Privacy Policy
Privacy Notice
PRIVACY NOTICE
Introduction
This notice applies to any online and mobile website, application and digital service (“Services”) of Ideal Abaya Trading Co Ltd (“Orange Blossom”, “we”, “us” or “our”), as well as any information that we collect about you when you visit one of our stores in person.
It also describes your data protection rights, including a right to object to some of the processing which Orange Blossom carries out (e.g. direct marketing). More information about your rights, and how to exercise them, is set out in the “What rights do I have?” section. You can also learn about cookies and similar technology in this notice.
What information do we collect?
The following categories of personal data will be collected about you in connection with your interaction with us and use of our Services including, but not limited to, when you purchase products on our Services, you complete forms on our Services, submit user-generated reviews or ratings, engage in any social media functions on our Services, and when you visit one of our stores in person.
Information you give us
personal identification information such as, your name, date of birth and gender;
contact information such as, email address and telephone number;
demographic information: such as, postal address;
financial information: such as, credit/debit card numbers;
your purchase history;
if you have completed a survey or entered a competition with us;
if you contact us by phone, email or otherwise, we will keep a record of that correspondence; and
your marketing preferences, including any consents you have given us when you subscribe to our newsletter or set up an online account.
Information we collect automatically
information related to the browser, device or operating system you use to access our Services;
your IP address, the website you came from, information on actions taken on our Services including but not limited to pages viewed, dated and times of visits, time spent on each page, products viewed, clicked on, added to your basket and purchased;
Information we receive from third parties
Sometimes we receive personal data about you from third parties when you engage with our Services through social media, or other non-Orange Blossom sites or applications, those sites will share personal data with us including, but not limited to:
the content you have viewed or interacted with;
about adverts within the content which you have been shown or clicked on;
your IP address, registered beacons or GPS (geo location) signals you have received;
publically available information; and
non-personal information used to supplement existing information, such as demographics and affluence metrics (e.g. social-demographic groupings through matching postcodes).
The privacy notices for these sites and applications will contain more detail about this and how to change your privacy settings on those sites and applications.
How do we use this information, and what is the legal basis for this use?
We process your personal data for the following purposes:
To fulfil a contract, or take steps linked to a contract including fulfilling any orders your place. This includes:
- processing your order, registration for the Services, or entry to a competition;
- b) providing the Services, to communicate with you about them or your account with us;
- c) communicating with you (including by email and SMS) and providing our customer services;
- d) verifying your identity; and
- e) sending you information about changes to our terms or policies.
To conduct our business and pursue our legitimate interests, in particular:
- a) we will use your personal data to provide products and Services you have requested, and respond to any comments or complaints you may send us;
- b) we monitor use of our Services, and use your personal data to help us monitor, improve and protect our products, content, Services and websites, both online and offline;
- c) we use your personal data to personalise our products and Services for you;
- d) to prevent, investigate and/or report fraud, misrepresentation, security incidents or crime, in accordance with applicable law;
- e) we use information you provide to investigate any complaints received from you or from others, about our website or our products or services;
- f) we will use data in connection with legal claims, compliance, regulatory and investigative purposes as necessary (including disclosure of such information in connection with legal process or litigation);
- g) to create a profile of your interests and preferences, and personalise content and advertising for you, so that you only receive content and marketing communications that are relevant to you;
- h) where you have purchased products from us, to send you marketing emails and texts, unless you have either: asked us not to; or, we have asked for your consent, in which case your consent will form the appropriate lawful basis for our data processing; and
- i) to send you marketing communications by post.
Where you give us your consent, we will use your personal data:
- a) to send you newsletters and other promotional material about our Services by email and text (for instance, this will include where you have signed up to receive our newsletters, or have provided us with your consent to receive marketing communications at the point of checkout or when setting up an account), and to use technologies to check if these have been received and opened to help make our communications relevant to you. Please note that in certain circumstances, we may be relying on our legitimate interests to send you marketing emails (see above);
- b) to place cookies and use similar tracking technologies (as set out in the “Cookies” section and the information provided to you when those technologies are used);
- c) to invite you to take part in market research (where consent is required); and
- d) on other occasions where we ask you for consent, we will use the data for the purpose which we explain at that time.
