Every address you type in, every item you add to your cart, every message you send to a seller- that's data you trust us with. This policy explains exactly what we collect, why we collect it, what happens to it, and the rights you hold over it under Saudi law.
It applies to every buyer, seller, and visitor across Saudi Arabia and the Gulf region. Reading it matters. Using the platform means you've read it.
We update this policy when our practices change. Material updates, ones that affect how your data is used or what rights you have, come with at least 15 days' notice by email and in-app. Minor corrections go live when posted. Continuing to use iRazzh after an update means you accept the revised terms.
Entity: iRazzh
Registered Address: Dammam, Kingdom of Saudi Arabia
Data Protection Contact: privacy@iRazzh.com
iRazzh is a digital e-commerce marketplace headquartered in Saudi Arabia, purpose-built for buying and selling consumer, wholesale, and retail products across the Gulf region. All registered users agree to operate within defined terms when using our platform to list, purchase, or interact with products and services.
This platform is intended for adults only. If a minor accesses our services without verified parental or guardian supervision, responsibility for that access rests solely with the supervising adult.
iRazzh collects only the data that is necessary, relevant, and proportionate to delivering our services to you. The categories of personal data we collect include:
A) IDENTITY DATA
Your full name, date of birth, gender, username or related identifier, and where legally required, your national ID number or Iqama details.
A) IDENTITY DATA
Your email address, mobile or telephone number, billing address, and delivery addresses.
C) FINANCIAL DATA
Bank account details and payment card information are necessary for processing transactions.
Note: We never store full card numbers. Payment processors share only the transaction authorization status with us. All financial data handling complies with applicable Saudi financial regulations
D) TECHNICAL DATA
Your IP address, device type, operating system, browser type and version, time zone settings, browser plug-in details, login data, and other technical identifiers generated when you access our platform.
E) USAGE DATA
Information about how you browse, navigate, and interact with our website or application, including pages visited, search queries, Wishlist activity, saved items, and session behavior.
F) LOCATION DATA
General location data derived from your IP address is collected automatically. Precise GPS location is collected only with your explicit prior consent and only where relevant to delivery or service features.
G) MARKETING & COMMUNICATIONS DATA
Your preferences, consents, and opt-in records for receiving promotional communications, newsletters, and personalized offers from IRazzh.
H) TRANSACTION & ORDER DATA
Your order history, return records, payment confirmations, and any communications exchanged with sellers or our support team in connection with a transaction.
iRazzh collects personal data through the following means:
Directly: when you register, place an order, contact support, leave a review, subscribe to updates, or fill in any form on the platform.
Automatically: through cookies, server logs, and tracking technologies that capture technical and usage data while you're on the platform. You can disable non-essential cookies; the platform will still work, but some personalized features may not.
From third parties: social sign-in providers like Apple or Google share your name, email, and profile photo when you choose to register through them. Payment processors share only the transaction authorization status. Logistics partners share delivery confirmation data where relevant to your order.
iRazzh processes personal data on the following legal grounds, as recognized under the PDPL:
| Legal Basis | Application |
|---|---|
| Contractual Necessity | Account creation, order processing, payment management, and delivery |
| Legal Obligation | ZATCA compliance, consumer protection law, and regulatory requirements |
| Legitimate Interests | Fraud prevention, platform security, service improvement |
| Your Consent | Marketing communications and optional cookies, withdrawable at any time |
We will never process your data for purposes incompatible with the basis on which it was originally collected.
Your personal data is used strictly for the following purposes:
iRazzh does not sell, rent, trade, or commercially exploit your personal data under any circumstances.
We share limited and necessary personal data only with the following categories of recipients, and only to the extent required for the stated purpose:
SELLERS ON THE PLATFORM receive order-related data strictly necessary to fulfil your purchase (name, delivery address, and contact details).
PAYMENT PROCESSORS receive the data required to authorize and complete transactions securely.
LOGISTICS AND DELIVERY PARTNERS receive your name, contact number, and delivery address to complete the shipment.
LOGISTICS AND DELIVERY PARTNERS receive your name, contact number, and delivery address to complete the shipment.
REGULATORY AND LAW ENFORCEMENT AUTHORITIES where disclosure is required by Saudi law, court order, or government directive.
BUSINESS SUCCESSORS in the event of a merger, acquisition, or transfer of business assets: your data may be transferred to the new entity, subject to the same privacy protections outlined in this policy until an updated policy is issued and communicated to you.
Any cross-border transfer of personal data is conducted in full compliance with PDPL requirements, including ensuring adequate protection exists in the receiving jurisdiction.
The iRazzh platform may contain links to third-party websites, advertisements, plug-ins, or applications. Clicking or enabling these links may allow third parties to independently collect data about you.
iRazzh has no control over the content, practices, or privacy policies of external websites and cannot be held responsible for them. We strongly encourage all users to review the privacy policy of any third-party platform they visit through links on our site and to exercise caution before sharing any personal information externally.
