Privacy Policy

Last updated: June 2026 · Compliant with Saudi Personal Data Protection Law (PDPL)

1. Data We Collect

When you place an order or contact us, we collect:

• Full name, email address, phone number
• Delivery address (city, district, street, postal code)
• Order details and transaction reference
• Device and browser information (via standard web logs)

We do not store your card number, CVV, or payment credentials. All payment data is processed directly by Moyasar (PCI DSS certified).

2. How We Use Your Data

• To process and fulfil your order
• To issue ZATCA-compliant tax invoices via Qoyod
• To send order confirmations, shipping updates, and delivery notifications
• To respond to customer service enquiries
• To comply with legal and regulatory obligations in the Kingdom of Saudi Arabia

3. Data Sharing

We share your data only with service providers necessary to fulfil your order:

• Moyasar — payment processing
• Qoyod — accounting and ZATCA e-invoicing
• ZATCA — as required by Saudi e-invoicing law
• Delivery personnel (name, phone, address only)

We do not sell, rent, or share your data with third parties for marketing purposes.

4. Data Retention

Order and invoice data is retained for a minimum of 6 years as required by ZATCA regulations. You may request deletion of your personal profile data (excluding legally required records) by contacting us.

5. Your Rights (PDPL)

Under the Saudi Personal Data Protection Law you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of data (subject to legal retention requirements)
• Withdraw consent where processing is consent-based

To exercise these rights, contact us at hello@aurastone.com.

6. Cookies

We use only essential cookies required for the shopping cart and session management. We do not use tracking or advertising cookies.

7. Security

We take reasonable technical and organisational measures to protect your data. Payment processing is handled entirely by Moyasar over encrypted (TLS) connections.

8. Contact

Privacy enquiries: hello@aurastone.com · WhatsApp: +966 50 000 0000