Privacy policy

Who is responsible

Sanabel Al-Andalus Development and Investment Trading Company (commercial registration 1010934723) operates shop.florya.co and is responsible for the personal data you give the shop, under the Saudi Personal Data Protection Law (PDPL).

What we collect

• Your name, email address and phone number.
• Your delivery address, or the clinic where you collect your order.
• What you ordered, the amounts, and how you chose to pay.
• If you create an account: your email, name, phone number and a password, which our account provider stores in a form that no one, including us, can read.
• Messages you write to the shop assistant chat.

We do not collect your national ID number for shop orders.

Card payments

Card payments are made on the secure page of our payment provider, Moyasar. Your card number never reaches us; we only keep the payment reference and whether the payment succeeded.

Why we use it

• To prepare, deliver and support your order, and to contact you about it.
• To handle returns, refunds and questions.
• To keep the records that tax and commercial laws require.
• To keep the shop secure and prevent fraud.

We do not send you marketing messages from a shop order unless you agree to receive them.

Who we share it with

We never sell your personal data. We share it only as needed to run the shop:

• the delivery company, which receives your name, phone number and address;
• Moyasar, when you pay by card;
• the providers that host our website and database;
• the AI provider that writes the shop assistant’s replies, which receives the messages you send in the chat;
• authorities, when the law requires it.

Where your data is stored

Our database is hosted by Supabase on servers in India, and the website runs on Vercel’s global network. This means your data is stored and processed outside Saudi Arabia. We use providers that protect it with encryption and access controls, and we transfer it only as the PDPL allows.

Shop assistant conversations are kept only while the conversation is open and are not saved to our database.

How long we keep it

We keep order records for as long as tax and commercial laws require. Account details are kept until you ask us to delete your account.

Cookies

The shop uses only the cookies it needs to work, such as keeping you signed in and remembering your language. Your cart is kept in your browser. We do not use advertising or tracking cookies.

Your rights

Under the PDPL you can ask to see the personal data we hold about you, to correct it, to delete it when we no longer need to keep it, and to withdraw your consent where we rely on it.

To make a request, contact us at info@florya.co or on WhatsApp (⁦+966 53 319 5221⁩). We reply within 30 days, free of charge. If you are not satisfied with our answer, you can complain to the Saudi Data and AI Authority (SDAIA).

Changes to this policy

If we change this policy we will update this page and the date at the top.