For purposes which are required by law:
- in response to requests by government or law enforcement authorities conducting an investigation.
Relying on our legitimate interests
We have carried out balancing tests for all the data processing we carry out on the basis of our legitimate interests, which we have described above. You can obtain information on any of our balancing tests by contacting us using the details set out below.
We may also share email addresses and other data from our KSA customer database with carefully selected KSA based companies that help us cross reference email addresses of customers to identify whether a user has purchased from Orange Blossom before to allow us to serve them a specific offer.
In all cases, the third party is acting on Orange Blossom’s express instructions and in accordance with this Policy, confidentiality and levels of security.
Without your consent, we share your personal data:
- a) with third party platforms such as Facebook or Google to send you targeted advertisements on our behalf;
- b) in response to legal process, for example, in response to a court order or a subpoena, a law enforcement or government agency’s request;
- c) with third parties if this will help us to enforce our policies and terms of use, to check for potential illegal activity (such as copyright infringement or fraud) or to protect the safety of other users of the Services; and
- d) if we, or one of our business units, undergoes a business transition, like a merger, acquisition by another company, or sale of all or part of our assets.
We operate globally, so we do need to transfer your personal data internationally. In particular, your personal data will be transferred to and processed in KSA.
Where information is transferred outside the Arab Gulf States, and where this is to a stakeholder or vendor in a country that is not subject to an adequacy decision by the Arab Gulf States Commission, data is adequately protected by Arab Gulf States Commission approved standard contractual clauses, an appropriate Privacy Shield certification or a vendor’s Processor Binding Corporate Rules.
How long will you retain my data?
Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data indefinitely so that we can respect your request in future.
Where we process personal data in connection with performing a contract or for a competition, we keep the data for 5 years.
Where we process registration data, excluding in the circumstances outlined above, we retain your data for 5 years.
What rights do I have?
You have the right to ask us for a copy of your personal data; to correct, delete or restrict (stop any active) processing of your personal data; and to obtain the personal data you provide to us for a contract or with your consent in a structured, machine readable format, and to ask us to share (port) this data to another controller.
You can object to the processing of your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing).
These rights may be limited, for example if fulfilling your request would reveal personal data about another person, where they would infringe the rights of a third party (including our rights) or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. We will inform you of relevant exemptions we rely upon when responding to any request you make.
To exercise any of these rights, or to obtain other information, such as a copy of a legitimate interests balancing test, you can get in touch with us using the details set out below. If you have unresolved concerns, you have the right to complain to an Kingdom of Saudi Arabia data protection authority where you live, work or where you believe a breach may have occurred.
Where we require your personal data to comply with legal or contractual obligations, then provision of such data is mandatory: if such data is not provided, then we will not be able to manage our contractual relationship with you, or to meet obligations placed on us.
Withdrawing consent or otherwise objecting to direct marketing
Wherever we rely on your consent to send you marketing communications (for instance, where you have signed up to our newsletter, or have provided us with your consent to receive marketing communications at the point of checkout or when setting up an account), you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above. In some cases, we are able to send you direct marketing without your consent, where we rely on our legitimate interests (for instance, where you are already a customer).
In any case, you can unsubscribe from receiving our marketing emails by clicking on the unsubscribe link at the bottom of our emails, or by contacting us using the details set out below. You can also update your marketing preferences in your customer account on www.Orangeblossomstore.com at any time. Please note that you may continue to receive communications for a short period after changing your preferences while our systems are fully updated.
You also have an absolute right to opt-out of all data processing that we carry out for marketing purposes (this includes receiving marketing emails, and profiling whereby we tailor the content, adverts and marketing communications that you receive about our products and services), at any time, by contacting [email protected] or by writing to Customer Care, Orange Blossom Store, Al-Wateen Commercial Center, Saud Al-Faisal Street, Al-Rawdah Dist, Jeddah 23432.
