Privacy Policy

We, Groupdeal Commercial Services Establishment, registered under Commercial Registration No. 7049204328 and having our registered office at Thumamah Road, ("we", "our", "us") respect the privacy of all our users and are committed to protecting the personal data collected through the website www.groupdeal.org and its related mobile application (the "Platform").

This Privacy Policy ("Privacy Policy") outlines the basis on which any personal data we collect from you, or that you provide to us, will be processed by us, whether collected directly from you or through other sources in connection with your access to and use of the Platform and any services provided by us, including advertising messages and any social media functionalities on the Platform (collectively, the "Services"). We understand the importance you place on your personal data and are committed to protecting and respecting your privacy. Please read this Privacy Policy carefully to understand our practices regarding your personal data. By using the Platform and the Service, you consent to the collection and processing of your personal data in accordance with this Privacy Policy. For the purposes of this Privacy Policy, "Personal Data" means and includes the categories of data outlined in Clause 2 of this Privacy Policy.

References to "User" or "you" (or similar) are references to you as an individual or legal entity as the case may be.

The Platform may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control third-party websites and are not responsible for their privacy statements. When you leave our Platform, we encourage you to read the privacy notice of every website you visit.

We do not collect data about children. This Platform is not intended for anyone who has not reached the legal age of majority as per the relevant applicable regulations governing such individuals. However, we cannot prevent specific users, including children, from fraudulently misrepresenting their age to gain access to the Platform. If you are a parent or guardian and believe that we may have collected information about your child, please contact us immediately as described in Clause 12 of this Privacy Policy.

1. What Personal Data do we collect from and/or about you?

We collect your data in order to provide and continually improve our Platform and Services. Personal data refers to any information that can identify you as an individual based on identifiers. Personal data does not include anonymized data, i.e., any dataset from which individual identifiers have been removed. We collect, use, store, and transfer different kinds of personal data about you which are categorized as follows:

Identity Data: Includes details such as: your first name, middle name, last name, your username or similar identifiers, gender, title, nationality, and date of birth.
Contact Data: Includes your address, email address, and telephone number.
Transaction Data: Includes information about payments to and from you, including without limitation your payment methods, as well as details of products and services you have purchased from us.
Technical Data: Includes your internet protocol (IP) address, your login data, your browser type and version, operating system and mobile application version, time zone setting and location, device type, advertising identifiers (in case of iOS users), and information about your general internet usage.
Profile Data: Includes your username and password, your interests, preferences, feedback, preferred language, and survey responses.
Purchase Data: Includes all past orders and purchases made from the same user account, redemption information, fulfillment information, and information on page views from service providers that enable commercial distinction, fulfillment, and other operations on the Platform.
Browser Data: Relates to how you interact with our website, products, and services.
Marketing and Communications Data: Covers your preferences in receiving marketing materials from us and third parties and your communication preferences.

Additionally, we collect, use, and share statistical or demographic information ("Aggregated Data"). Aggregated Data is derived from your personal data but has been modified to remove identifiers and does not directly or indirectly reveal your identity. For example, we may aggregate your browser data to determine the percentage of users accessing a specific website feature.

2. How do we collect Personal Data about you?

We use the following methods to obtain personal data about you:

Directly:
We collect your personal data directly from you through the Platform when you:
- Register on the Platform and other joint registrations (e.g., social media logins, etc.) to subscribe to our Services and post content on the Platform.
- Make payments, request refunds, and provide payment methods.
- Participate in competitions, promotions, and subscribe to special schemes.
- Provide feedback, testimonials, or comments.
- When you submit support requests/lodge any complaints on the Platform for refunds, fraud transactions, and exchanges, among other things.
- Record correspondence if you contact us through your phone, email, or otherwise.
- Browse and perform other activities on the Platform.
Indirectly:
We also receive personal data about you from your friends/relatives when they make purchases for or on your behalf and our sellers/third-party service providers who enable you to avail our Services seamlessly. Our sellers include:
- Logistics and fulfillment service providers and/or partners.
- Marketing service providers.
- Your interactions with us on other platforms such as: Facebook, Google, etc.
- Payment service providers.
In the event you share any personal data of third parties, i.e., friends, relatives, or colleagues (any individual), with us while using our Services, you warrant that you have obtained the concerned individual's consent to share their personal data with us as per this Privacy Policy.
Automatically:
Certain personal data about you is collected automatically while you are using our Services through logs, cookies, and other unique identifiers. We use logs to collect certain personal data about you. Log information is usage data about your use of the Services, such as: your internet protocol (IP) address, browser type, referring/exit pages, operating system, date/time stamps, and related data stored in logs. We also use a limited number of cookies. Cookies are small data files transferred to your computer (or other device) when you use it to access our Services. Cookies are used for many purposes, including enabling certain features of our Services, remembering your preferences and equipment, your browsing actions and patterns to better understand how you interact with our Services to provide you with advertisements within and outside the Services, and to monitor usage by visitors and direct web traffic routing. To the extent permissible by your preferred web browser, you can instruct your browser by changing its options to stop accepting cookies or to prompt you before accepting a cookie from the Services you visit online. We use cookie services to enrich your experience by remembering your online behavior during your use of the Platform and to improve the efficiency of advertisements and Services. If you do not agree to our use of cookies, we request that you stop using the Platform immediately. It is up to you whether to provide certain personal data to us, but you may then not be able to take advantage of many of our Services.

