Privacy Policy – Bazar Alward

Bazar Alward respects your privacy and is committed to protecting your Personal Data in accordance with the applicable laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (“PDPL”) and its Implementing Regulations.

This Privacy Policy explains how Bazar Alward collects, uses, stores, discloses, and protects Personal Data when you visit or use the Bazar Alward Platform, create an account, place an order, communicate with us, or otherwise use our services.

1. Who We Are

The Bazar Alward Platform is owned and operated by:

Bazar Alward Marketing Company Commercial Registration: 7040701679 Kingdom of Saudi Arabia Website: bazaralward.com Email: [email protected]

For the Personal Data processing activities for which Bazar Alward determines the purposes and means of processing, Bazar Alward Marketing Company acts as the Data Controller in accordance with applicable law.

2. Personal Data We Collect

Depending on how you use the Platform, we may collect Personal Data including:

• Full name.
• Email address.
• Mobile number.
• Delivery and billing address.
• Account and login information.
• Order and purchase information.
• Products purchased or returned.
• Customer service enquiries and communications.
• Return, exchange, refund, and complaint information.
• Payment transaction information, such as payment status, transaction reference, and payment method.
• Information you provide when completing forms, submitting reviews, participating in promotions, or communicating with us.
• Device and technical information, such as IP address, browser type, device type, operating system, and certain identifiers.
• Information regarding your use of the Platform, such as pages visited, interactions, preferences, and shopping cart activity.
• Cookie and similar technology information.
• Any other Personal Data that you voluntarily provide to us or that is reasonably necessary to provide our services.

We seek to collect only Personal Data that is appropriate and necessary for the relevant purposes.

Sensitive payment card information is generally processed directly by approved payment service providers. Bazar Alward does not directly store complete sensitive payment card information unless such processing is carried out through approved systems and in accordance with applicable legal and security requirements.

3. How We Collect Personal Data

We may collect Personal Data:

• Directly from you when you create an account, place an order, complete a form, contact Customer Service, submit a return or exchange request, participate in a promotion, or otherwise interact with the Platform.
• Automatically when you use the Platform through cookies and similar technologies.
• From Sellers where necessary to fulfil or manage an order or resolve a Customer request.
• From payment service providers in connection with payment transactions and refunds.
• From shipping and logistics providers in connection with order delivery and shipment status.
• From service providers that assist us in operating the Platform.
• From other lawful sources where permitted by applicable law.

Where required by law, we will provide the relevant information regarding the collection of Personal Data at or before the time of collection.

4. Why We Use Personal Data

We may process Personal Data for purposes including:

• Creating and managing Customer accounts.
• Processing and managing orders.
• Facilitating transactions between Customers and Sellers.
• Processing and verifying payments.
• Facilitating shipping and delivery.
• Processing returns, exchanges, cancellations, and refunds.
• Providing Customer service.
• Managing complaints and order-related disputes.
• Communicating with Customers regarding their accounts, orders, deliveries, returns, or transactions.
• Verifying transactions and preventing fraud, misuse, and unlawful activity.
• Protecting the security and integrity of the Platform.
• Improving the Platform, services, functionality, and Customer experience.
• Understanding how Customers use the Platform.
• Maintaining business, transaction, accounting, and compliance records.
• Complying with legal, regulatory, tax, accounting, and other applicable obligations.
• Establishing, exercising, or defending legal claims.
• Sending marketing communications where permitted by applicable law and where the required legal basis or consent has been obtained.
• Managing promotions, surveys, or other Platform features where applicable.

We will not process Personal Data in a manner incompatible with the purpose for which it was collected unless permitted by applicable law.

5. Legal Basis for Processing

Bazar Alward processes Personal Data only where an appropriate legal basis exists under applicable law.

Depending on the processing activity, this may include:

• Your consent, where consent is required.
• Processing necessary to provide a service you have requested or to take steps in connection with a transaction or contractual relationship.
• Compliance with a legal or regulatory obligation.
• Protecting a legitimate interest or achieving another lawful purpose permitted under applicable law, subject to the applicable requirements and limitations.
• Other legal bases permitted under the Personal Data Protection Law and its Implementing Regulations.

Where processing is based on consent, you may withdraw that consent in accordance with applicable law. Withdrawal of consent does not affect processing that was lawfully carried out before the withdrawal.

6. Personal Data Required to Provide Our Services

Certain Personal Data is necessary for us to provide specific services.

For example, we may require your name, mobile number, delivery address, and relevant order information to process and deliver an order.

If required information is not provided, we may be unable to create an account, process an order, arrange delivery, process a return or refund, or provide another requested service.

Where information is optional, this may be indicated at the point of collection where appropriate.

7. Sharing Personal Data

Because Bazar Alward operates as a multi-vendor marketplace, certain Personal Data must be shared with other parties in order to provide our services and fulfil orders.

We may disclose Personal Data, where necessary and permitted by law, to:

Sellers

Relevant Customer and order information may be provided to the Seller responsible for fulfilling an order.

Sellers are required to use Customer Personal Data only for purposes permitted under their arrangements with Bazar Alward and applicable law.

Shipping and Logistics Providers

We may provide information such as the Customer's name, mobile number, delivery address, and shipment details to shipping and logistics providers to facilitate delivery, collection, returns, and shipment tracking.

Payment Service Providers

Payment and transaction information may be processed by our approved payment service providers, banks, card networks, and other parties involved in processing payments and refunds.

Technology and Service Providers

We may use service providers that support hosting, Platform infrastructure, communications, analytics, security, Customer service, or other operational functions.

Professional Advisers

Where necessary, Personal Data may be disclosed to professional advisers such as legal, accounting, audit, or compliance advisers.

Government and Regulatory Authorities

Personal Data may be disclosed where required or permitted by applicable law, regulation, court order, or a lawful request from a competent authority.

