Privacy Policy – Shahizy

Last Updated: June 2026

Welcome to Shahizy.

At Shahizy, we respect your privacy and are committed to protecting your personal data in accordance with the applicable laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL).

This Privacy Policy explains how we collect, use, store, protect, and share personal data relating to users and business owners (restaurants and cafés) when using the Shahizy website, mobile application, and related services.

1. Who We Are

Shahizy is a digital platform designed to help users discover restaurants and cafés, explore their information and content, and interact with them. The platform also enables business owners to create and manage their business profiles within Shahizy.

2. Personal Data We Collect

User Data

We may collect the following information:

• Full name
• Mobile phone number
• Email address
• Profile picture (if provided)
• Location data, when permission is granted
• Search history, preferences, and interactions within the platform
• Device information, operating system details, and IP address

Business Owner Data

We may collect the following information:

• Business name
• Owner or authorized representative name
• Mobile phone number
• Email address
• Commercial registration or other supporting documents when required
• Business address and geographic location
• Photos, descriptions, and other business-related information submitted to the platform

3. Purpose of Data Collection

We use personal data for the following purposes:

• Creating and managing user accounts
• Providing and improving Shahizy services
• Helping users discover relevant nearby businesses
• Communicating with users and business owners
• Providing customer support and responding to inquiries
• Preventing fraud, abuse, and unauthorized activities
• Complying with legal and regulatory obligations
• Developing new features and enhancing user experience

4. Legal Basis for Processing

We process personal data based on one or more of the following legal grounds:

• The data subject's consent
• Performance of a contract or requested service
• Compliance with legal or regulatory obligations
• Legitimate business interests that do not override the rights and interests of the data subject

5. Data Sharing and Disclosure

We do not sell personal data.

Personal data may be shared with:

• Hosting and infrastructure service providers
• Analytics, notification, and technical service providers
• Governmental or regulatory authorities when required by law
• Competent authorities pursuant to legal or judicial requests

Any disclosure is limited to the minimum amount of information necessary for the intended purpose.

6. International Data Transfers

Personal data may be processed or stored outside the Kingdom of Saudi Arabia through trusted hosting, cloud, or technology service providers.

Where personal data is transferred outside the Kingdom, Shahizy implements appropriate contractual, organizational, and technical safeguards to ensure a level of protection consistent with applicable legal requirements.

7. Data Security

We implement appropriate technical, administrative, and organizational measures to protect personal data against unauthorized access, disclosure, alteration, loss, or misuse.

However, no electronic system can guarantee absolute security.

8. Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations.

When personal data is no longer required, it will be securely deleted, anonymized, or otherwise disposed of in accordance with applicable requirements.

9. Data Subject Rights

Subject to applicable laws and regulations, data subjects have the right to:

• Be informed about the legal basis and purpose of data collection
• Access their personal data
• Obtain a copy of their personal data in a clear and readable format
• Request correction or updating of inaccurate data
• Request deletion of personal data where legally applicable
• Withdraw consent where processing is based on consent

Requests regarding these rights may be submitted through the contact methods provided below.

10. Cookies and Similar Technologies

We may use cookies and similar technologies to improve functionality, analyze usage, and enhance the user experience.

Users may manage cookie preferences through their browser or device settings.

11. Notifications and Communications

We may send service-related notifications, account updates, security alerts, and important operational communications.

Marketing communications may be sent in accordance with applicable laws, and users may opt out where such option is available.

12. Third-Party Links and Services

The platform may contain links to third-party websites or services. Shahizy is not responsible for the privacy practices or content of such third parties.

13. Changes to This Privacy Policy

Shahizy reserves the right to update this Privacy Policy from time to time.

Any updates will be published within the application, website, or other appropriate channels, together with the revised effective date.

14. Contact Us

For privacy-related inquiries, requests, or complaints, please contact us at:

Email: [email protected]

Or through the contact methods available within the Shahizy website and application.