LEGAL
Taypret Privacy Policy
Effective date: 1 October 2026
This policy explains how Taypret handles personal data about website visitors, customers and seller representatives. It is a privacy notice, not blanket consent to all processing. Where consent is required, we request it separately.
1 Controller and contact
Operator: taypret Establishment, trading as Taypret. Commercial registration: 7055208115. E-commerce authentication: 0000330411. Customer service: support@taypret.com and 0558547562, 24 hours. Website: https://taypret.com. Privacy requests should be sent to privacy@taypret.com.
2 Data we collect
We collect the information you provide for accounts, orders, delivery and support: name, email, mobile number, delivery address, order details, messages and return evidence. Seller onboarding may require business registration, authorised representative details, bank account and tax information. We also receive payment status, transaction references and limited payment identifiers from payment providers, and technical information such as IP address, browser, device, session and security logs. We collect delivery location only as needed for your order; optional precise location requires the relevant permission.
3 Sources and required information
Data comes from you, the seller fulfilling your order, payment and delivery providers, and your interaction with the platform. Required checkout fields are needed to process and deliver your order; if they are missing, we may be unable to provide the requested service. Optional information is identified as optional. Do not send payment card security codes, passwords or unnecessary identity documents to customer service.
4 Purposes and legal bases
We process account, order, delivery, payment-status and support information to enter into and perform the requested contract. We process invoice, transaction and regulatory records to comply with legal obligations. Where permitted, we use limited technical and transaction information for legitimate interests such as preventing fraud, securing the service and resolving disputes, after assessing necessity and your rights; we do not rely on this basis for sensitive data. We rely on consent where required for promotional messages, optional tracking or optional precise location. Withdrawing consent does not affect earlier lawful processing or processing supported by another valid basis.
5 Sharing
We share only data needed with the relevant seller to fulfil and resolve your order, delivery personnel to deliver or collect it, payment providers to process payments and refunds, and contracted hosting, database, communication and support providers to operate the platform. Moyasar, Tamara and Tabby receive information only where relevant to the selected service. We may disclose necessary information to authorities, advisers or dispute handlers where lawfully required. Sellers and payment providers may act as separate controllers for their own legal purposes and must provide their own privacy information. We do not sell personal data.
6 Cookies and marketing
Necessary cookies or similar storage support login, basket, checkout and security. Optional analytics or advertising tracking, if used, is controlled through the consent settings made available on the website. You can refuse or withdraw optional consent without losing essential shopping functions. Promotional email, SMS or WhatsApp messages require the applicable consent and include a way to opt out; order and service messages remain separate. Disabling necessary browser storage may affect site functions.
7 Retention
We keep personal data only for the purpose for which it is needed. Account data is kept while the account is active and afterwards only as needed for outstanding orders, disputes or legal duties. Order, payment and invoice records are kept for the statutory recordkeeping period applicable to each record. Support and return evidence is kept until the issue and any necessary claim period have ended. Technical logs are retained only for the necessary security and operational period. We then delete or irreversibly anonymise data, including through scheduled backup expiry, unless a lawful preservation duty applies. Request details of the period applicable to your data through the privacy contact.
8 Hosting and international transfers
Contracted technology or support providers may process data outside Saudi Arabia. Before any such transfer, Taypret must establish a permitted purpose and the safeguards required by Saudi data-protection rules, including applicable transfer assessments and contractual safeguards. Only the necessary data may be transferred. You may request information about relevant destinations and safeguards. Use of the website does not constitute blanket consent to international transfers.
9 Security and payments
We apply appropriate organisational and technical safeguards, access restrictions and incident-handling procedures. Payment credentials are handled through the selected payment provider; Taypret’s order records contain payment references and status rather than card security codes. No system is completely risk-free. We notify the competent authority and affected individuals of qualifying breaches as required by law.
10 Your rights and complaints
Subject to applicable legal conditions, you may ask to be informed about processing, access your data, receive a readable copy, correct or complete it, request destruction, and withdraw consent where it is the basis for processing. Send a request to the privacy contact; we verify identity proportionately and respond within the legally applicable period. If a legal restriction prevents fulfilment, we explain the reason and available complaint route. Account deletion does not require deletion of records that must lawfully be retained. You may complain to Taypret and to the Saudi Data and Artificial Intelligence Authority through its official personal-data protection channels.
11 Children and policy changes
The shopping service is intended for adults. We do not intentionally collect children’s data without the legally required guardian arrangements. Contact us if such data has been provided. We publish an effective date and communicate material privacy changes as appropriate. A policy update does not replace fresh consent where fresh consent is required. The Arabic version prevails in case of inconsistency, subject to applicable law.