Privacy policy

Account data: mobile number, optional name, language preference and authentication records.

Shopping and delivery data: basket, orders, ratings, saved addresses, courier instructions, contact phone and optional address coordinates.

Location data: approximate or precise device coordinates only after you tap a location feature and grant permission. You can browse by city and enter addresses manually without granting location access.

Service data: notifications, optional device push tokens, security logs and diagnostics needed to operate and protect the service.

We use data to authenticate you, provide baskets and orders, calculate store distance and delivery coverage, fulfil delivery or pickup, provide support, prevent abuse, maintain security and meet legal obligations. We do not sell personal data or use it for third-party advertising.

The store you choose is the seller of record. It receives the order and the delivery/contact details needed to fulfil it. A contracted courier may receive the same handoff details. The store collects your payment directly; Ordenax does not process, hold or settle consumer funds and the consumer app does not collect your card details.

We use infrastructure and communications providers to host the service and deliver OTP or order messages. An SMS gateway receives your mobile number and the message content needed for delivery. Providers may process data only for the agreed service and must protect it. If processing occurs outside Saudi Arabia, we use appropriate contractual and legal safeguards.

We keep account data while your account is active and only as long as needed for the purposes above. OTP codes expire after five minutes. Closing your account removes or anonymizes addresses, basket contents, sessions, device tokens and notifications. Sellers retain order records detached from your consumer identity and stripped of direct contact details where financial, dispute or legal retention is required.

We use encrypted transport, mobile Keystore/Keychain credential storage, access controls and short-lived OTP codes. No online service is risk-free, so protect your device and OTP. Subject to applicable Saudi law, you may request access, correction or deletion and withdraw location permission in device settings. Withdrawal does not affect earlier lawful processing.

The service is not directed to children under 18. We will publish material policy changes on this page with a new effective date. Contact us about privacy or to exercise a right at salam@ordenax.sa.