INTRODUCTION
This Privacy Policy provides you with information regarding the collection, processing, and use of your personal data by Al Qudrah Technical for Information and Communication Technology Company L.L.C (“Zid,” “we,” “us,” or “our”), when you sign up for, use, access, or otherwise interact with any Zid platform, websites, products, or services (“Services”).
For the purpose of this Policy, in our effort to enhance modern retail, we collect and utilize information from the following:
- “Merchants”: Individuals or entities who use Zid Services to grow their stores and businesses.
- “Customers”: Merchants who shop at a Zid-powered business (merchant store).
- “Consumers”: Any end consumer that purchases in any of Zid’s direct stores or marketplaces (Mazeed)
- “Partners”: Those who develop apps for Merchants to use in our Zid App Market, build stores on behalf of Merchants, or help Merchants operate or improve their businesses.
- “Visitors”: Individuals or entities visiting the Zid website or contacting Zid support.
This Privacy Policy will help you better understand how Zid receives, stores, uses, transfers, processes, collects, and disposes of your personal information. We may change this policy from time to time. If we make changes, we will notify you by posting the updated policy. We encourage you to review the policy whenever you use our Services to stay informed about our information practices.
At Zid, we are committed to protecting the privacy and security of our customers and their data. This Privacy Policy outlines how we collect, use, and safeguard the information you provide to us.
THE DATA & INFORMATION COLLECTION
We collect personal information when you sign up for Zid, use our services, or provide us with information in other ways. We may also use third-party service providers to help review accounts for fraud or other concerns. Generally, we need information about you to enable your use of our platform. We process your personal data to fulfill our contract with you or because it is in our legitimate interests to maintain our business relationship, prevent risk and fraud, provide effective services, improve our products and services, and respond to your needs. In all cases, we process your personal information only with your consent.
- Personal Information: We may collect personal information such as your name, email address, phone number, and business information when you register for our services or interact with us
- Usage Data: We may collect information about how you use our website, mobile applications, and services, including your IP address, browser type, and device information.
- Financial Information: If you make a purchase through our services, we may collect payment information, such as your credit card details, to facilitate the transaction.
Specifically, the types of personal information we collect from you are as follows:
- As the Merchants
- Business details, payment information, and identification documents, such as your name, the name of your company, the name of your staff or other individuals associated with your business, address, email address, phone number, bank account number, business bank accounts or/and financial assets, business type, business ID number, date of birth (if you are an individual), and in some circumstances, government-issued identification (such as your Iqama, local ID card, employer identification number, or tax identification number), your account, the device and browser you use, your network connection, your IP address, and details about how you browse our websites and platform. We collect some of this information by using “cookies” or other similar technologies directly from your device. Check our Cookie Policy for more information. You may also voluntarily disclose sensitive personal data revealing the racial or ethnic origin or gender of the business owner.
- To support your business, we collect and use personal information about your customers. Generally, we do this as directed by you. Legally, we act as a “data processor” and “service provider” under the applicable privacy laws. You must ensure they understand how you (and we, on your behalf) collect and process their data, as you should post a privacy policy on your store detailing the information you collect, how you use it, and with whom you share it.
- As the Customer
- Profile and contact information such as your name, shipping address, email address, profile picture, and other details you provide when you sign up for or interact with Zid Consumer Services, including interactions with Zid Merchants, visited Shops, viewed products, posted reviews and ratings, order history, and interactions with Mazeed or other marketing activities. We may link this data to different devices or accounts you use with Zid Services: your account, the device and browser you use, your network connection, your IP address (which may indicate general location), and details about how you browse our websites and platform. We collect some of this information by using “cookies” or other similar technologies directly from your device. Check our Cookie Policy for more information, your settings and preferences on Zid and with our Merchants, as well as browser and device privacy settings, customer support inquiries, surveys, promotions, or research participation.
- If you link, connect, or log in to Zid Consumer Services via a third-party service, we receive certain profile information controlled by that service, subject to the service’s privacy policies and your settings.
- Email and Shopping Service Integrations: We receive information from emails in inboxes connected to your Shop account and from emails you forward to the app, which we include in your order history. We do not use this information for advertising or marketing purposes.
- As the Partner
- Business details, payment information, and identification documents, such as your name, the name of your company, the name of your staff or other individuals associated with your business, address, email address, phone number, bank account number, business bank accounts, or/and financial assets, business type, business ID number, date of birth (if you are an individual), and in some circumstances, government-issued identification (such as your Iqama, local ID card, employer identification number, or tax identification number), your account, the device and browser you use, your network connection, your IP address, communication with Merchants, and details about how you browse our websites and platform. We collect some of this information by using “cookies” or other similar technologies directly from your device. Check our Cookie Policy for more information.