SECURITY MEASURES
We have put in place physical, electronic, and managerial procedures designed to help prevent unauthorised access, to maintain data security, and to use correctly the personal data we collect online.
These safeguards vary based on the sensitivity of the personal data that we collect and store.
Although we take appropriate measures to safeguard against unauthorised disclosures of personal data, we cannot assure you that your personal data will never be disclosed, altered or destroyed in a manner that is inconsistent with this privacy notice.
Children’s Privacy
Our Services do not target and are not intended to attract children under the age of 18. We do not knowingly solicit personal data from children under the age of 18 or send them requests for personal information.
Cookies
When you visit the Services we may store some information (commonly known as a “cookie” or similar technologies) on your device. Cookies are pieces of information that a website transfers to your hard drive to store and sometimes track information about you. Cookies are specific to the server that created them and cannot be accessed by other servers, which means that they cannot be used to track your movements around the web.
Cookies can be categorised in accordance with the categories found in the ICC UK Cookie guide as set out below:
- a) strictly necessary cookies – these cookies are essential in order to enable you to move around a website and use its features and enable services you have specifically asked for. Consent is not generally required for these cookies;
- b) performance cookies – these collect information about how visitors use a website, for example, by recording which pages users go to most often (usually on an anonymous basis);
- c) functionality cookies – these cookies allow a website to remember the choices a user makes, such as a user name or language preference; and
- d) targeting or advertising cookies – these collect information about a user’s browsing habits and are usually placed by advertising networks with the website operator’s permission.
Cookies can also be categorised in accordance with how long they are saved on your device. “Session cookies” are short-term cookies that are only saved on the computer’s memory for the duration of a user’s visit to the website, whereas “persistent cookies” remain saved in the computer’s memory for a set period of time, even after the browser session has ended.
Cookies SMS
The Orange Blossom website uses cookies to help keep track of your experience on the site and of items you put into your shopping cart including when you have abandoned your cart. This information is used to personalise your experience and determine when to send cart reminder messages via SMS.
How to manage & remove cookies
If you are using our Services via a browser you can change your cookie preferences and withdraw your consent at any time using the Cookie Preferences Centre.
You can find more detail about the third parties which place cookies on our Services here.
The Help menu on the menu bar of most browsers also tells you how to prevent your browser from accepting new cookies, how to delete old cookies, how to have the browser notify you when you receive a new cookie and how to disable cookies altogether.
If you are using our Services via an application, then you can change your consent by following the relevant application’s directions. In addition, the operating system for your device provides instructions on how to prevent tailored advertising and how to reset your device’s advertising identifier.
Who is the data controller?
The data controller for your information is Ideal Abaya Trading Co Ltd which you have a relationship with or which manages the website you have visited. Please find our contact details below.
How do I get in touch with you?
We hope that we can satisfy queries you may have about the way we process your data. If you have any concerns about how we process your data, or would like to opt out of direct marketing, you can get in touch at [email protected] or by writing to Customer Care, Orange Blossom Boutique, Al-Wateen Commercial Center, Saud Al-Faisal Street, Al-Rawdah Dist, Jeddah 23432, Kingdom of Saudi Arabia.
Changes to this Privacy Notice
From time to time, we may update this notice. We will notify you about any upcoming material changes by either sending you an email to the email address you most recently provided to us or by prominently posting a notice on our Services. We encourage you to periodically check back and review this notice so that you know what personal data we collect, how we use it, and with whom we share it
Ideal Abaya Trading Co Ltd Privacy Policy
Privacy Policy
Your information privacy is extremely important to us. We have prepared this Privacy Policy to explain how we collect, use, protect, and disclose information and data when you use orangeblossomstore.com (“Site”) and any Ideal Abaya Trading Co Ltd mobile application, application programming interfaces, and other services offered by Ideal Abaya Trading Co Ltd (“Services”). This Privacy Policy also explains your choices for managing your information preferences, including opting out of certain uses of your Personal Information (defined below). This Privacy Policy applies to all users of the Site. The Site and Services are provided by Ideal Abaya Trading Co Ltd (“Company” “we” “our” “us”).
