Privacy

Who we are

Tawreedo (“we”) runs tawreedo.com, the provider portal and the Tawreedo service, which connects online stores with the suppliers and 3PL companies that fulfil their orders. For anything about this notice or your personal data, write to [email protected].

What we collect

The waiting list: your name, email address and website, whether you are a store, a supplier or a 3PL, the language you used, and the version of the consent text you agreed to. Your network address is never stored: only a salted hash of it is kept, for 24 hours, to limit repeated attempts.

Provider accounts: the business’s name and profile, and for each member their name, email address, role, a protected (hashed) password and two-factor sign-in settings, with a record of sign-ins and of actions taken in the portal. When an owner accepts the provider terms, we record the version, the person and the time.

Orders: when a store sends part of an order to a provider, the part carries the products and quantities and the delivery details the provider needs: the shopper’s name, phone number and delivery address.

Connections and statements: which stores and providers are connected and on what terms, the status of each part, and what each store owes each supplier.

Why we use it

To run the service that stores and providers have agreed to: to pass orders, stock and statuses between them, to keep their records, and to send the emails the service needs, such as invitations, order parts and statements.

With your consent, to tell people on the waiting list about Tawreedo’s launch, and nothing else. You can withdraw this consent at any time.

To keep the service secure, to prevent misuse, and to keep the records the law requires.

We do not sell personal data, and we do not use it for advertising.

Shoppers’ details

A store that uses Tawreedo decides which orders it sends and is responsible for its shoppers’ data. Tawreedo handles that data on the store’s behalf.

A provider sees a shopper’s name, phone number and address only on the parts it fulfils, and only for as long as the store allows: while the part is open, or 14 or 30 days after it closes (14 days unless the store chooses otherwise).

When a store erases a shopper, the erasure reaches Tawreedo whatever the state of the store’s subscription, and an erased person is never restored. A provider that receives orders in its own systems must erase its copy too, as the provider terms require.

Who we share it with

The stores and providers connected to each other, each seeing only what its connection needs.

matgrk, through which stores subscribe to Tawreedo: it sends us each store’s details and subscription state and bills the store, and we tell it what it needs to bill and support the store.

The companies that run parts of the service for us, bound to use the data only for that: our hosting provider, Cloudflare (network protection and the human check on our forms) and Resend (email delivery).

Authorities, when the law requires it.

Where it is processed

Some of these companies process data outside the Kingdom of Saudi Arabia; email delivery, for example, runs in the European Union. We transfer personal data only as the Personal Data Protection Law allows, with the safeguards it requires.

How long we keep it

Waiting list details: until you ask us to delete them. The hash of your network address: 24 hours.

Provider accounts: for as long as the account is open.

A shopper’s details on a part: shown to the provider only for the period the store sets, as above.

When a store’s subscription ends, its data is kept read-only, so that the store finds the same history if it comes back. The store can ask us to delete it.

Records the law requires us to keep: for as long as it requires.

Your rights

Under the Personal Data Protection Law you can ask to know what we hold about you, to receive a copy of it, to have it corrected or completed, and to have it deleted once we no longer need it; and you can withdraw any consent you gave.

Write to [email protected] from the email address concerned, and we answer within 30 days. If you are a store’s shopper, you can also ask the store, which can act in Tawreedo for you.

If our answer does not satisfy you, you can complain to the Saudi Data and Artificial Intelligence Authority (SDAIA).

Security

Every member of a provider signs in with two-factor authentication, data travels encrypted, each provider reaches only its own connections, and actions in the portal are recorded.

Cookies

tawreedo.com uses no advertising or analytics cookies. The provider portal uses only the cookies it needs to keep you signed in and your account secure.

Changes to this notice

We publish any change on this page with a new date. If a change affects how we use details you gave us with your consent, we ask for your consent again.