- As the Consumer
- Profile and contact Information such as your name, shipping address, payment details such as payment card numbers and expiration dates, email address, profile picture, and other details you provide when you sign up for or interact with Zid Consumer Services including interactions with Zid Merchants, the stores you visit, products you view or purchase, reviews and ratings you post, your order history, and your interactions with search or other marketing activities. We may link this data to different devices or accounts you use with Zid Services, your account, the device and browser you use, your network connection, your IP Address, and details about how you browse our websites and platform. We collect some of this information by using “cookies” or other similar technologies directly from your device. Check our Cookie Policy for more information, your settings and preferences on Zid and with our Merchants, as well as browser and device privacy settings, customer support inquiries, surveys, promotions, or research participation.
- If you link, connect, or log in to Zid Consumer Services through a third-party service, we receive certain information about you from that service, such as profile information, subject to that service’s privacy policies and your settings.
- Email and Shopping Service Integrations, we receive information from emails in inboxes connected to your Shop account and from emails you forward to the app, which we include in your order history. We do not use this information for advertising or marketing purposes.
- As the Visitor
- Business details, payment information, and identification documents, such as your name, the name of your company, address, email address, phone number, bank account number, and in some circumstances, government-issued identification (such as your Iqama, local ID card, employer identification number, or tax identification number), your account, the device and browser you use, your network connection, your IP address, communication with Merchants, and details about how you browse our websites and platform. We collect some of this information by using “cookies” or other similar technologies directly from your device. Check our Cookie Policy for more information.
THE DATA & INFORMATION PROCESS AND USE
Your personal data will be processed lawfully, fairly, and in a transparent manner and for legitimate interests, with sufficient steps taken to verify its accuracy, completeness, novelty, and relevance to the purpose for which the provisions of the regulations collected it.
We process your information when required to fulfill a contractual obligation (e.g., when using our Services for payments or when performing a purchase in one of our stores) and for any lawful purpose, including, without limitation, providing our Services, identification and authentication, Services operation, analytics, improvements, and personalization of our Services for you, support, contact, customized marketing and promotions, research, improving the Services functionality and the Services we offer you. If a Partner or service provider we have a contract with needs your personal information to provide you with a service you authorized through our Services, we may also process your data for this purpose.
We may only collect your personal data directly from you and may only process the personal data for the purposes for which it was collected. However, we may collect your personal data from a source other than you and may process the personal data for purposes other than those for which it was collected in the following situations:
- If you give us your consent in accordance with bylaws.
- If the personal data is publicly available or was collected from a publicly available source.
- If complying with this may harm you or affect your vital interests.
- If the personal data collection or processing is necessary to protect public health, public safety, or to protect the life or health of specific individuals.
- If the personal data is recorded or stored in a form that makes it possible to directly or indirectly identify you.
- If the personal data collection is necessary to achieve legitimate interests, without prejudice to your rights and interests, and provided that no sensitive data is processed.
- For this Policy, we mean by the legitimate interests as follows:
- Preventing risk and fraud.
- Answering questions or providing other types of support.
- Helping merchants find and use apps through our Services.
- Providing and improving our products and services.
- Providing reporting and analytics.
- Testing out features or additional services.
- Assisting with marketing, advertising, or other communications.
We process personal information for certain “legitimate interests” only after evaluating potential privacy risks and taking steps to mitigate those risks. These steps may include providing clear transparency about our privacy practices, giving you control over your personal information, limiting the data we collect and retain, and implementing technical measures to protect your information.
In addition, we require your consent—either explicit or implied—to process your personal information where (i) we cannot rely on another legal basis for processing, (ii) you direct us to share information with a third party, or (iii) where the law requires us to seek your consent (such as in promoting and marketing activities and/or processing financial or sensitive data). You can withdraw your consent at any time by adjusting your communication preferences, opting out of our communications, or contacting us directly.
- Processing Your Personal Data on behalf of Merchants
If you sign up for Zid Services in the role of (Customer or Consumer) we will process your Personal Data from Merchants you interact with to help them run their stores and provide business services. In this role, Zid acts under the direction of the Merchant, and the Merchant’s terms of service and privacy policy apply, not Zid’s. For more details on how Merchants handle personal information, please refer to their specific terms and privacy policies.
Some Merchants may instruct us to use your Personal Data for targeted advertising on third-party sites. You may opt out of this on the Merchant’s site. We also provide options for managing how Zid uses personal information for advertising services.
- Partner processes the Merchant’s information & data and Using
As a Zid Partner, you provide essential services to our Merchants. When Merchants sign up for your services (e.g., installing an app or service you developed), we share their personal information with you based on the Merchant’s instructions. In this capacity, we act on behalf of our Merchants. It is your responsibility to protect and process the Merchants’ personal information securely and in compliance with applicable laws, and other relevant terms.
Zid requires you to provide Merchants with a clear and transparent privacy policy that outlines your privacy practices and how you use their personal information. If you develop an app for the Zid App Market, it must include a privacy policy. To assist you, we offer a template App Privacy Policy as a starting point to explain the types of information you collect and how you use and disclose it.
