Legal

Privacy Policy

Last updated: 25 June 2025

Numu Commerce ('we', 'us', 'our') is committed to protecting your personal data in accordance with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations.

1. Data we collect

We collect information you provide directly (name, email address, store details, payment information) and data generated by your use of the platform (order history, page views, API call logs). We also collect technical data such as IP addresses and device type for security monitoring and product analytics.

2. How we use your data

We use your data to operate and improve the Numu platform, process payments and payouts, send transactional notifications, provide customer support, and comply with ZATCA e-invoicing and VAT reporting requirements. We do not use your data to serve third-party advertising.

3. Data sharing

We share data only with service providers necessary to operate the platform: payment processors (for transaction settlement), shipping carriers (for label generation and tracking), and cloud infrastructure providers (for hosting and storage). We do not sell personal data. All sub-processors are bound by data processing agreements.

4. Data retention

We retain your data for as long as your account is active and for up to five years thereafter as required by Saudi VAT law and commercial record-keeping regulations. You may request deletion of data that is not subject to legal retention obligations at any time.

5. Your rights under the PDPL

Under the Saudi PDPL, you have the right to access, correct, and request deletion of your personal data, and to object to certain types of processing. To exercise any of these rights, contact our Data Protection Officer at privacy@numu.sa. We respond to all requests within 15 business days.

6. Cookies

We use strictly necessary cookies to operate the platform and optional analytics cookies to understand how merchants use Numu. You can manage your cookie preferences at any time through your account settings.

7. Data residency

All merchant and customer data is stored on servers located within the Kingdom of Saudi Arabia (AWS Riyadh region), in compliance with Saudi PDPL data localisation requirements.

8. Contact

For privacy-related inquiries, contact our Data Protection Officer at privacy@numu.sa or write to: Numu Commerce, Al Olaya District, Riyadh 12213, Kingdom of Saudi Arabia.