Privacy Policy

1. Introduction and scope

Al Reef French is a bakery and confectionery offering oriental and western sweets, cakes, chocolate boxes, gifts, and wrapping from our branches in Al-Rass and Hail, and through our online store. We want the happy moments we bake for you to stay just as safe in how we handle your data.

This policy explains how we collect, use, and protect personal data when you visit the website, create an account, place an order, choose branch pickup, or request delivery. By using the site or completing an order, you acknowledge this policy. It applies to the website and related contact channels. The Sales Forces field-sales mobile application has a separate policy at /app-privacy.

2. Data controller

The data controller is Al Reef French, Commercial Registration 1132101149, VAT 310814889700003, located at King Salman bin Abdulaziz Road, Al Rawabi District, Al-Rass, Kingdom of Saudi Arabia.

We process personal data in line with the Saudi Personal Data Protection Law (PDPL) and applicable regulations, and as needed to fulfil orders, delivery, and tax and accounting duties.

3. Information we collect

We only collect what we need to run the shop experience, including:

• Account and contact data: name, mobile number, email if provided, and a hashed password.
• Order and delivery data: delivery address or branch pickup (Al-Rass / Hail), order notes, and gift messages when you order gifts.
• Commercial data: products and quantities, order history, invoices, and payment and shipping status.
• Technical data: IP address, browser and device type, and cookies needed for the cart and session, as described in the Cookie Policy.
• Contact forms: name, phone, and message when you use the Contact Us page.

We do not request continuous GPS from your device, and we do not access your camera or photo gallery. An approximate map pin may appear only for a delivery address you enter yourself, to help complete the order.

The Cookie Policy is available at: /cookie-policy — and the contact page at: /contactus

4. How we use information

We use your data only to:

• Confirm orders, prepare sweets, cakes, and gifts, and pack them safely.
• Deliver to your address or prepare pickup at the branch during opening hours (daily from 9:00 a.m. to 12:00 a.m.).
• Contact you about order status, replacements, or product notes.
• Issue tax invoices and keep required accounting records.
• Improve shopping, remember your cart and language, and prevent fraud or account abuse.
• Send optional offers or reminders on channels you accepted, with the right to opt out at any time.

We do not sell your personal data, and we do not monetize it with third-party advertisers.

5. Security and payments

We apply appropriate organisational and technical measures, including encrypted transport (HTTPS / TLS), role-based staff access, and limiting order data to people who need it to prepare or support the order.

For online payments, card details are processed by the licensed payment provider. We do not store the full card number in our systems. No security system is absolute; please keep your account private and never share one-time codes.

6. Sharing information

We do not rent or trade your data. We may share the minimum needed with:

• Branch teams in Al-Rass and Hail to prepare and hand over the order.
• Delivery or shipping partners to fulfil your request.
• The cloud store platform (Odoo) and hosting services required to operate the website.
• Licensed payment gateways to complete the purchase.
• Competent authorities when required by law, such as invoicing and Zakat, Tax and Customs.

Any recipient may use the data only for that service and in line with this policy.

7. Retention and account deletion

We keep account and order data for as long as needed to provide the service, then for the period required by Saudi accounting and tax rules. You may request account closure or deletion of personal data that is no longer legally required via the contact page, stating your registered name and mobile number. We aim to handle requests within 14 business days and confirm the outcome.

Invoice and transaction records may be retained after account deletion where the law requires it, and will not be used for marketing.

8. Your rights

Under the PDPL, you may — within legal limits — :

• Access the personal data we hold about you.
• Request correction of inaccurate data, or updates to your address and mobile number.
• Request deletion when retention is no longer legally required.
• Object to the use of your data for direct marketing.
• Withdraw consent where processing is based on consent.

To exercise these rights, use the Contact Us page or visit an Al Reef French branch.

9. Children’s privacy

The store is for the general public buying sweets and gifts. We do not target children under 18 as independent users, and we do not knowingly collect their data. If we learn that a child’s data was collected without a guardian’s consent, we will delete it unless retention is legally required.

10. External links and cookies

The site may link to our Instagram, Snapchat, or WhatsApp accounts, or to branch maps. Those platforms have their own policies. Cookie details are in the Cookie Policy.

11. Changes to this policy

We may update this page when our services or legal requirements change. The date at the top will be revised. Continued use of the site after publication means you have been informed of the updated version. For material changes we will try to notify you on the website or through registered contact channels.

12. Contact us

For privacy questions or data requests:

• Contact form: www.frenchreviara.com/contactus
• Website: www.frenchreviara.com
• Al-Rass branch: King Salman bin Abdulaziz Road, Al Rawabi / Al Houta, Al-Rass
• Hail branch: Prince Saud bin Abdulmohsen Street, Al Naqrah District, Hail
• Opening hours: daily from 9:00 a.m. to 12:00 a.m.

Thank you for trusting Al Reef French. We will treat your data with the same care we put into our sweets: with love, and with care.