سياسة الخصوصية

Omixus (“we” or “the Store”) is committed to protecting your privacy and personal data in every interaction with us, whether when requesting our mobile maintenance service in which our technician comes to you wherever you are, or when purchasing from our online store for mobile phones and accessories. This Policy explains what data we collect, why we collect it, the legal basis for processing it, with whom we share it, how long we retain it, your rights regarding it, and how we protect it, all in accordance with the Personal Data Protection Law (PDPL) in the Kingdom of Saudi Arabia and its Implementing Regulations. By using our website or requesting any of our services, you acknowledge that you have reviewed this Policy.

1. Identity of the Controller and Contact Details

Omixus is the “Controller” of the personal data collected from you, meaning the entity that determines the purposes and means of processing your data.

• Legal name of the establishment: Omixus Establishment
• Registered address: Riyadh, Al-Khaleej District – Riyadh, Kingdom of Saudi Arabia
• Unified National Number of the establishment: 7034447743
• Privacy requests channel: email [email protected] or WhatsApp +966570984090
• Verification: an establishment verified on the “Maroof” platform (maroof.sa)

Our establishment falls within the category of small enterprises that are not mandatorily required by the law to appoint a “Personal Data Protection Officer.” Nonetheless, we have dedicated the contact channel above to receive and respond to any request or inquiry relating to your personal data.

2. Personal Data We Collect

We collect only the data necessary to provide our services, including, depending on your interaction with us:

• Identity and contact data: name, mobile number, email.
• Address and location data: the district and address to which you request the technician to come for the maintenance service, or the delivery address for your order from the store. Your home or field location is collected for the purpose of the visit only, and is handled to a necessary and limited extent.
• Order and service data: device type and model, fault description, date of the visit or order, your order and invoice history, the type of part agreed upon, and warranty certificate data.
• Payment data: we work with payment service providers to complete purchase transactions; we do not store your full credit card numbers with us, as they are processed by approved payment providers through secure channels.
• Device and browsing data: IP address, browser and device type, session identifiers, and cookies when you browse the website.

In the ordinary course of our business, we do not collect any “sensitive data” such as health, ideological, or security data. Should it become necessary to handle highly private data, this will not take place except with your explicit consent and in accordance with the law.

3. Purposes of Data Processing

We process your personal data exclusively for the following purposes:

• Carrying out maintenance bookings and arranging the technician’s arrival at your location.
• Processing purchase orders from the store, preparing, shipping, and delivering them to you.
• Issuing invoices, proving payment, and fulfilling legal obligations.
• Managing the warranty and after-sales services, and issuing and verifying the warranty certificate.
• Providing support and communicating with you via WhatsApp, phone, or email regarding your order or service.
• Preventing fraud, protecting the store and customers, and ensuring the security of transactions.
• Improving our services and the website experience.
• Sending offers and marketing messages – and this only after obtaining your prior consent, which you may withdraw at any time.

4. Legal Basis for Processing

We rely on a clear legal basis for processing your data, which differs according to the purpose:

• Performance of the contract: processing the data necessary to perform the maintenance or purchase order you have requested (such as your name, address, mobile number, and fault description).
• Consent: the basis we rely on for marketing messages and non-essential cookies; this is consent that is specific to each purpose, documented, and you may revoke it at any time without affecting the lawfulness of processing carried out prior to its withdrawal.
• Legal obligation: retaining invoice and transaction records for the periods required by commercial and statutory regulations.
• Legitimate interest: purposes such as fraud prevention, securing the website, and improving the service, in a manner that does not conflict with your rights and freedoms, and without relying on it for any sensitive data.

5. Sharing Data with Third Parties

We do not sell your personal data. We share it only to the extent necessary with specific categories of recipients in order to complete the service, namely:

• Payment processors: payment service providers (mada, Visa, Mastercard, STC Pay, Apple Pay) and installment partners (tabby and tamara), in order to complete, secure, and verify the payment process.
• Shipping and delivery companies: we share the name, address, and mobile number with the shipping company to deliver your order from the store.
• WhatsApp / Meta: we communicate with you via WhatsApp for maintenance booking and support, and accordingly your messages pass through the WhatsApp / Meta infrastructure and are subject to its terms and policies.
• Governmental and competent authorities: where there is a legal obligation requiring this or upon an official request from a competent authority.

We undertake to enter into written “data processing agreements” with the service providers who process data on our behalf, obligating them to a level of protection equivalent to that required by the law, and prohibiting them from using your data for any purpose other than the one agreed upon. In the event of correcting any data we have previously shared, we notify the parties that received it of that correction.

6. Transfer of Data Outside the Kingdom

Some of your data may be transferred or processed outside the Kingdom of Saudi Arabia, particularly when communicating via WhatsApp / Meta or using certain payment or analytics tools whose servers are managed abroad. Such transfer takes place in accordance with the controls of the law: for a legitimate purpose, without prejudice to the security and interests of the Kingdom, with the minimum amount of data necessary, and in a manner that ensures a level of protection no less than that provided by the law within the Kingdom, or by relying on the safeguards approved by the competent authority where needed.