As a data subject under the Personal Data Protection Law of the Kingdom of Saudi Arabia, you hold the following rights in relation to your personal data:
| Right | What It Means |
|---|---|
| Access | Request a copy of the data we hold about you |
| Correction | Ask us to fix inaccurate or outdated information |
| Deletion | Request erasure, subject to legal retention obligations |
| Withdraw Consent | Pull back any consent-based processing at any time |
| Object | Object to processing on legitimate interests grounds |
| Data Portability | Receive your data in a structured, machine-readable format |
| Restrict Processing | Request that we limit how we use your data |
To exercise any of the above rights, please contact our Data Protection team at privacy@iRazzh.com. We will verify your identity before processing any request and will respond within the timeframe prescribed by the PDPL.
iRazzh retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law.
| Data Type | Retention Period |
|---|---|
| Account and identity data | Duration of account plus 3 years post-closure |
| Financial and transaction records | 10 years — as required by ZATCA |
| VAT and e-invoice records | 10 years — as required by ZATCA |
| Payment data (tokenized card references) | 3 years from the last transaction |
| Customer support records | 3 years from case closure |
| Marketing consent records | Duration of consent plus 3 years |
| Cookie and tracking data | Maximum 12 months |
| Vendor KYC documentation | Duration of the relationship plus 10 years |
| Data breach records and investigation documentation | Minimum 5 years from the date of the incident |
| Complaint and dispute records | Duration of proceedings plus applicable legal period |
Retention periods may be extended where required in connection with an active complaint, legal proceedings, or regulatory investigation.
For full details of the legal basis applicable to each retention period, the operational disposal process, and the specific retention requirements for Vendor KYC documentation under Saudi AML law, please refer to the Data Retention & Data Breach Response Policy (POL-010), which is the authoritative operational companion to this Section.
iRazzh takes the protection of your personal data seriously and has implemented robust technical and organizational security measures, including:
In the event of a personal data breach, iRazzh notifies SDAIA within 72 hours of becoming aware of the incident, regardless of the severity or perceived impact of the breach, in accordance with Article 24 of the PDPL Implementing Regulations.
In the event of a personal data breach, iRazzh notifies SDAIA within 72 hours of becoming aware of the incident, regardless of the severity or perceived impact of the breach, in accordance with Article 24 of the PDPL Implementing Regulations.
Where the breach poses a high risk to the rights or interests of specific individuals, iRazzh notifies affected individuals directly without undue delay, as required by the PDPL. Full details of iRazzh's staged breach response process are set out in the Data Retention & Data Breach Response Policy (POL-010).
Cookies are small text files stored on your device when you access the iRazzh website or mobile application. They allow the platform to remember your actions, preferences, and session details so your experience feels seamless, familiar, and efficient from one visit to the next.
This section explains the types of cookies iRazzh uses, why we use them, and how you can manage your preferences at any time.
A) STRICTLY NECESSARY COOKIES
These cookies are essential for the iRazzh platform to function correctly. They enable core features including login sessions, shopping cart functionality, secure checkout, and basic navigation. Without these cookies, key parts of the platform cannot operate as intended. They cannot be disabled without materially affecting your ability to use iRazzh, and they do not require your consent to be placed.
B) PERFORMANCE & ANALYTICS COOKIES
These cookies collect anonymized, aggregated data about how users interact with the iRazzh platform, including pages visited, time spent on site, click paths, and error reports. This information is used solely to monitor and improve the performance and usability of our services. No personally identifiable information is collected or stored through these cookies.
C) FUNCTIONAL COOKIES
These cookies remember your individual preferences between sessions, including your selected language, saved delivery addresses, recently viewed items, and your Wishlist. They exist to make your iRazzh experience more personal, consistent, and efficient every time you return to the platform.
D) MARKETING & TARGETING COOKIES
With your explicit prior consent, these cookies enable iRazzh and its approved advertising partners to deliver relevant promotional content to you on third-party platforms, including Meta, Snapchat, Google, and TikTok. They work by recognizing your device across platforms and tailoring ad content based on your browsing behavior. These cookies are activated only by following your affirmative opt-in and are never placed without your knowledge or permission.
When you first access the iRazzh platform, a cookie consent banner will appear, giving you full control over your preferences. You may choose to:
You may review, update, or withdraw your cookie choices at any time by visiting Cookie Settings in the footer of the iRazzh website or application. Withdrawing consent for non-essential cookies will not affect your ability to browse or shop on the platform, though some personalization features may be reduced.
For further information on how cookie data is retained, please refer to the Data Retention section of this Privacy Policy.
The iRazzh platform is intended for use by adults. We do not knowingly collect data from anyone under 18 without verified parental or guardian consent. If we discover a minor has accessed the platform unsupervised, we take immediate steps to delete their data and address the situation.
iRazzh may update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations.
Your continued use of the iRazzh platform after the effective date of any update constitutes your acceptance of the revised policy. The most current version of this Privacy Policy is always available at iRazzh.com/privacy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way iRazzh handles your personal data, please reach out to us:
