Privacy Policy

1. Who we are

The Avloon store ("the Store", "we") operates the website avloon.com and is the controller of the personal data collected through it. We comply with the Saudi Personal Data Protection Law (PDPL) and other applicable laws.

2. The data we collect

• Contact details: name, email address, mobile/WhatsApp number, shipping and billing address.
• National ID or residency (Iqama) number: we ask for it only when customs in your country require it to clear your shipment in your name, and we do not use it for any other purpose (see the Shipping Policy, Section 4).
• Order data: products, delivery details and payment status.
• Payment data: we do not store your card details. Payments are processed by licensed payment gateways and payment partners (Visa, Mastercard, American Express, Apple Pay, Google Pay, Tamara, and mada where shown on the checkout page) in accordance with the PCI DSS standard; we receive only the payment confirmation, the last four digits and the payment method.
• Account data: login details and preferences; your password is stored as a one-way hash from which the password cannot be recovered.
• Technical data: IP address, device and browser, the pages you visited, and cookies.
• Correspondence: what you send us by email, WhatsApp or the website's forms.

3. How we use it and on what basis

• Fulfilling, shipping and clearing your order, and customer service (basis: performance of the contract).
• Processing payments and refunds and preventing fraud (basis: performance of the contract, and our legitimate interest in protecting the Store).
• Tax, accounting, customs and export requirements (basis: legal obligation).
• Operating and improving the website (basis: our legitimate interest in operating and securing the Store).
• Sending offers and new products (basis: your consent, which you may withdraw at any time via the unsubscribe link).

4. Who we share it with

We do not sell or rent your data, and we share only the minimum with:

• The carrier FedEx and customs brokers: name, address and mobile number, and your ID if customs require it.
• Suppliers who ship to you directly: name, address and mobile number.
• Payment and installment providers: for payment, refunds and fraud screening.
• Hosting, platform, email and analytics providers, as processors acting on our behalf.
• Government authorities and courts when the law requires it.

5. Transfers of data outside your country

We are based in the United States, and we process your data there and with our hosting, payment and shipping providers in order to perform the purchase contract and deliver your order; this is a transfer permitted by law because it is necessary to perform an obligation to which you are a party. We limit it to the minimum and share it only with providers bound by confidentiality and data-protection obligations under our agreements with them.

6. Retention period

We keep your data for as long as necessary for its purpose and then delete or anonymize it:

• Order, invoice, shipping and customs records: up to 7 years in accordance with legal requirements.
• The ID number provided for customs clearance: we do not keep it after delivery except to the extent it appears in shipping documents that the law requires us to retain.
• Account data: for as long as the account is active or until you ask us to close it.
• Marketing data: until you unsubscribe.

7. Data protection

We apply appropriate technical and organizational measures: encrypted connections (HTTPS), restricted access controls, and trusted providers. Keep your password confidential and contact us immediately if you suspect unauthorized access.

8. Cookies

The website uses essential cookies (cart, checkout, login), functional cookies (currency and language), and, with your consent where the law requires it, analytics and advertising cookies. You can control them from your browser, keeping essential cookies enabled in order to complete a purchase.

9. The Avloon mobile app

• The app does not require you to create an account, does not access your location, contacts or photos, and does not track you across other apps or websites.
• After a purchase, the app stores only your name, email and order numbers on your device, so it can show your orders and automatically fill in your name and email on the checkout page.
• Notifications: we send them only if you turn on "Offer notifications" yourself. We then store your device's notification token and, after verifying one of your orders, link it to your email so you receive updates on your order status. Notifications are sent through the Expo service and Apple's and Google's notification services.
• You can turn notifications off at any time in the app or in your phone's settings, and we then delete your device token from our systems.
• Payment takes place on the secure checkout page of the payment gateways listed above, and your card number does not pass through the app.
• Account deletion: through "My Account → Delete account", we erase the app's data from your device and stop your notifications immediately, and we receive your request to delete your account and data from the Store and complete it within 30 days, except for what the law requires us to retain.

10. Your rights

Under the Personal Data Protection Law (PDPL) and the laws applicable in your country of residence, you have the right to:

• Request a copy of your data.
• Have it corrected.
• Have it deleted, except what the law requires us to retain.
• Object to, or restrict, a particular processing activity.
• Withdraw your consent to marketing.
• Close your account and have its data deleted within 30 days, except what the law requires us to retain.
• Lodge a complaint with the data-protection authority in your country.

Contact us at support@avloon.com and we will respond within 30 days; we may verify your identity.

11. Minors

The website is intended for people aged 18 and over, and we do not knowingly collect data from minors; if we learn that we have collected a minor's data, we delete it immediately.

12. External links

The website may contain links to manufacturers' websites or social media, each of which has its own privacy policy.

13. Updates to this policy

We may update this policy; we publish the current version here and announce any material change on the website. The Arabic version is the authoritative one, the English is a translation for reference, and in case of conflict the Arabic prevails.

14. Contact us

For any privacy question: support@avloon.com or WhatsApp via the link on the website, or Instagram @1avloon. Didn't find your answer? See the FAQ page at avloon.com/faqs/ or message us on WhatsApp.