Skip to Content

LOXURYA · Saudi Arabia

Privacy Policy

Last updated: 5 October 2026

This policy explains how Loxurya in the Kingdom of Saudi Arabia handles personal data when you browse our store, create an account, contact us, or place an order. It covers our current Odoo storefront and our planned domain, www.loxurya.com, once it is connected to this store.

1. Who is responsible for your data?

Loxurya is operated by مؤسسة موقع الأصلي التجارية (Mawqi Al-Asli Trading Establishment), an establishment in the Kingdom of Saudi Arabia, which is responsible for personal data collected through this store. Its Unified National Number is 7017737011. The Arabic name is the registered name shown on the certificate; the English rendering is provided for reference. For privacy enquiries and requests, contact info@loxurya.com. This policy concerns personal data; purchase, delivery, cancellation, and refund conditions are addressed separately in the store's applicable terms.

Download the Commercial Registration Certificate (PDF, Arabic). Certificate issue date: 25 August 2020.

2. Data we collect and where it comes from

  • Contact and account details: your name, email address, phone number, and information you provide when registering or contacting us.
  • Order and delivery details: billing and shipping addresses, purchased items, order amounts, delivery instructions, invoices, and return or refund requests.
  • Payment information: payment method, transaction reference, payment status, and limited payment identifiers returned by the payment provider when online payments are available.
  • Technical information: IP address, browser and device information, request logs, and cookies used to support sessions, security, preferences, and the shopping cart.
  • Communications: enquiries, support correspondence, and information you voluntarily include in your messages.

We receive information directly from you, automatically through your use of the website, and from payment and delivery providers where needed to process your transaction. Required information is identified in the relevant form or checkout. Without essential contact, delivery, or payment information, we may be unable to complete your request or order. Please avoid sending unnecessary sensitive information.

3. Why we use personal data

We use relevant data to manage accounts, process orders and payments, arrange delivery, handle returns and customer support, send service messages, maintain business records, secure the website, and investigate fraud or misuse.

Processing is based on the applicable legal basis under Saudi law, such as carrying out an agreement with you, meeting legal obligations, your consent where required, or a permitted legitimate interest subject to the applicable conditions. Marketing messages require the consent applicable to them; you may withdraw that consent using the message's unsubscribe option or by contacting us. Withdrawing marketing consent does not prevent necessary order or service messages.

4. Online payments

When a payment gateway is enabled, the payment options and provider are shown during checkout. Payment details needed to authorise a transaction are processed through that provider's payment flow, under its privacy terms. Loxurya uses the transaction result and relevant order and payment references to confirm orders, reconcile payments, and process refunds. Do not send card numbers, card security codes, passwords, or one-time verification codes by email or in support messages.

5. Who may receive your data?

Relevant data may be shared with providers supporting the requested service: Odoo and hosting or technical support providers; payment processors and financial institutions; delivery and logistics providers; and professional advisers where necessary. For example, a courier needs delivery contact details, while a payment provider needs transaction information. Disclosure may also be required by law or by a competent authority. Information shared should be limited to what is needed for the relevant purpose.

6. Cookies and similar technologies

The website uses cookies needed for functions such as login sessions, the shopping cart, security, and preferences. You can manage cookies in your browser; blocking essential cookies may prevent some features from working. If optional analytics or advertising technologies are introduced, the relevant information and any legally required consent choices must be provided before they are used. This policy does not treat continued browsing as consent to optional tracking.

7. Retention and protection

Personal data should be kept only for as long as needed for the purpose for which it was collected, including completing orders, handling disputes, and meeting applicable accounting, tax, or other legal retention requirements. Retention depends on the type of record and those requirements. Data should then be securely deleted or anonymised unless a lawful reason requires continued retention.

Protection of personal data requires appropriate technical and organisational measures, including restricting access to authorised persons who need it for their work. No internet transmission or storage method can be guaranteed completely secure. Keep your account credentials private and contact us if you suspect misuse of your account.

8. Processing outside Saudi Arabia

Depending on the hosting and service providers used, processing may involve locations outside Saudi Arabia. Any transfer or disclosure outside the Kingdom must comply with applicable Saudi personal data protection requirements, including the safeguards and conditions relevant to that transfer.

9. Your privacy rights

Subject to applicable legal conditions and exceptions, you may request information about processing, access to your personal data, a readable copy, correction or completion, and destruction of data that no longer needs to be retained. Where processing relies on your consent, you may withdraw it; withdrawal does not affect processing already lawfully carried out or processing supported by another legal basis.

Send requests to info@loxurya.com, describing your request and the account or order concerned. We may need proportionate information to verify your identity before releasing or changing data. Requests are handled within the applicable statutory period. You may also raise a complaint with the competent Saudi data protection authority through its official channels.

10. Children and third-party services

If you are not legally able to make a purchase yourself, involve your parent or legal guardian. A parent or guardian who believes a child supplied personal data without appropriate authorisation may contact us. Links to other websites and services are subject to their own privacy policies.

11. Changes to this policy

We may update this policy when store operations or legal requirements change. The latest version and update date will appear on this page. Where required, material changes will be communicated and new consent requested.