3. What do we use your Personal Data for?

We collect and use your personal data for the following purposes:

To provide you with information, products, or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.
To provide you with location-based services, such as advertising, search results, and other personalized content.
To carry out our obligations arising from any contracts entered into between you and another entity using our Platform or between you and us.
To improve our Services and to deliver a better and more personalized service to you, including by contacting you about Services for customer service purposes via the different channels (e.g., by phone, messages, email, and instant messaging applications).
To ensure that content from our Platform is presented in the most effective manner for you and for the device you use to access our Platform.
To provide you with uninterrupted Services and offers on special occasions such as your birthday and anniversary.
To notify you about changes to our Services.
For any other reason that we deem necessary to enhance your experience of using the Platform.
To administer and manage our incentive programs and fulfill your requests for incentives and/or to allow you to participate in prize draws and notify you if you have won prize draws.
To provide functionality, analyze performance, fix errors, and improve the usability and effectiveness of the Services.
To comply with local regulations (e.g., your nationality for cross-border shipments and sellers’ information regarding place of establishment and bank account information for identity verification and other purposes).
To prevent and detect fraud and abuse in order to protect the security of our customers, ourselves, and others.

4. How do we use your Personal Data?

We will only use your personal data under the following circumstances:

Performance of Contract:
We need to use your personal data to perform any contract we have entered into with you or to take preliminary steps before entering into any contract. This includes accepting the applicable terms and conditions or specific terms related to our Services. If you do not provide your personal data for these purposes, we may not be able to provide our Services or enter into any contract with you, which may result in the cancellation of the service. We will inform you if this happens.
Regulatory or Legal Compliance:
We may collect your personal data to comply with any applicable regulations and/or laws.
Legitimate Interests:
We may process your personal data based on our legitimate business interests and the interests of our customers when we improve our Services, when we detect and prevent fraud and abuse to protect the security of our customers, ourselves, and others, and when we provide you with advertisements based on your interests.
Marketing and Communications Data:
We may also use your personal data to provide you with information about goods and services that may be of interest to you, and to enhance your experience of using the Platform through service messages, new features, improvements, special offers, and events of interest to you. We may contact you via various channels, including but not limited to email messages, push notifications, web notifications, postings, phone, in-app messages, WhatsApp messages, and news feed cards. We also provide you with the option to receive these advertisements based on your interests. You can opt out of receiving these advertisements by contacting us at the details mentioned in Clause 12 of this Privacy Policy and/or by clicking on the "unsubscribe" button in your email or in any marketing communications we send you.

5. With whom do we share your Personal Data?

Your personal data is important to us in order to provide you with our Services, and we are not in the business of sharing your personal data with others. We share your information only with third parties as described below and with companies that follow protective practices at least as protective as those described in this Privacy Policy:

Other Businesses:
We provide you with our Services, and we may deal with our other affiliated companies and/or non-affiliated service providers (such as: logistics companies used to deliver products to you, marketing companies, payment processing companies to process online transactions, data analytics, etc.) and share your personal data with these companies. We may use other companies in your transactions, which may store your information in a digital wallet to make your use of our Services more efficient. You understand that it is important for these companies to have access to the relevant personal data to perform their functions and tasks. We will ensure that these companies do not use your personal data for other purposes. We may also receive personal data from these companies (such as updated delivery and address information), which we may use (for example, to correct our records and deliver your next purchases). These companies will be contractually bound to respect the confidentiality of your personal data and not use it for any other purposes.
Third Parties:
We may share your personal data with any third party for the purposes set out in Clause 5 above. However, we ensure that all companies follow protective practices at least as protective as those described in this Privacy Policy. We also do not allow our non-affiliated service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes in accordance with our instructions. You can ask us or third parties to stop sending you marketing communications at any time by adjusting your marketing preferences on the Platform or by following the opt-out links on any marketing message sent to you or by contacting us via legal.groupdeal.org at any time. Additionally, you may be required to provide additional personal data to participate in some of our market research activities, including contests and promotions (such as additional personal data to determine your eligibility to win a prize). This personal data may be collected by us or by our co-sponsors or participating sellers for the promotion. If you choose not to provide certain personal data, you may not be able to take advantage of the contests or promotions. If you decide to participate, please note that you should review the privacy policies of the third parties to learn how they use any personal data that they collect.
Business Transfers:
As we continue to develop our business, we might be involved in the purchase or sale of other businesses or services. In these transactions, customer personal data is typically one of the transferred business assets but remains subject to any pre-existing Privacy Policy (unless, of course, the customer consents otherwise). Also, in the event that we or substantially all of our assets are acquired, customer personal data will be included as part of the transferred assets.
Protection of the Platform and Others:
We release user personal data when we believe release is appropriate to comply with the law, law enforcement investigations, and to protect our rights, our users' rights, or those of others, our property, or safety. This includes exchanging personal data with other companies and organizations for various reasons, such as fraud protection and credit risk reduction.

