Privacy Policy

This Privacy Policy explains how ALTairEGO (referred to as we, us, or our) collects, uses, discloses, and protects personal data belonging to visitors and customers of altairego.co. It applies to anyone located in the Kingdom of Saudi Arabia and the wider GCC who interacts with our store, in accordance with the Saudi Personal Data Protection Law (PDPL), issued under Royal Decree No. M/19 and its Implementing Regulations, as regulated by the Saudi Data and Artificial Intelligence Authority (SDAIA).

By using our website or placing an order, you acknowledge that you have read and understood how your data is handled as described below.

We collect only the personal data needed to operate our store and serve you effectively:

• Contact details: name, email address, phone number, WhatsApp number
• Shipping and billing details: delivery address, city, country
• Order information: products purchased, order history, order value
• Payment information: processed directly by our licensed payment partners; we do not store full card numbers
• Technical data: IP address, browser type, device type, and pages visited, collected automatically through cookies and similar technologies
• Communications: messages you send us through WhatsApp, email, or our contact form

Your personal data is used only for clearly defined purposes, including to:

• Process and fulfil your orders, including shipping and delivery coordination
• Provide customer support and respond to enquiries
• Send order confirmations, shipping updates, and service messages
• Improve our website, products, and customer experience
• Prevent fraud and ensure the security of our store
• Meet legal, tax, and regulatory obligations in Saudi Arabia
• Send marketing communications, but only where you have given clear, opt-in consent

Under the PDPL, every use of your personal data must be anchored to a valid legal basis. We rely on the following:

• Contractual necessity: to fulfil an order you have placed with us
• Legal obligation: to comply with tax, customs, and consumer protection requirements
• Legitimate interest: to keep our store secure and improve our service, balanced against your rights
• Consent: for marketing communications and non-essential cookies, which you may withdraw at any time

We do not use pre-ticked consent boxes, and marketing consent is always separate from the consent required to complete a purchase.

We share personal data only with trusted parties who help us operate the store, and only to the extent necessary:

• Payment processing: Tap Payments, and buy-now-pay-later providers Tabby and Tamara, to process transactions securely
• Shipping and logistics: Aramex, DHL, and FedEx, to deliver your order and provide tracking
• Platform infrastructure: Shopify, which hosts our store and processes data on our behalf under its own data protection commitments
• Legal and regulatory bodies: where required by Saudi law, such as SDAIA, customs, or tax authorities

We do not sell personal data to third parties for their own marketing purposes.

Our website uses cookies and similar technologies to keep the store functioning correctly, remember your cart and preferences, and understand how visitors use our site. Some cookies are essential to core functions such as checkout, while others support analytics and marketing and are only set with your consent. You can manage or disable non-essential cookies through your browser settings at any time.

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by Saudi tax, commercial, and consumer protection law. Order and invoice records are typically retained for the period required under applicable regulations, after which they are securely deleted or anonymised.

We apply reasonable technical and organisational measures, such as restricted access and secure payment processing through licensed partners, to protect your data against unauthorised access, loss, or misuse. In the unlikely event of a data breach that risks your rights or security, we will notify the Saudi Data and Artificial Intelligence Authority within the timeframe required by law, and will inform affected customers where appropriate.

As a data subject under the Saudi Personal Data Protection Law, you have the right to:

• Be informed about how your personal data is collected and used
• Request access to the personal data we hold about you
• Request correction of inaccurate or outdated data
• Request destruction of your personal data where it is no longer needed for the purpose it was collected
• Withdraw consent at any time for processing based on consent, such as marketing
• Object to certain uses of your data, including direct marketing

To exercise any of these rights, contact us using the details at the bottom of this page. We will respond within the timeframe required under Saudi law.