TO THE EXTENT ALLOWED BY LAW, BY USING THE SITE OR SERVICES, YOU ARE CONSENTING TO THIS PRIVACY POLICY. PLEASE READ IT CAREFULLY.
- Managing Your Information Preferences
You can review, correct, update, or change your Personal Information or opt out of receiving certain marketing communications by changing the relevant settings in your account or by e-mailing us at [email protected]. You are able to opt out of receiving marketing e-mails from us, however, you cannot opt out of receiving all e-mails from us, such as e-mails about the status of your account or order. If you have questions or concerns regarding this Privacy Policy, please e-mail us at the same address.
- Personal Information
We collect information that personally identifies you, such as your name, date of birth, gender, address, phone number, mobile phone number, e-mail, postal address, your purchase history, payment information, and other personally identifiable information that you choose to provide us with or that you choose to include in your account (“Personal Information”). You may be asked to provide us with Personal Information when you register with the Site, and at other times.
3.Usage Data and Site Activity
We automatically collect information regarding the actions you take on the Site (“Usage Data”). For example, each time you use the Site we automatically collect the type of Web browser and device that you use, your operating system, your Internet Service Provider, your IP address, the pages you view or click on, the products that you add to your basket and purchase, and the time and duration of your visits to the Site. We use this information to help us understand how people use the Site and Services, and to enhance the services we offer.
- Cookies and Anonymous Identifiers.
We use cookies (a small text file placed on your computer to identify your computer and web browser) and may use anonymous identifiers (a random string of characters that is used for the same purposes as a cookie). We use cookies and other anonymous identifiers to analyze use of and improve the Site and Services and as described in the Advertising and Online Tracking Section of this Privacy Policy. We do not use cookies to collect Personal Information. Most web browsers are initially set up to accept cookies. You can reset your web browser to refuse all cookies or to indicate when a cookie is being sent, however, certain features of the Site or Services may not work if you delete or disable cookies. Some of our Service Providers (defined below) may use their own cookies, anonymous identifiers, or other tracking technology in connection with the services they perform on our behalf.
We use Google Analytics on the Site and Services to collect Usage Data, to analyze how users use the Site and Services, and to provide advertisements to you on other websites. For more information about how to opt out of having your information used by Google Analytics, visit https://tools.google.com/dlpage/gaoptout/.
- How We Use Information and When We May Share and Disclose Information Generally
We use Personal Information for different purposes, such as to provide you with the Site and Services, including to send you alerts about your account; to fulfill a contract or take steps linked to a contract (i.e. fulfilling any orders you place); to provide you with products and services that you have requested; to respond to comments or complaints that you may send us; to improve and protect our products, content, Services, and the Site, both offline and online; to personalize our products and services to you; to prevent, investigate and/or report fraud, misrepresentation, security incidents or crime, in accordance with applicable law; to investigate any complaints received from you or from others about our Site, products or services; in connection with legal claims, compliance, regulatory and investigative purposes as necessary; and to otherwise communicate with you about our Company. We may also use your Personal Information to provide more relevant search results from the search functions of the Site and the Services. Except as explained in this Privacy Policy, we will not disclose Personal Information to third parties, including for their direct marketing purposes, without your consent. From time to time we may share, exchange and/or cross-reference our postal mailing list with select providers of goods and services that, in turn, may contact you regarding products and services that may be of interest to you. If you prefer not to receive mailings from these providers, you can notify us at any time by emailing us at [email protected] and clearly stating your request, including your name, mailing address, e-mail address and phone number. We also may disclose to third parties, certain Usage Data regarding the Site and Services. However, in such cases, your Usage Data is aggregated with the Usage Data of others and does not identify you individually.
