Privacy Policy
Nuwa complies with the Saudi Personal Data Protection Law (PDPL). This page explains what we collect, why, your rights, and how to exercise them — plainly.
What we collect and why
- Account data (name, email, mobile): to create and secure your account and fulfil your orders.
- Delivery data (recipient name, address, mobile): to deliver the gift — never for anything else.
- Occasions you save: to remind you — you alone — via the channels you choose.
- Order history: financial and operational records we are legally required to keep.
Your consent — two separate levels
- Occasion reminders: active because you created the occasion; switch them off anytime from your account or the unsubscribe link in every message.
- Offers & marketing: never sent unless you opt in yourself. Every consent change is logged with its time and source.
Your rights
- Access: download a full copy of your data (JSON) from your account page.
- Correction: edit your recipients, occasions and preferences directly in your account.
- Destruction: delete your account permanently from the account page — your data is removed from the system and the account is closed.
Data retention
- The live system keeps data temporarily: read notifications are removed after 90 days, completed delivery records after 180 days.
- An access-restricted archive retains records under the legal-obligation basis (disputes, fraud prevention, financial requirements) — reachable only by the system itself.
- Financial order records survive account deletion as required by law, with the account identity scrubbed from the system’s surfaces.
Data sharing
- Fulfilment partners see delivery data only (recipient and address) — never your identity. Payment providers process payments under their own compliance.
Contact us
- For any request about your data: privacy@nuwa.sa — we respond within the statutory windows.
Last updated: July 2026