Privacy Policy

1. Who we are

KryticalStyle is operated by مؤسسة الاسلوب المهم للتجارة, a business registered in the Kingdom of Saudi Arabia under Commercial Registration number 1009125890. We are the party responsible for the personal data described in this policy. You can reach us about anything in it at privacy@kryticalstyle.com.

2. What we collect

We collect the following, almost all of it given to us directly by you when you place an order or create an account:

• Identity and contact details — your first and last name, email address and mobile number.
• Delivery address — your national short address, building number, street, district, city and postal code, together with the map location you confirm at checkout. We keep those coordinates because a written address in Saudi Arabia can be some distance from the actual door, and the courier delivers to the point you confirmed.
• Order details — what you bought, the amount, the payment method used and the delivery status.
• Account details, if you create an account — your name, email and a securely hashed version of your password. We never store your password in a readable form and cannot recover it; a reset link is the only way back into an account.
• Usage data — pages viewed and similar analytics, collected only if you accept analytics cookies.

3. Card details are never held by us

When you pay by card, your card number, expiry date and security code are sent from your browser directly to our payment provider, Moyasar. They do not pass through our servers and we never store them. We receive only the result of the payment: whether it succeeded, the amount, and a reference number. The same is true of Apple Pay and STC Pay.

4. Why we use it

• To take and fulfil your order, and to deliver it to you — without this we cannot sell you anything.
• To process payment and, where needed, refunds.
• To contact you about your order — confirmation, shipping and tracking messages.
• To answer your questions and handle returns.
• To keep records we are required to keep, and to detect and prevent fraud.
• To understand how the site is used, so we can improve it — only with your consent.

5. Who we share it with

We do not sell your personal data. We share it only with the service providers we need in order to run the store, and only the part each one needs:

• Moyasar (Saudi Arabia) — payment processing. Receives your card or wallet details directly and the order amount.
• Tamara (Saudi Arabia) — if you choose to pay in instalments. Receives your name, contact details and order contents so they can assess and manage the instalment plan.
• Aramex — warehousing and delivery. Receives your name, full delivery address, phone number and, for cash-on-delivery orders, the amount to collect from you.
• HERE — address lookup. Receives the short address you enter, or the map coordinates you drop, in order to return a street address.
• Resend — sending email. Receives your email address and the contents of order, shipping and password-reset messages.
• Google Analytics — usage statistics, only if you accept analytics cookies.
• Cloudflare and CARTO — serving product images and the checkout map. They receive your IP address as part of any normal web request.

6. Transfers outside Saudi Arabia

Moyasar, Tamara and Aramex operate in the Kingdom. HERE, Resend, Google, Cloudflare and CARTO are international providers, so some of your data is processed outside Saudi Arabia. We use them because they are needed to look up addresses, send email, serve images and show the delivery map. We share only what each one needs for that purpose.

7. Cookies

We use two kinds, and you choose between them in the banner shown on your first visit:

• Strictly necessary — these keep your cart, your sign-in session and your cookie choice itself. The site cannot work without them, so they are always on.
• Analytics — Google Analytics, used to count visits and see which pages are used. These are off until you accept them, and choosing "Essentials only" keeps them off.

8. How long we keep it

We keep order records for as long as we need them for accounting, tax and warranty purposes. Account details are kept until you ask us to delete the account. Analytics data is kept according to Google Analytics retention settings.

9. Your rights

You can ask us to show you the personal data we hold about you, correct anything wrong, or delete your account and its data. You can withdraw your consent to analytics cookies at any time by changing your cookie choice. To exercise any of these, email privacy@kryticalstyle.com and we will respond as quickly as we can. Some data has to be kept even after an account is deleted where the law requires it — order and payment records, for example.

10. How we protect it

The site is served only over an encrypted connection. Passwords are stored hashed, never in readable form. Card details are never held by us at all. Access to order data is limited to the people who need it to run the store.

11. Children

This store is not directed at children, and we do not knowingly collect data from anyone under 18. If you believe a child has given us personal data, contact us and we will remove it.

12. Changes and contact

We update this policy when what we do changes, and the date at the top always shows the current version. For any question about your data, or to make a request, email privacy@kryticalstyle.com.