- Service Providers
From time to time, we may establish a business relationship with other businesses whom we believe trustworthy and who have confirmed that their privacy practices are consistent with ours (“Service Providers”). For example, we may contract with Service Providers to provide certain services, such as hosting and maintenance, order fulfillment, research and analytics, content creation, customer support services, data storage and management, verification of your contact information, and marketing and promotions. We only provide our Service Providers with the information necessary for them to perform these services on our behalf. Each Service Provider must agree to use reasonable security procedures and practices, appropriate to the nature of the information involved, in order to protect your Personal Information from unauthorized access, use, or disclosure. Service Providers are prohibited from using Personal Information other than as specified by us.
- Advertising and Online Tracking
We may allow third-party companies to serve ads and collect certain anonymous information when you visit the Site and Services. These companies may use non-personally identifiable information (e.g. click stream information, web browser type, time and date, subject of advertisements clicked or scrolled over) during your visits to the Site and other websites in order to provide advertisements about goods and services likely to be of interest to you. These companies typically use a cookie to collect this information. Our systems do not recognize browser “Do Not Track” signals, but several of our Service Providers who utilize these cookies on our Site enable you to opt out of targeted advertising practices. To learn more about these advertising practices or to opt out of this type of advertising, you can visit www.networkadvertising.org or www.aboutads.info/choices/. We also provide you with additional tools to opt out of marketing from us. You can learn about this in the “Managing Your Information Preferences” section of this Privacy Policy.
- Notice to California Residents/Your California Privacy Rights
To opt out of sharing your Personal Information with third parties for their direct marketing purposes, please e-mail us at [email protected] and clearly state your request, including your name, mailing address, e-mail address and phone number. Please see Section 1 (Managing Your Information Preferences) above for additional information.
- Other Transfers
We may share Personal Information and Usage Data with businesses controlling, controlled by, or under common control with our Company. If our Company is merged, acquired, or sold, or in the event of a transfer of some or all of our assets, we may disclose or transfer Personal Information and Usage Data in connection with such transaction. You will have the opportunity to opt out of any such transfer if, in our discretion, it will result in the handling of your Personal Information in a way that differs materially from this Privacy Policy.
- Compliance with Laws and Law Enforcement
We cooperate with government and law enforcement officials and private parties to enforce and comply with the law. We may disclose Personal Information and any other information about you to government or law enforcement officials or private parties if, in our discretion, we believe it is necessary or appropriate in order to respond to legal requests (including court orders and subpoenas), to protect the safety, property, or rights of our company or of any third party, to prevent or stop any illegal, unethical, or legally actionable activity, or to comply with the law.
- Security
We maintain physical, electronic, and procedural safeguards to protect the confidentiality and security of information transmitted to us. However, no data transmission over the Internet or other network can be guaranteed to be 100% secure. As a result, while we strive to protect information transmitted on or through the Site or Services, we cannot and do not guarantee the security of any information you transmit on or through the Site or Services, and you do so at your own risk.
- Links
Our Site and Services may contain links to other websites or allow others to send you such links. A link to a third party’s website does not mean that we endorse it or that we are affiliated with it. We do not exercise control over third-party websites. You access such third-party websites or content at your own risk. You should always read the privacy policy of a third-party website before providing any information to the website.
- Children’s Privacy
The Site and Services are intended for users who are 18 years old or older. We do not knowingly collect Personal Information from children under the age of 18. If we become aware that we have inadvertently received Personal Information from a child under the age of 18, we will delete such information from our records. California users under the age of 18 may request the removal of their content or information publicly posted on the Site or Services by e-mailing us at [email protected]. Please note that most of the user content that appears on our Site of Services is stored and controlled by third party providers; thus, complete and comprehensive removal of the content may not be possible.
- Processing of Personal Information
Please be aware that your Personal Information and communications may be transferred to and maintained on servers or databases located outside your state, province, or country. Please be advised that we may process and store information in the United Kingdom. By using the Site or Services, you are agreeing to the collection, use, transfer, and disclosure of your Personal Information.
- Privacy Policy Changes
We may change this Privacy Policy from time to time. If we decide to change this Privacy Policy, we will inform you by posting the revised Privacy Policy on the Site. Those changes will go into effect on the “Revised” date shown in the revised Privacy Policy. By continuing to use the Site or Services, you are consenting to the revised Privacy Policy.
