Privacy Policy

for casoffer.sa

Last Updated: [Insert Date]

At casoffer.sa, we respect your privacy and are committed to protecting your personal data in accordance with the applicable laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL), its implementing regulations, and related guidance issued by the competent authorities. This Privacy Policy explains how we collect, use, process, store, disclose, transfer, and protect your information when you use our website and any related services, pages, applications, or platforms.

By using the website, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

In this Privacy Policy, “we,” “us,” “our,” or “the Company” refers to the owner or operator of casoffer.sa and its related platform, website, applications, and services.

2. Scope of This Policy

This Privacy Policy applies to:

• the casoffer.sa website
• any related mobile applications, landing pages, or digital interfaces
• services provided to users, merchants, partners, or business customers through the platform
• communications, inquiries, and interactions related to the use of the platform

3. Information We Collect

We may collect different categories of information, including:

a. Information You Provide Directly

This may include:

• full name
• mobile number
• email address
• password
• city or region
• account profile details
• merchant, store, or business information
• documents or records submitted through forms
• customer support communications
• any other information you choose to provide to us

b. Usage and Device Information

This may include:

• IP address
• browser type
• operating system
• device type
• app version
• access times
• visited pages or screens
• browsing duration
• clicks, searches, and interactions within the website or app
• referral sources and technical identifiers

c. Location Information

If enabled by you through your device, browser, or app permissions, we may collect location information in order to:

• show nearby offers
• improve relevance of content and results
• enhance the user experience
• support localized functionality and analytics

d. Transaction and Activity Information

Where applicable, we may collect information relating to:

• orders
• bookings
• payments
• cancellations
• refunds
• redemptions
• merchant participation
• offer activity and usage history

This does not necessarily mean that we store full payment card details, as payments may be processed by approved third-party payment service providers.

e. Cookies and Similar Technologies

We may use cookies, pixels, SDKs, tags, and similar technologies for:

• platform operation
• remembering preferences
• analytics
• personalization
• campaign measurement
• service improvement
• marketing support

4. How We Use Information

We may use personal data and related information for purposes including:

• creating, verifying, and managing accounts
• operating and maintaining the platform
• displaying relevant offers, promotions, and services
• personalizing user experience
• enabling users to discover nearby offers
• supporting merchants and offer management
• communicating with users, merchants, and business partners
• sending service-related notices, updates, alerts, and notifications
• processing bookings, purchases, payments, refunds, or redemptions, where applicable
• customer support and complaint handling
• analytics, reporting, measurement, and operational monitoring
• fraud detection, abuse prevention, and platform security
• legal, regulatory, and compliance purposes

We may also use personal data and platform usage information, to the extent permitted by applicable law in the Kingdom of Saudi Arabia, for purposes that support, develop, improve, promote, expand, evaluate, restructure, or otherwise serve our business, services, operations, products, platforms, brands, or related commercial activities. This includes, without limitation:

• business development
• service and product improvement
• operational and commercial analytics
• user segmentation and campaign effectiveness measurement
• direct or indirect marketing of our services or related services
• strategic planning
• expansion opportunities
• partnerships
• financing
• investment
• restructuring
• merger transactions
• acquisition transactions
• asset sales
• share sales
• business transfers
• exit transactions
• valuation exercises
• corporate due diligence
• legal, financial, technical, commercial, and operational reviews connected to existing or potential business transactions

All such use shall be subject to applicable law and limited to what is reasonably necessary for those purposes. Privacy policies in Saudi Arabia are expected to state the purposes of processing and the categories of disclosures clearly.

5. Legal Basis for Processing

We process personal data where appropriate and where permitted or required under the applicable laws of the Kingdom of Saudi Arabia, including where processing is necessary for:

• providing requested services
• performing contractual or pre-contractual obligations
• complying with legal or regulatory obligations
• protecting our legitimate business interests, including platform security, fraud prevention, governance, audits, and operational continuity
• handling complaints, disputes, and enforcement matters
• carrying out internal administration and business planning
• obtaining consent, where consent is required under applicable law

6. Sharing and Disclosure of Information

We may share information, where necessary and to the extent permitted by applicable law, with:

• hosting providers
• cloud and infrastructure providers
• technical maintenance and support providers
• payment service providers
• SMS, email, communications, and notification providers
• analytics, performance, and technology service providers
• merchants, stores, vendors, or service providers, to the extent necessary to provide the relevant offer or service
• legal, regulatory, judicial, or governmental authorities where required
• fraud prevention, cybersecurity, audit, compliance, and investigation service providers
• professional advisers, including legal, financial, technical, tax, strategic, valuation, and audit advisers

We may also share or make available personal data, where necessary and to the extent permitted by applicable law in the Kingdom of Saudi Arabia, with:

• current or prospective investors
• funding sources
• lenders
• acquirers
• purchasers
• business partners
• merger parties
• restructuring parties
• valuation counterparties
• parties involved in expansion, acquisition, divestment, asset sale, share sale, exit, or similar business matters

Such sharing may occur for legitimate business purposes, including due diligence, valuation, transaction structuring, investment review, strategic assessment, corporate reorganization, post-transaction integration planning, and related commercial or legal processes, provided that such disclosure is subject to appropriate confidentiality, access control, and data protection measures, and is carried out in accordance with applicable Saudi laws and regulations. Saudi guidance expects privacy policies to identify disclosure purposes and the categories of parties that may receive personal data.

