Privacy Policy

1. Information We Collect

We collect the following information when you use our services: email address (for login via OTP), full name, phone number, delivery or pickup address, and payment-related information (such as bank transfer receipts or STC Pay sender details). We also collect technical data such as IP address, browser type, and pages visited for security and analytics purposes.

2. How We Use Your Information

Your information is used to: process your account login and authentication, arrange book pickups and deliveries, process payments and send confirmations, communicate shipment and order updates, respond to your inquiries, improve our website and services, and comply with legal obligations under Saudi Arabian law.

3. Information Sharing

We do not sell or rent your personal information to third parties. We share specific information with courier services (name, phone, address) solely for the purpose of delivering or picking up books. Payment processors receive only the information necessary to process your transaction. We may disclose information to authorities if required by law.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encrypted password-less authentication (OTP), secure database storage, and restricted access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

5. Cookies and Sessions

Kitaaby uses essential session cookies to maintain your login state, language preference, and shopping cart. We do not use third-party advertising cookies. Analytics data is collected in aggregate and does not identify individual users.

6. Your Rights

You have the right to: access your personal data stored with us, request correction of inaccurate information, request deletion of your account and associated data, and opt out of marketing communications. To exercise these rights, please contact us at info@kitaaby.com.

7. Data Retention

We retain your personal data for as long as your account is active. After account deletion, we may retain certain transaction records for legal and accounting purposes for up to 5 years as required by Saudi Arabian regulations.