Privacy policy

The party responsible for your data is Jazirat Alfa Altijariyah Aldawliyah Company, a one-person limited liability company, Commercial Registration 7055311984, of [REGISTERED ADDRESS], trading as "Olfa".

For anything about your data: info@alfaisland.com, or WhatsApp [WHATSAPP NUMBER].

• Contact details: your name, Saudi mobile number, email if you add one, and preferred language.
• Address details: city, district, short National Address, street, building and apartment number, to deliver orders and carry out home visits.
• Orders: products, amounts, discounts, promo codes, delivery status and your notes.
• Bookings: service, date, time, where it happens, your pet's type and name, address and your notes.
• Olfa Plus: your plan, payment period, city, the animals at home, pause and cancellation dates, and a cancellation reason if you give one.
• Your pet's profile: name, type, breed or tank size and care notes. Our team may add birth date, weight, next vaccination date and medical notes.
• Contact messages and back-in-stock requests: name, mobile, email and your message, or your mobile and the product.
• Our team's records: service notes, follow-up dates, lists recommended for you, a log of messages we sent you, and photos of your pet we send on WhatsApp during a service.
• Login data: your mobile number, the login code in hashed form, login attempts, and a hashed session token.
• Consent record: when you agreed to the terms and this policy, and which version.
• Payment data: we keep only the transaction reference and status. You enter card details on the payment provider's page, and we do not store them.
• Technical data: pages you visit, device type, language and traffic source, as described under Analytics below.

Your name, mobile, address and basic details of your pet are needed to carry out an order or booking, and we cannot complete it without them. Email, notes, your pet's name and a cancellation reason are optional.

• Performing our agreement with you: taking and fulfilling orders, bookings and memberships, collecting and refunding payments, delivery, related WhatsApp updates, and login codes.
• Legal obligations: invoices and tax records, veterinary and boarding records, and requests from competent authorities.
• Our legitimate interests: preventing fraud and abuse, protecting our systems, and measuring and improving the site using data that does not directly identify you. We do not use this basis for sensitive data.
• Your consent: marketing messages and any other use we expressly ask you to agree to. You can withdraw consent at any time.

We use your data only for the purposes listed here. If we need a new purpose, we will tell you before starting.

We do not sell your personal data. We share it only with those who need it to provide the service, and only as much as they need:

• The relevant Olfa team: vets, groomers, technicians, delivery staff and customer care.
• Our payment provider [PAYMENT PROCESSOR]: name, mobile, email, order number and amount.
• WhatsApp Business (Meta): your mobile number, notification content and login codes, to send you messages.
• Our delivery partner [DELIVERY PARTNER]: name, mobile, address and order number.
• Our hosting and storage provider [HOSTING PROVIDER AND LOCATION].
• Our email provider [EMAIL PROVIDER]: internal alerts to our team, which may include an order number or the name of someone who wrote to us.
• Government and judicial bodies where the law requires it, such as the Zakat, Tax and Customs Authority, the Ministry of Environment, Water and Agriculture, and the data protection authority.

Our service providers are bound by agreements to protect your data and to use it only on our instructions.

WhatsApp Business processes messages on Meta's servers, which may be outside the Kingdom. We transfer data abroad only as far as needed to provide the service, and in line with the Regulation on Personal Data Transfer Outside the Kingdom and the safeguards it requires. Site data is held at [HOSTING PROVIDER AND LOCATION].

We use no advertising cookies or third-party trackers. We use only:

• rafeeq_session: keeps you logged in, for 30 days or until you log out.
• city: remembers your city, for one year.
• pet: remembers the pet type you chose, for one year.
• Browser local storage: keeps your cart and favourites on your own device. Your favourites do not reach us.

You can delete these in your browser settings, which may log you out or empty your cart.

You choose which of these we use in Cookie settings, at the bottom of every page. The login cookie and your cart are always on because the site needs them. Remembering your city and pet only happens with your agreement.

We measure site use with our own tool, without cookies, without storing your IP address, and without linking visits to customer accounts. We record the page and event, such as adding to cart, the device type, language and traffic source, with an anonymous code that changes daily. IP addresses are used briefly to limit abuse of our forms and are not stored in analytics.

We run this tool only if you allow analytics in Cookie settings, and you can turn it off at any time.

• Unpaid or failed orders: deleted after 30 days, unless under review.
• Login codes: valid for 5 minutes, and deleted once used or expired.
• Login sessions: 30 days.
• Log of messages sent, and back-in-stock requests: 90 days.
• Analytics records: 400 days.
• Paid orders: at least six years for tax records, with your personal details removed if you ask for deletion.
• Veterinary and boarding records: for the period veterinary rules require.
• Account, pet profiles, bookings and contact messages: while you use our services, then [INACTIVITY PERIOD] after your last activity, after which we destroy them or remove what identifies you.

If data is connected to a case before a court, we keep it until the case ends.

• To know how and why your data is collected and processed.
• To access your data and get a free copy in a common electronic format.
• To correct, complete or update your data. You can edit your profile and your pets' profiles directly in your account.
• To ask us to destroy data we no longer need.
• To withdraw your consent at any time. This does not affect what happened before withdrawal or processing on another basis.

To use any of these rights, write to info@alfaisland.com or message us on WhatsApp. We will verify your identity and respond within 30 days. We may extend this by up to 30 more days, and will tell you why beforehand.

When we accept a deletion request, we delete your account, pet profiles and notes, and remove your name, mobile and address from orders and bookings. Paid orders stay without your personal details, because tax rules require us to keep them. If you have an order in progress, we finish deleting after it is delivered.

We send marketing messages only with your express consent. Agreeing to the terms at checkout is not consent to marketing. Every message names Olfa, and you can stop them free of charge at any time by replying or writing to us. We will stop straight away.

Messages about orders and appointments, login codes, and back-in-stock alerts you asked for are part of the service and are not marketing.

We apply technical and administrative measures to protect your data, including hashing login codes and sessions and limiting access to the relevant team. If your data is leaked or accessed unlawfully, we will notify the competent authorities within the legal time limits, and tell you without delay if it may harm your data or rights, including what happened, what we did and what you can do.

Our services are for people with full legal capacity. If we learn that someone without it gave us their data without a guardian's consent, we will delete it.

If you are unhappy with how we handled your data, please write to us first at info@alfaisland.com. You may also complain to the Saudi Data and AI Authority (SDAIA) through its National Data Governance Platform, within 90 days of the incident or of learning about it.

We may update this policy. We will publish the new version here with its date, and tell you about any material change before it applies.

This policy is available in Arabic and English. If they differ, the Arabic text prevails.