establish, exercise, or defend legal claims

Retention periods may differ depending on the type of information and the purpose for which it was collected.

When personal data is no longer required and there is no legal basis requiring its continued retention, it will be securely destroyed, deleted, or anonymized using appropriate methods designed to prevent its recovery or identification.

11. Security of Personal Data

We implement reasonable administrative, organizational, and technical measures designed to protect personal data against:

  • Unauthorized access

  • Unauthorized disclosure

  • Loss

  • Misuse

  • Alteration

  • Destruction

  • Damage

  • Personal data breaches

However, no electronic transmission or storage system can be guaranteed to be completely secure.

Customers are responsible for maintaining the confidentiality of their own account credentials and should not disclose passwords or authentication information to others.

12. Your Rights Under Saudi Law

Subject to the Personal Data Protection Law and its Implementing Regulations, you may have the following rights regarding your personal data:

Right to Be Informed

You have the right to know the legal basis and purpose for collecting and processing your personal data and how it is used.

Right of Access

You may request access to personal data held about you, subject to applicable legal limitations.

Right to Obtain Your Personal Data

You may request a copy of your personal data in a readable and clear format where applicable.

Right to Correction

You may request that inaccurate, incomplete, or outdated personal data be corrected, completed, or updated.

Right to Destruction

You may request the destruction of your personal data where the conditions specified under applicable law are satisfied.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time, unless there is another lawful basis or legal obligation that permits or requires continued processing.

Withdrawal of consent does not affect the lawfulness of processing performed before withdrawal.

To exercise any of these rights, you may contact us using the contact information stated below.

We may request information reasonably necessary to verify your identity before processing a request.

We will respond to valid requests within the time periods prescribed under applicable Saudi law.

13. Marketing Preferences

You may unsubscribe from promotional communications at any time by:

  • Using the unsubscribe mechanism provided in the communication, where available; or

  • Contacting us using the details provided below.

Even if you opt out of marketing communications, we may continue to send non-promotional messages necessary for orders, appointments, payments, deliveries, customer service, security, or other services requested by you.

14. Children's Personal Data

Our online services are not specifically directed toward children.

We do not knowingly collect personal data from children except where permitted by applicable law and, where required, with the involvement or authorization of a parent or legal guardian.

If you believe that a child has provided personal data to us improperly, please contact us so that we may review the matter and take appropriate action.

15. Third-Party Websites and Services

Our website may contain links to external websites, social media platforms, payment providers, or other third-party services.

Those third parties operate independently and may have their own privacy policies and practices.

We are not responsible for the privacy practices of third-party websites or services that are not under our control.

We recommend reviewing the applicable privacy policy before providing information to any third party.

16. Complaints

If you have a question, concern, objection, or complaint regarding our processing of your personal data, please contact us first using the information provided below.

We will review privacy-related complaints and take appropriate action in accordance with applicable law.

If you are not satisfied with our response, you may have the right to submit a complaint to the competent data protection authority in the Kingdom of Saudi Arabia, currently the Saudi Data & AI Authority (SDAIA), through the National Data Governance Platform or other channels designated by the competent authority.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes to our services

  • Changes to our business practices

  • Changes to technology

  • Changes to applicable laws or regulations

  • Regulatory requirements

When this policy is updated, the revised version will be published on our website and the “Last Updated” date will be updated accordingly.

Where required by law, we will provide additional notice regarding material changes.

18. Contact Us

For questions regarding this Privacy Policy, our privacy practices, or to exercise your rights relating to personal data, please contact:

Tarfi Collective Company (شركة تارفي كولكتيف)
Operator of Dar Alharer Alabyad

Commercial Registration: 7021588400
Address: Zaid bin Al-Khattab Street, Al-Naeem District, Jeddah
Postal Code: 23622
Short Address: JENA4091
Kingdom of Saudi Arabia

Phone / WhatsApp: +966 53 450 7696
Email: info@harerabyad.com
Website: harerabyad.com