We do not sell Customers' Personal Data to third parties.

8. Sellers and Customer Data

When a Customer purchases a product from an independent Seller through Bazar Alward, certain Personal Data may be provided to that Seller where necessary to fulfil the order, communicate regarding the transaction, handle returns or complaints, or meet applicable legal obligations.

Sellers are not permitted under Bazar Alward's Seller Agreement to use Personal Data obtained through the Platform for unrelated purposes, including independent marketing, building marketing lists, selling Customer information, or sharing it with unauthorized parties, unless there is a separate lawful basis permitting such processing.

A Seller may have independent obligations under applicable data protection laws depending on the nature of its processing activities.

9. International Transfers and Processing

Some service providers or technology systems used in connection with the Platform may process or store Personal Data outside the Kingdom of Saudi Arabia.

Where Personal Data is transferred, disclosed, or processed outside the Kingdom, Bazar Alward will take the measures required under the Personal Data Protection Law, its Implementing Regulations, and applicable regulations governing the transfer of Personal Data outside the Kingdom.

Where applicable, information regarding such transfers will be provided in accordance with legal requirements.

10. Data Retention

Bazar Alward retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected or to satisfy applicable legal, regulatory, accounting, tax, dispute-resolution, or other legitimate retention requirements.

Retention periods may therefore vary depending on the type of Personal Data and the purpose for which it is processed.

When Personal Data is no longer required and there is no lawful reason to retain it, Bazar Alward will take appropriate measures to securely destroy or anonymize the data in accordance with applicable requirements.

Certain information may be retained where required by law or where necessary for establishing, exercising, or defending legal claims.

11. How We Protect Personal Data

Bazar Alward takes appropriate organizational, technical, and administrative measures designed to protect Personal Data against unauthorized access, disclosure, alteration, loss, destruction, or misuse.

These measures may include access controls, encryption where appropriate, secure systems, authentication measures, monitoring, and restrictions on access to Personal Data.

However, no electronic system or method of transmitting information over the internet can be guaranteed to be completely secure.

12. Personal Data Breaches

If a Personal Data breach occurs, Bazar Alward will assess the incident and take the measures required under applicable law.

Where legally required, Bazar Alward will notify the competent authority and/or affected Data Subjects in accordance with applicable requirements.

13. Cookies and Similar Technologies

Bazar Alward may use cookies and similar technologies to operate and improve the Platform.

Cookies may be used to:

• Maintain Platform functionality.
• Remember items in the shopping cart.
• Remember User preferences.
• Maintain login sessions.
• Understand how the Platform is used.
• Improve performance and functionality.
• Measure the effectiveness of services or marketing activities where applicable.
• Support security and fraud prevention.

Some cookies may be necessary for the Platform to operate, while others may be optional.

Where consent is required for particular cookies or similar technologies, Bazar Alward will seek the required consent.

Users may also be able to manage certain cookie preferences through their browser or any cookie management tools made available by the Platform.

Disabling certain cookies may affect the functionality of some parts of the Platform.

14. Marketing Communications

Bazar Alward may send marketing or promotional communications where permitted under applicable law and where the required consent or other lawful basis exists.

Customers may opt out of marketing communications through the unsubscribe mechanism provided in the relevant communication or by contacting Bazar Alward.

Opting out of marketing communications does not prevent Bazar Alward from sending transactional or service communications necessary for orders, accounts, payments, security, returns, or other requested services.

15. Your Rights

Subject to the Personal Data Protection Law and its Implementing Regulations, you may have rights relating to your Personal Data, including:

• The right to be informed about the processing of your Personal Data.
• The right to access your Personal Data.
• The right to obtain a copy of your Personal Data in accordance with applicable requirements.
• The right to request correction, completion, or updating of inaccurate or incomplete Personal Data.
• The right to request destruction of Personal Data where the applicable legal conditions are met.
• The right to withdraw consent where processing is based on consent, subject to applicable law.
• Any other rights provided under applicable data protection laws.

Certain rights may be subject to statutory exceptions or limitations.

16. How to Exercise Your Rights

To exercise your Personal Data rights or submit a privacy-related enquiry, you may contact Bazar Alward at:

Email: [email protected]

We may request information reasonably necessary to verify your identity before processing a request in order to protect Personal Data from unauthorized disclosure or alteration.

Requests will be handled in accordance with the procedures and periods required by applicable law.

17. Children's Personal Data

The Platform is intended primarily for individuals capable of entering into transactions in accordance with applicable law.

Where Personal Data relating to a minor or a person lacking full legal capacity is processed, Bazar Alward will take the measures required under applicable law, including obtaining authorization from the legal guardian where required.

18. Third-Party Links

The Platform may contain links to websites or services operated by third parties.

Those parties may have their own privacy policies and practices. Bazar Alward does not control the independent privacy practices of third-party websites or services.

Customers should review the privacy policies of third-party services before providing Personal Data directly to them.

19. Changes to this Privacy Policy

Bazar Alward may update this Privacy Policy from time to time to reflect changes in its services, technology, business practices, or applicable legal and regulatory requirements.

The updated Privacy Policy will be published on the Platform together with the date of the latest update.

Where required by applicable law, Customers will be notified of material changes or asked to provide consent before new processing activities are carried out.

20. Contact Us

For questions, requests, or complaints relating to this Privacy Policy or the processing of Personal Data, please contact:

Bazar Alward Marketing Company Commercial Registration: 7040701679 Kingdom of Saudi Arabia Website: bazaralward.com Email: [email protected]

Platform Owner and Operator: Bazar Alward Marketing Company Commercial Registration: 7040701679 Website: bazaralward.com Email: [email protected] Last Updated: 15/09/2026 Effective Date: 15/09/2026