SHARING THE INFORMATION & DATA
We share your personal information with companies that help us provide our services and connect you with merchants who may be interested in your offerings. Additionally, we may share your information in the following circumstances:
- With third parties to provide, maintain, and improve our Services, including service providers who access information about you to perform services on our behalf (e.g., fraud prevention and verification services), and including financial institutions, processors, and other entities that are part of the payment or transfer process;
- With third parties that run advertising campaigns, contests, special offers, or other events or activities in connection with our Services;
- In connection with, or during the negotiation of, any merger, sale of company stock or assets, financing, acquisition, divestiture, or dissolution of all or a portion of our business;
- If we believe that disclosure is reasonably necessary to comply with any applicable law, regulation, legal process, or governmental request; to enforce applicable agreements or policies; to protect the security or integrity of our Services; and to protect us, our Merchants, our Customers, our Consumers, our Partners;
- and with your consent; We may also share aggregated, non-personally identifiable information with third parties
THIRD-PARTY AND SERVICES PROVIDER
Zid Services may link to third-party services, which Zid does not own or control. When using these services, your use is governed by their privacy policies.
THE RIGHTS OVER THE INFORMATION & DATA
- As a personal data owner, you have the following rights in accordance with the applicable laws and regulations:
- The right to be informed: We will notify you of the legal basis for collecting and processing your personal data.
- The right to access your personal data in the company in order to view it.
- The right to request a copy of your personal data in a legible and clear format.
- The right to correct, complete, or update your available personal data in the company by sending an email to [email protected].
- The right to request the destruction of your personal data in the company that is no longer needed.
- The right to withdraw your consent to process your personal data.
To exercise these rights, you may submit a request through our online portal or by sending an email to [email protected], with considering the following:
- If you use Mazeed, please visit zid/delete_account for instructions on how to request the deletion of your information.
- If you have visited or made a purchase from a merchant’s Zid store, please contact the specific merchant directly, or you can contact us and we will forward it to the relevant merchant.
In order to protect your information and maintain the integrity of our products and services, we may need to verify your identity before processing your request. This may require additional information, such as your email address or a government-issued ID.
We believe you should have access to and control over your personal information, regardless of where you live. Depending on your use of Zid, you may have the right to request access to, correct, amend, delete, transfer, restrict, or object to certain uses of your personal information. Exercising these rights will not result in additional charges or a different level of service. However, please note that these rights may apply only under specific conditions and could be restricted by the applicable laws and regulations.
THE PROTECTION OF INFORMATION & DATA
We are committed to protecting the privacy and confidentiality of personal data and not to view it without personal consent, except in the legal cases required by the system to disclose it. We also have independent auditors assess the security of our data storage and systems that process financial information. However, we all know that no method of transmission over the Internet, and method of electronic storage, can be 100% secure. This means we cannot guarantee the absolute security of your personal information.
You can find more information about our security measures at Zid Security Section, Cookies usage.
THE DATA TRANSFER ACROSS THE BORDERS
In accordance with the relevant laws and regulations, we may transfer or disclose your personal data to parties in other countries. However, such transfer or disclosure will only occur if appropriate safeguards are in place to protect your privacy and ensure that the level of protection guaranteed for your personal data under the law and its regulations is not compromised. This means that the transfer or disclosure will not affect your ability to exercise your rights under the applicable laws and regulations, or the controller’s ability to comply with requirements for notifying personal data breaches, destroying and controlling your personal data, and disclosing personal data. We will also take necessary organizational, administrative, and technical measures to ensure the security of your personal data.
THE RETENTION OF THE INFORMATION & DATA
We will retain and use your Personal data for the period necessary to comply with our legal obligations. We will destroy your personal data as soon as the purpose of collecting it has expired. However, We may retain such data after the purpose of collecting it has expired if everything that leads to the specific knowledge of the owner has been removed in accordance with the controls specified by the regulations.
We shall retain your personal data even after the purpose of collecting it has expired in the following cases only:
- If there is a systemic justification that must be retained for a specified period, in which case it shall be destroyed after the end of this period or the expiry of the purpose of its collection, whichever is longer.
- If the personal data is closely related to a case before a judicial body and its retention is required for this purpose, in which case it is destroyed after the completion of the judicial proceedings of the case.
DISCLOSURE OF INFORMATION
Your data may be made available to government officials in exceptional circumstances where this need should arise; however, it will never be made available to the public or any third party without your prior consent.
Your personal data will be disclosed only in the following circumstances:
- If you agree to disclose it in accordance with the provisions of the applicable laws and regulations.
- If your personal data has been collected from a publicly available source.
- If the entity requesting the disclosure is a public entity, for security purposes, to implement another system, or to meet judicial requirements per the provisions specified by the regulations.
- If disclosure is necessary to protect public health or safety, the life of a particular individual or individuals, or their health.
- If the disclosure will be limited to its subsequent processing in a manner that does not lead to the identification of the owner of the personal data or any other individual specifically. Will not be circulated, exchanged, or sold to any third party without your prior consent.
For more information on how we handle such requests please contact us through our support team.
CONTACT US
If you would like to ask about the way the personal information is handled, please contact Zid Support or mail us at our address below:
Attn: Data Protection Officer
3893 Prince Sultan Bin Salman Bin Abdulaziz St,
Ar Rahmaniyyah,
Riyadh 12341