Privacy Policy

shape
Introduction

Welcome to Kayyel! This Privacy Policy outlines how we collect, use, share, and protect the information we collect from or about you when you use our Website, App, and web applications. Please read this policy carefully to understand our practices and how we handle your personal information. By accessing or using our Services, you acknowledge and agree to the terms of this Privacy Policy. If you do not agree with our privacy practices, we kindly ask you to discontinue the use of our Website, App, and web applications.

Information Collection

We collect different types of information from or about you, which enable us to provide the products and services you request, enhance your experience, and offer relevant opportunities. The following personal information may be collected:

  • Name
  • Date of Birth
  • Email Address
  • Billing Address
  • Shipping Address
  • Telephone Number(s)
  • Profile photo (if provided by you)
  • Location Data: We may collect precise or approximate location information from your device to provide location-based services, such as personalized content or offers based on your location.
  • SMS Data (OTP): With your permission, we may access your SMS messages solely to retrieve one-time passwords (OTPs) automatically for a smoother verification process. We do not access or store any other SMS data.
Legal Basis for Processing Data (Regulatory Risk)

Legal Basis for Data Processing
Kayyel processes personal data based on the following legal grounds, as required under the Saudi Personal Data Protection Law (PDPL):

  • User Consent: When you provide consent for marketing communications, location tracking, or data collection.
  • Contractual Necessity: When processing your data is required to fulfill a service, such as completing transactions, verifying accounts, or delivering rewards.
  • Legal Obligation: When we are required to retain or disclose information due to regulatory or governmental requirements in Saudi Arabia.
  • Legitimate Interest: When processing is necessary for fraud prevention, service improvement, or ensuring security.
Geo-Location Services

With your consent, we may use location services on your mobile device to collect and utilize location data, including the real-time geographic location of your device. This information is used to provide personalized content, advertisements, and enhance user experience. You can disable location services through your device's settings, though doing so may limit the functionality of certain features.

SMS Permissions

With your consent, we may request access to your SMS messages to retrieve OTPs (One-Time Passwords) automatically when needed for login or verification purposes. This access is limited to OTP retrieval and is not used for any other purpose. You can choose to allow or deny this permission, though denying it may require manual OTP entry during the verification process.

Children’s Data Protection (Minor Privacy)
Children’s Data Protection

Kayyel is designed for use by individuals aged 18 and above. We do not knowingly collect data from children under this age. If we discover that a child under the age of 18 has provided personal data, we will take the following actions:

  • Immediately delete the data unless parental consent is provided.
  • Restrict the minor’s access to the service if necessary.

If you are a parent or legal guardian and believe that your child has provided us with personal data, please contact us immediately at [Support@kayyel.com] to request data deletion.

Digital Receipt Program (eReceipts):

If you participate in our Digital Receipt Program, we collect consumer account or email log-in credentials and any personal information available on digital receipts. Any information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Referral Program:

When you refer a friend to join Kayyel, we provide you with a referral link, pre-formatted text about Kayyel, and a referral code. You share this information with your friend independently, without disclosing any of their personal information to us.

Friend Information:

If your friends sign up using your referral code, we will inform them that you received points for the referral. Additionally, we will notify you when your friends sign up and inform you when they scan their first receipt.

Data Usage and Protection

We use the information collected to deliver the products and services you request, enhance your user experience, and provide relevant updates. We prioritize the protection of your personal information and maintain appropriate security measures to safeguard it.

Information Sharing

We may share your information in the following circumstances:

  • With service providers, business partners, and affiliates who assist us in providing the requested products and services.
  • With your consent or at your direction.
  • To comply with legal obligations, enforce our rights, or protect the rights, property, or safety of Kayyel or others.
  • In connection with a corporate transaction, such as a merger or sale of assets.
Your Rights and Choices

Under the Saudi Personal Data Protection Law (PDPL), you have the following rights regarding your personal data:

  1. Right to Access: You may request a copy of the personal data we hold about you.
  2. Right to Correction: If your personal data is inaccurate or incomplete, you can request corrections.
  3. Right to Deletion: You may request the deletion of your personal data unless we are legally required to retain it.
  4. Right to Restrict Processing: You may ask us to restrict the processing of your personal data under certain conditions.
  5. Right to Withdraw Consent: If you have provided consent for data collection or marketing communications, you can withdraw it at any time.
  6. Right to Object to Automated Decision-Making: If we use automated processes that significantly affect you, you have the right to request human intervention.

To exercise any of these rights, you may contact our Data Protection Officer (DPO) at: 📩 Email: [Support@kayyel.com]

Data Protection Officer (DPO) & Compliance Contact

To comply with the Saudi Personal Data Protection Law (PDPL), Kayyel has designated a Data Protection Officer (DPO) to oversee compliance with data protection laws and regulations.

If you have any questions about how we process your personal data, or if you wish to exercise your rights under the PDPL, you may contact our DPO:

📩 Email: [support@kayyel.com]

You also have the right to lodge a complaint with the relevant regulatory authority in Saudi Arabia if you believe that your rights under the PDPL have been violated.