7. Data Retention and Destruction Period

We retain your personal data only for the period necessary to achieve the purpose for which it was collected, as follows:

• Order, invoice, and transaction data: retained for the period required by the commercial and statutory regulations in the Kingdom, then destroyed.
• Maintenance booking data and location data: retained to the extent necessary to manage the visit, the warranty, and after-sales service, then destroyed once the need for it no longer exists.
• Contact and marketing data: retained for as long as your consent remains in effect, and destroyed upon withdrawal of consent.

When the purpose of the processing no longer exists, we cease collecting the data and work to destroy it securely, including backup copies, or to retain it in an anonymized form that does not allow you to be identified.

8. Your Rights as a Data Subject

The Personal Data Protection Law guarantees you the following rights regarding your data held by us:

• The right to be informed: to know the legal basis and the purpose of collecting your data.
• The right of access: to view your personal data available with us.
• The right to obtain a copy: to obtain a copy of your data in a clear and readable format.
• The right to correction: to request the correction, updating, or completion of your data.
• The right to destruction: to request the deletion of your data whenever the need for it no longer exists, subject to any legal retention obligation.
• The right to withdraw consent: to withdraw your consent at any time, including unsubscribing from marketing messages.

To exercise any of these rights, contact us via [email protected] or WhatsApp +966570984090. We will respond to your request within a period not exceeding 30 days, extendable once for a similar period where necessary, with prior notice to you. If you believe that the processing of your data violates the law, you have the right to file a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA).

We recommend sending privacy and data subject rights requests via email [email protected] as the primary channel. When communicating via WhatsApp, please do not attach images of identity documents or any sensitive data, and we will direct you to complete any required verification through a secure channel.

9. Data Security

We apply appropriate organizational and technical measures to protect your data from unauthorized access, disclosure, alteration, or destruction, including access controls and securing payment and communication channels. In the event of any leak or breach of personal data that may harm you, we undertake to notify the Saudi Data and Artificial Intelligence Authority within the statutory period, and to notify those affected without undue delay and in clear language.

10. Technicians’ Pledge: We Never Ask for Your Device Lock Code

Because the privacy of your device is part of the privacy of your data, we undertake the following pledge to you when performing any maintenance service:

• Our technicians will never ask you for the device lock code, the Apple ID account, the Google account, or two-factor authentication (2FA) codes, nor will they ask you to perform a factory reset.
• Our maintenance work is hardware work only, and is carried out in front of you without your device leaving your sight.
• We do not copy, store, transfer, or share any data inside your device with any third party.
• Our access to the device’s content is limited to the extent necessary to complete the repair only, and where there is a technical need to access the system, this is done with your permission, and you may change or delete any code you have permitted immediately upon receiving your device.
• Backup responsibility: you are responsible for taking a full backup of your data (photos, contacts, files, and applications) before handing over the device. We do not guarantee the integrity of the data already existing on the device, nor do we bear responsibility for its loss for reasons predating the service, while we take the utmost care in handling your device.
• Proof of device ownership: by requesting the maintenance service, you acknowledge that you are the legal owner of the device or are authorized by its owner to repair it. We have the right to request proof of your ownership of the device where needed, and we reserve our right to refuse or suspend providing the service for any device that is proven or suspected to be lost or stolen, without the need to register the device’s IMEI number or serial number.

11. Cookies

We use two types of cookies on our website:

• Essential cookies: necessary for the basic functioning of the website, such as session management, the shopping cart, and order completion, and they cannot be disabled without affecting the operation of the website.
• Non-essential analytical / marketing cookies: they help us understand and improve the use of the website, and are not activated except with your consent, and you may refuse them or withdraw your consent to them at any time.

You can control or delete cookies through your browser settings, noting that disabling some of them may affect certain functions of the website.

12. Minors’ Privacy

Our services and products are directed at adults. Where the matter relates to the data of a person under 18 years of age, processing it requires the consent of the guardian, and we give it special care in accordance with the law. If we become aware that we have collected the data of a minor without valid consent, we take prompt action to destroy it.

13. Updates to This Policy

We may update this Policy from time to time to keep pace with changes in our services or in the applicable regulations. The latest version published on this page is the one in effect, and it applies as soon as it is published. We advise you to review it periodically. When making material changes, we endeavor to notify you by appropriate means.

14. Governing Law

This Policy is governed by and interpreted in accordance with the regulations of the Kingdom of Saudi Arabia, and in particular the Personal Data Protection Law and its Implementing Regulations. This Policy complements your statutory rights and does not override them, and in the event of any conflict between it and the law, the law shall apply. The Arabic version is the authoritative reference.

This Policy is subject to the regulations of the Kingdom of Saudi Arabia, and the competent judicial and administrative authorities in the Kingdom have jurisdiction to consider any dispute arising from it, without prejudice to your right to escalate to the Ministry of Commerce (hotline 1900) through a commercial report.

Last updated: 4 June 2026

For any inquiry or request relating to your privacy and personal data, contact us via WhatsApp +966570984090 or email [email protected].