Privacy Policy

4.1. Collection and Use of Personal Data

At Bostani Chocolatier, we value your privacy and are committed to protecting your personal data in accordance with the Saudi Personal Data Protection Law. This privacy notice explains how we collect, use, disclose, store, and protect your personal data as part of our operations.

4.1.1. Information Collected by Bostani Chocolatier

Bostani Chocolatier collects information about you through three main methods:

• Directly from customer input
• From third-party sources
• From our business partners

4.1.1. Data You Provide to Us

We collect different categories of personal data based on our relationship with you, such as:

Customers

• Identity Information: Your name, date of birth (without year)
• Contact Details: Phone number, email address, and shipping address
• Financial Information: Bank account details and transaction history

4.1.1.2. Tracking Technologies and Cookies

Bostani Chocolatier's web services may automatically collect information about how you and your device interact with the service, including:

• Device Details: Browser type, version, operating system, installed software, mobile platform, and device address
• Usage Data: Features used, page link click-stream data
• Timestamps, referring/exit pages, and search terms used
• Location Data: Information about region, city, or town to deliver relevant content

4.1.1.3. Payment Processing (Apple Pay)

When you make a purchase through our app using Apple Pay, payment transactions are processed securely through Apple's payment infrastructure. Bostani Chocolatier does not store your full card numbers, CVV details, or raw payment credentials on our servers. The following data may be collected and retained in connection with Apple Pay transactions:

• Transaction amount and date
• Billing and shipping address
• Order reference number
• Device account number (tokenized identifier provided by Apple)

This data is used solely for order fulfillment, fraud prevention, customer support, and compliance with applicable laws including the Saudi Personal Data Protection Law (PDPL). It is never sold or shared with third parties except as required for payment processing or legal obligations.

4.1.2. Purposes We Use Your Personal Data For

Depending on your interactions with Bostani Chocolatier, we may use your personal data for the following purposes:

• Employment purposes
• Managing your orders
• Business Activities: Contacts, billing, sales invoices, product delivery, order processing, payment for goods/services, permitted marketing activities, and verifying supplier eligibility
• Website and Business Operations: Maintaining our website and business operations and ensuring their proper functionality
• Legal Compliance: Resolving disputes, enforcing agreements, and complying with applicable laws and regulations
• Communications: Contacting you via email, phone calls, text messages, or other means regarding updates, security updates, or communications related to products or services

4.2. Disclosure/Sharing of Your Information

Bostani Chocolatier may disclose your personal data in the following cases:

• With Your Consent: We may disclose your personal data with your explicit consent for purposes not mentioned here
• Compliance and Legal Obligations: To comply with laws, investigate fraud, or address security issues
• With Service Providers: To monitor, analyze, and improve our services

4.3. International Data Transfer

We do not store, process, or transfer your personal data outside the Kingdom of Saudi Arabia. If the need for international data transfer arises in the future, we will ensure compliance with the Saudi Personal Data Protection Law.

4.4. Data Retention

We retain your personal data until it becomes anonymized or is destroyed when necessary to provide the service, complete requested transactions, or for other essential purposes.

4.5. Data Destruction

When the purpose for which your personal data was stored has expired, Bostani Chocolatier will securely destroy it or render it anonymous.

4.6. Data Security

We have implemented appropriate technical, physical, and administrative measures to protect and secure your personal data.

4.7. Your Rights

Under the Saudi Personal Data Protection Law, you have the following rights:

• Right to Know: Know the purpose and justification for collecting your personal data
• Right of Access: Request access to your personal data and obtain a copy of it
• Right to Data Portability: Request a copy of your personal data in a structured, machine-readable format
• Right to Object: Object to the processing of your personal data for marketing or based on legitimate interests
• Right to Erasure: Request the deletion of your personal data
• Right to Rectification: Request the correction, completion, or update of your personal data