Cross-Border Data Transfers

Kayyel may store or process personal data outside Saudi Arabia to provide our services efficiently. When transferring data internationally, we ensure that appropriate safeguards are in place, including:

  • Contracts with Data Processors that comply with PDPL standards.
  • Encryption and Secure Storage to protect personal data.
  • Adequacy Assessments to ensure the receiving country provides sufficient data protection.

By using our services, you consent to the cross-border transfer of your data as required for service delivery.

Data Retention & Deletion Policy

Kayyel retains personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including compliance with legal obligations.

  • User Account Data: Retained as long as the account remains active. If the account is deleted, we will erase personal data unless legally required to keep it.
  • Transactional Data (e.g., purchases, rewards): Stored for at least 5 years, as required by Saudi commercial regulations.
  • Marketing Data: Retained until the user opts out of marketing communications.
Data Deletion:

Upon expiry of retention periods, we will securely delete or anonymize the data unless required by law.

Data Breach Handling (Security & Compliance Risk)

Data Breach Notification

Kayyel implements strict security measures to protect your data. However, in the event of a data breach, we will:

  • Immediately assess the impact and contain the breach.
  • Notify affected users if their personal data is at risk.
  • Report the breach to the relevant Saudi data protection authority (SDAIA) within the legally required timeframe.

Users will be informed of the steps taken to mitigate the breach and any actions they should take to protect their accounts.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please reach out to us at [ Support@kayyel.com ].

Updates to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes through our Website, App, or other means. We encourage you to review this policy periodically to stay informed about how we collect, use, and protect your information.

Social Media Login

By signing up or signing in with a Social Media platform, such as Facebook Connect, you grant us access to the information available on your social network profile, as per the terms of use of the social network and this Privacy Policy. You can manage your sharing settings within your social media profile.

Other Information We Collect

When you use our Website, App, or web applications, we automatically collect certain information about you, your interactions with us, and details about the device you use to access our Services (referred to as "Other Information"). This includes, but is not limited to:

  • User Submissions (as defined in the Terms)
  • Gender
  • Date of Birth
  • IP address
  • Unique device ID
  • Usage information, such as details about scanned products, purchases, searches, favorites, rewards earned and redeemed, deals, challenges, discounts, and coupons associated with your account
  • Time, duration, and location of your use of the Website, App, or web applications
  • Other activity logs
  • Location Services
    • With your consent, we may use location services on your device to collect and utilize location data, including the real-time physical location of your device. This information is used to provide personalized content or advertisements and to enhance the user experience. You can disable location notifications through the app settings. Your geographic location is not used to send text messages or SMS
Information from Other Sources

We may collect publicly available data, including information you have shared in public forums and social media platforms. We may also gather information from third parties to enhance our existing data about you. This information is used to provide our services, improve our products and services, prevent fraud, and verify your identity.

Use of Cookies and Other Tracking Technologies
  • Cookies: We use cookies to facilitate customized site information, authentication, requests completion, and anonymous analysis. Most web browsers are set to accept cookies by default, but you can usually disable them if you prefer. However, disabling cookies may limit the full functionality of our Website or web applications.
  • Pixel Tags: We utilize Pixel Tags and similar technologies to understand user actions and measure the success of our marketing efforts.
Third-Party Website Tracking

On our Website and web applications, third parties may use tracking technologies like cookies and web beacons. These technologies collect information about your usage across our Services and other websites and online services over time.

How We Use Your Information

We use your information to provide you with our Website, App, web applications, and the Kayyel Rewards™ program. Additionally, we analyze, administer, enhance, and personalize our Services and marketing efforts.

Marketing Communications

By using our services, you agree that Kayyel may send you marketing communications, including:

  • Promotional offers, discounts, and rewards
  • Updates on new features, services, and campaigns
  • Personalized recommendations and targeted offers

These communications may be sent through:

  • Email
  • SMS
  • Push notifications
  • In-app messages
  • WhatsApp Business.
Updates to this Privacy Policy

We may update this Privacy Policy periodically. We will notify you of any material changes through our Website, App, or other means. We encourage you to review this policy periodically to stay informed about how we collect, use, and protect your information.

How We Share Your Information

To ensure the best products and services, we may share your information in the following ways:

  • With Participating Brands: When you use our App and participate in our program, you authorize us to share the information you provide during registration and while earning rewards with our participating brands.
  • With Service Providers: We may share your information with service providers who support various functions of Kayyel.
  • With Business Partners: We may share your information with third-party business partners as part of providing our services.
Use and Sharing of De-identified and/or Aggregated Information

We may de-identify and/or aggregate Personal Information and other data to remove personally identifying components. This de-identified and/or aggregated information is not considered Personal Information.

For Legal or Security Reasons

We may share information about you if we believe it is necessary to comply with legal processes, government requests, applicable laws, rules, or regulations in Saudi Arabia or ADGM. We may also share information to investigate or address potential violations of our Terms of Service or Privacy Policy, protect our rights, property, and safety, or detect and resolve fraud or security concerns within the jurisdictions of Saudi Arabia and ADGM.

Dispute Resolution

In the event of any dispute arising from or related to this Privacy Policy, we will first attempt to resolve the matter amicably. If we cannot reach an agreement, the dispute will be referred to the competent courts in Saudi Arabia or the Abu Dhabi Global Market (ADGM), depending on the applicable jurisdiction.