Privacy & Consumer Data Protection Policy
Privacy and Consumer Data Protection PolicyThis Privacy Policy is issued by Hit Zone Establishment [CR no. 7050950521], the data controller responsible for your personal data.
At Hit Zone Store, we place the highest importance on protecting your personal data. This policy explains how we collect, use, and safeguard your personal information as a consumer when interacting with our store, which is operated through the Salla platform. Salla processes data on behalf of the store by providing the technical infrastructure and services necessary for its operation. Salla or the store may also engage additional service providers to process data in accordance with the store’s instructions and in compliance with the Personal Data Protection Law in the Kingdom of Saudi Arabia.
Data We Collect
We retain only the information necessary to provide our services, including:
Consumer Personal Information: Name, email address, mobile number, and delivery addresses.
Account Data: Username, password.
The store is intended for individuals aged 18 and above. We do not knowingly collect personal data from minors without the consent of their legal guardian and will take steps to delete any such data if collected without the required consent.
Purpose of Processing Personal Data
We use your data for the following purposes:
Creating and managing your personal account on the store.
Completing purchases, shipping products, and issuing invoices.
Communicating with you regarding order status or technical support.
Sending marketing messages, promotional offers, and newsletters - but only where you have given your prior, explicit, and separate consent to receive them. We do not send marketing communications on the basis of your mere use of the platform. You may withdraw this consent and opt out at any time, free of charge, through the unsubscribe link in every message or by contacting our customer service team. Withdrawing marketing consent will not affect the processing necessary to complete your purchases or provide our core services.
Legal Basis for Processing
Your personal data is collected and processed based on your consent, for the purpose of completing sales and delivery operations, and where applicable your subscription to newsletters or promotional offers.
Sharing Data with Third Parties
Salla Platform: Since our store operates through the Salla platform, the platform provides the technical infrastructure necessary for data processing. As Salla continuously works to enhance the experience and performance of its merchants, it regularly reviews the number of consumers interacting with the stores and their purchasing activities.
Logistics and Technical Service Providers: You acknowledge and expressly agree that, in certain cases, the store may need to share relevant information with strategic or logistical third-party service providers, including shipping companies, payment solution providers, or technical service providers, for the purpose of enabling them to perform tasks or deliver services related to the store or its operations.
This information is shared strictly on a need-to-know basis and only to the extent necessary to achieve the legitimate purpose related to the service. Such sharing is carried out in accordance with the provisions of the Personal Data Protection Law in the Kingdom of Saudi Arabia, and Salla undertakes to ensure that the relevant service providers maintain the confidentiality of the information and use it solely for the specified purpose.
We may also disclose your personal data where required by law, regulation, or a binding order from a competent judicial or regulatory authority, or where necessary to protect our legal rights, prevent fraud, or address breaches of our terms of use.
Rights of the Personal Data Owner
Right to be informed: To know how your data is collected, the legal basis for processing it, how it is stored and destroyed, and with whom it may be shared.
Right of access: To request a copy of your personal data.
Right to rectification: To request correction of inaccurate, incorrect, or incomplete personal data.
Right to erasure: To request deletion of your personal data under certain circumstances, unless a legal requirement mandates retention for a specific period.
Right to withdraw consent: To withdraw your consent to data processing at any time, unless legitimate purposes require otherwise.
How to Exercise Your Rights and Contact Us
You may exercise any of the rights set out above by submitting a request through the following channels:
Customer service: +966559753171
Postal address: 8782 Othman Ibn Afaan Branch St., 3981 Al Narjis Dist., Riyadh 13323 KSA [RANA8782]
We will respond to your request as soon as possible and, in any event, within the period prescribed under the Personal Data Protection Law and its Implementing Regulations (generally thirty (30) days).
We do not charge a fee for exercising your rights, save in the limited circumstances permitted by law, and we may ask you to verify your identity before acting on a request.
Right to lodge a complaint: If you believe your personal data has been processed in breach of the Personal Data Protection Law, you may lodge a complaint with the competent supervisory authority, the Saudi Data and Artificial Intelligence Authority (SDAIA), within ninety (90) days of becoming aware of the incident.
Cross-Border Transfer of Data
Your personal data is principally processed and stored within the Kingdom of Saudi Arabia. Where transfer outside the Kingdom is necessary – for example to a service provider hosting data abroad – this will be done only in accordance with the Personal Data Protection Law and the Regulation on Personal Data Transfer outside the Kingdom, and after ensuring an appropriate level of protection.
Data Security and Retention
Your data is stored in a secure technical environment provided by the Salla platform, which employs advanced protection systems to maintain confidentiality.
Despite significant security efforts, the nature of the internet does not allow for a 100% guarantee against emerging cyber threats. We advise consumers to keep their account login details confidential.
We commit (together with Salla) to notifying you and the relevant authorities in the event of any unauthorized data breach and to taking all necessary technical measures to mitigate its impact.
We retain your data only for the period necessary to fulfil the purposes for which it was collected or as required by commercial and tax regulations in the Kingdom.
Cookies
We use cookies and similar technologies to operate the store, remember your preferences, analyse traffic, and – where consent is provided – personalise content and advertising.
We categorise them as follows:
Strictly necessary (essential): required for the store to function (e.g. maintaining your cart and login session). These do not require consent and cannot be switched off.
Functional: remember your preferences and choices to enhance your experience.
Performance and analytics: help us understand how the store is used so we can measure and improve performance.
Advertising and targeting: used, where you consent, to deliver and measure relevant offers and advertising. On your first visit we will request your consent for all non-essential cookies. You may accept, reject, or customise your preferences at any time through the cookie settings on the store or your browser settings. Refusing non-essential cookies will not prevent you from using the store, though some features may be affected.
Communication and Updates
Hit Zone Store reserves the right to add or amend any provisions of this Privacy Policy to reflect legal or technological changes.
If you have any questions regarding your data privacy at Hit Zone, our customer service team will be happy to assist you.