6. Is my Personal Data transferred outside the Kingdom of Saudi Arabia?

To facilitate the provision of our Services to you, it may sometimes be necessary for us to share your personal data with other members of the Groupdeal group and service providers located outside the Kingdom of Saudi Arabia. Such transfers are necessary for reasons including, but not limited to, IT infrastructure, data storage, and platform administration, including payment processing.

When we transfer personal data outside the Kingdom of Saudi Arabia, we ensure that the personal data is transferred in accordance with this Privacy Policy and as permitted by the applicable laws within the Kingdom of Saudi Arabia.

7. How do we store your Personal Data and for how long?

The personal data that we collect from you may be transferred to, stored, and processed by staff operating for us or for one of our service providers. Such staff may be engaged in, among other things, the fulfillment of your request, the processing of your payment details, and the provision of support services. We will store your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as permitted or required by law. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting, or other requirements. In some circumstances, we may anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

8. What security measures do we apply?

We have designed our systems with your security and privacy in mind. We maintain commercially reasonable technical, administrative, and physical safeguards to help ensure that your personal data is treated securely and in accordance with this Privacy Policy and applicable laws, and to protect against unauthorized access to or alteration, disclosure, or destruction of your personal data. For example, we may use encryption technology to secure your personal data during transmission to our Platform, as well as external firewall and on-host firewall technology to prevent any network-level attacks. Only authorized employees, contractors, and agents who need to know your personal data in connection with the performance of their services are permitted to access it. We also follow the Payment Card Industry Data Security Standard (PCI DSS) when handling credit card data.

It is important for you to protect yourself against unauthorized access to your password and to your devices used to access our Services. You are responsible for keeping your password confidential. (For example, make sure to sign off when you finish using a shared device). Although we will do our best to protect your personal data, unfortunately, the transmission of information via the internet is not completely secure.

9. What are your data rights?

Under certain circumstances, you have the following data rights:

The right to be informed about the personal data collected from you:
If you have any queries about how your personal data is collected and used, please contact us at: legal.groupdeal.org. Many of our Services also include settings that provide you with options as to how your personal data is being used.
The right to access your personal data:
You can access a wide range of information about your account and your interactions with the Platform for the purpose of viewing and in certain cases updating your personal data. Examples of personal data you can easily access on the Platform include:
- Up-to-date information regarding recent orders.
- Personally identifiable information (including name, email, password, date of birth, communications, and personalized advertising preferences).
- Payment settings (including credit card information).
- Email notification settings.
For more information, please contact us via: legal@groupdeal.org
The right to request access to your personal data:
Under certain circumstances, you have the right to request access to your personal data that we hold in a clear and readable format if technically feasible. To make such a request, please contact us via: legal@groupdeal.org
The right to request the destruction of your personal data:
You have the right to request the destruction and erasure of your personal data to the extent permitted by applicable law. To make such a request, please contact customer service. However, please note that we may not always be able to comply with your request for erasure for specific legal reasons which will be notified to you.
Withdrawal of consent / The right to object:
You can withdraw your consent to marketing data at any time. You can unsubscribe from receiving future marketing communications from us at any time by adjusting your customer communication preferences through the unsubscribe link found in email messages. You may also disable cookies by changing the settings on your browser. If you disable cookies, this will affect our Platform and you may not be able to access certain areas on our Platform or all of the Platform's functionalities or use them.
The right to request correction of personal data:
You can at any time request to modify and correct your personal data by contacting us via: legal@groupdeal.org

You will not be required to pay any fee for exercising your rights unless otherwise provided by law. If you make a request to exercise your rights, you will receive a response within the time limits stipulated in the applicable law.

10. How do we change our Privacy Policy?

As our business changes constantly, our Privacy Policy may also need to change. However, we will notify you of any such changes by posting the updated version of the Privacy Policy on the Platform, and each change will become effective upon its posting on the Platform or on the date we specify as the "Effective Date".

We may send you periodic email reminders of our notices and terms, but you should check our Platform regularly to see recent changes. You are responsible for regularly reviewing the Privacy Policy. Your continued use of the Platform after any such change constitutes your agreement to this Privacy Policy as amended.