WaffarX commitment to Privacy

Last Updated: October 4, 2024

WaffarX is committed to protecting your personal information and ensuring your privacy is respected. This Privacy Policy explains how WaffarX collects, uses, shares, and protects your personal data through our websites, mobile applications, and other services (collectively, the "WaffarX Services"). By using WaffarX Services, you agree to the practices outlined in this Privacy Policy.

Controller of Personal Information

The entity responsible for collecting and processing your personal information is:

WaffarX Technologies LLC

8479 Al Mashaf unit 3713, Riyadh, Saudi Arabia

For inquiries related to data protection, please contact our Data Protection Officer (DPO) at: [email protected]

Alternatively, our DPO can be reached at: [email protected]

WaffarX Commitment to Privacy

• WaffarX is committed to protecting the privacy of its Members regarding their personal information.
• Rest assured that we do not sell your Personally Identifiable Information to third parties.
• This Privacy Policy describes how WaffarX collects, uses, shares, and protects your personal information and other shopping information.
• It also describes the legal basis for processing your data, your rights under the Saudi Personal Data Protection Law (PDPL), and how you can access and update this information.

Information Collection

- WaffarX collects and uses information to track your purchases, register earned Points amounts, and process Cash-Out transactions. This information is also used to improve and personalize our services.

- The types of information you provide may include Personal Information. “Personal Information” means information or data that can be used to identify you (whether alone or in combination).

- Members will be required to provide their full names and mailing addresses for all payment methods in order for WaffarX to provide them with their payment. Other Personal Information you may provide to us includes:

• Payment information (such as payment account name and payment account number)
• The nature of the product or service purchased
• How you connect to our services, such as your IP address, unique device identifiers, device or session IDs, and information regarding the network and connected hardware (e.g., computer or mobile device)
• Browsing, shopping, and purchase history
• Your geolocation
• Click-stream data (the page-by-page paths you take as you browse through our services)

Use of Information

WaffarX may use the collected information in different ways:

To manage your account: The Personal Information that you provide us may be used to (i) process your registration, including verifying whether your email address is active and valid and enrolling you into our Points program; (ii) monitor your purchase transactions; (iii) track your shopping, deliver your Cash-Out, and identify opportunities for Points and/or offers; (iv) send you technical notices, updates, security alerts, and administrative messages; (v) provide you member services regarding your account and reply to your questions, comments, and requests; and (vi) assess risk and prevent fraud.

Improve our services: We may process information through analyzing and monitoring usage and trends, performing statistical analyses to improve our services, programs, website, and marketing efforts, and enhancing the products and services of our affiliates. We may also use this information to provide you with more relevant offers based on your interests.

Use of Cookies

- Cookies are small text files stored on your browser and provide us with the ability to track, store, and collect information from our website.

- Like most websites, WaffarX and our partners use "cookies" to collect information, analyze trends, administer the website, track users’ movements around the website, and gather demographic information about our user base as a whole.

Saudi Personal Data Protection Law – Legal Basis for Data Processing 

- The Saudi Personal Data Protection Law (PDPL) requires us to have a lawful basis for processing your personal data. We rely on the following legal grounds:

• Consent: Where you provide your explicit consent for specific purposes, such as receiving marketing communications or sharing certain information.
• Contractual Necessity: To process cashback requests, complete financial transactions, and manage your membership in the WaffarX program.
• Legitimate Interests: To improve our services, prevent fraud, and enhance security, as long as these interests are not overridden by your fundamental rights and freedoms.
• Legal Obligations: To comply with legal and regulatory requirements, such as tax obligations, or to respond to court orders and other lawful processes.

Data Transfers 

- WaffarX may transfer your personal data to other countries, including outside of Saudi Arabia, as part of our service delivery. When we transfer your data, we ensure that it is handled securely and in accordance with this privacy policy. We comply with legal requirements for such transfers, using safeguards such as standard contractual clauses approved by regulatory authorities in Saudi Arabia.

User Rights (Expanded Section)

Under the Saudi Personal Data Protection Law (PDPL), you have the right to:

• Access your personal information that we process.
• Request Correction of your information if it is inaccurate or incomplete.
• Request Deletion of your data when it is no longer necessary for the purposes for which it was collected.
• Object to the Processing of your data under certain circumstances.
• Request Restriction of your personal data processing in specific cases.
• Exercise your rights by contacting [email protected] , and we will respond to your requests in accordance with the legal timeframe provided by PDPL.

Data Retention 

- We retain your personal data for as long as your account is active or as long as necessary to fulfill the purposes for which it was collected. This includes compliance with legal obligations, resolving disputes, and enforcing agreements. For example, we may keep records of transactions and payments for audit and tax compliance purposes. Once no longer needed, we securely delete your data in line with applicable regulations.

Data Protection Officer (DPO) 

- In compliance with PDPL, we have appointed a Data Protection Officer (DPO) who oversees our data protection practices and ensures compliance with privacy regulations. You can contact our DPO at [email protected] for any concerns related to your data protection rights.

Last Updated: October 4, 2024