We do not sell personal data as a standalone commercial product.

7. Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, and for such additional periods as may be required or permitted for legal, regulatory, contractual, governance, dispute-resolution, audit, security, or operational reasons.

After the relevant retention period, personal data may be:

• deleted
• anonymized
• aggregated
• archived securely
• retained in restricted-access form where required by law or legitimate business need

8. Data Security

We implement reasonable technical, organizational, contractual, and administrative safeguards designed to protect personal data against unauthorized access, misuse, loss, destruction, alteration, leakage, or unlawful disclosure.

However, no digital transmission, storage system, or online platform can guarantee absolute security at all times.

9. Your Rights

Subject to the applicable laws and regulations of the Kingdom of Saudi Arabia, you may have rights in relation to your personal data, including the right to:

• be informed about the legal basis and purpose of collection
• know what personal data we process about you
• request access to your personal data
• request a copy of your personal data in a readable and clear format
• request correction, completion, or updating of inaccurate or incomplete data
• request destruction or deletion of personal data in cases permitted by law
• withdraw consent where processing is based on consent
• submit complaints or exercise any other rights available under applicable law

Saudi PDPL materials expressly describe rights such as the right to be informed, the right of access, the right to request correction, and the right to request destruction in certain cases.

To exercise any such rights, you may contact us using the details set out below.

10. Location Services and Notifications

If you enable permissions through your browser, app, or device:

• we may use location data to display nearby or relevant offers
• we may send push notifications, email notifications, SMS messages, or in-platform notices relating to offers, account activity, updates, or services

You may manage or disable such permissions through your device settings, browser settings, app settings, or account settings, depending on how you access the platform.

11. Cookies and Tracking Tools

We may use cookies and related technologies for purposes such as:

• ensuring proper platform functionality
• saving user preferences
• recognizing returning users or devices
• improving speed, stability, and performance
• understanding platform usage
• measuring campaign or marketing performance
• improving content, offers, and user journeys
• supporting business intelligence and analytics

You may be able to disable certain cookies through browser controls, although doing so may affect some platform features or functionality.

12. Children’s Privacy

Our services are not directed primarily to children unless expressly stated otherwise. The platform must not be used in violation of legal capacity, parental authorization, or consent requirements applicable under the laws of the Kingdom of Saudi Arabia.

If we become aware that personal data has been collected inappropriately or without required authorization, we may restrict, delete, or otherwise address such data as appropriate.

13. Third-Party Websites and Services

The platform may contain links to third-party websites, services, software tools, social media pages, payment channels, or external resources.

We are not responsible for:

• the privacy practices of third parties
• the content of third-party services
• the policies, terms, or security measures of third parties
• losses, claims, or issues arising from dealings with third parties outside our direct control

Use of third-party services remains subject to their own terms, notices, and privacy policies.

14. International or External Data Transfers

Personal data may be processed, hosted, stored, accessed, or transferred inside or outside the Kingdom of Saudi Arabia where operationally necessary and where permitted under applicable law.

Where cross-border transfers occur, they shall be handled in accordance with the requirements applicable under Saudi law, including any relevant transfer rules, safeguards, contractual mechanisms, or regulatory conditions that may apply. Saudi materials also address transfers outside the Kingdom and associated safeguards.

15. Disclaimer and Limitation of Liability

To the maximum extent permitted by the applicable laws and regulations of the Kingdom of Saudi Arabia:

• your use of the platform is at your own risk
• the platform is provided on an “as is” and “as available” basis
• we do not guarantee uninterrupted availability, absolute security, or error-free performance at all times
• we shall not be liable for any indirect, incidental, consequential, special, punitive, or exemplary damages
• we shall not be liable for loss of profits, loss of opportunity, loss of business, loss of goodwill, loss of data, or interruption losses
• we shall not be liable for acts, omissions, failures, breaches, delays, service interruptions, cyber incidents, or security events involving independent third parties, service providers, merchants, payment providers, infrastructure providers, or other external parties outside our reasonable control
• we shall not be liable for any lawful processing, disclosure, sharing, transfer, review, or use of data carried out for the purposes described in this Privacy Policy
• we disclaim, to the fullest extent permitted by law, any liability arising from reliance on third-party systems, merchant content, external links, or user misuse of the platform

Nothing in this Privacy Policy shall be interpreted as excluding or limiting any right, remedy, protection, or obligation that cannot lawfully be excluded or limited under the laws of the Kingdom of Saudi Arabia. This is the strongest safer formulation; Saudi law and guidance do not support eliminating all statutory rights through a privacy policy.

16. Changes to This Privacy Policy

We may update, amend, revise, restate, or replace this Privacy Policy from time to time.

Any revised version becomes effective from the date it is published on the platform, unless another effective date is stated. Continued use of the platform after publication of the revised version constitutes acknowledgment of the updated policy to the extent permitted by law.
17. Contact Us

For inquiries, notices, or requests relating to this Privacy Policy or your personal data, please contact us at: info@casoffer.sa