Privacy policy

Last updated: 31 October 2026

We respect your privacy and protect your personal data in accordance with the Saudi Personal Data Protection Law and its implementing regulations. This policy explains what we collect, why, and how we protect it.

Data we collect

• Account data: name, email, mobile number, date of birth and gender (both optional).
• Order data: delivery addresses, products ordered, order history and invoices.
• Payment data: processed entirely by licensed payment gateways (MyFatoorah, Tamara); we do not store card numbers.
• Health data: what you share voluntarily in consultations or with Rihanna (such as skin type or allergies). It is treated as sensitive and seen only by the treating doctor and the systems needed to provide the service.
• Technical data: device and browser type, IP address, and cookies needed to run and improve the site.

Why we use it

• To fulfil and deliver orders and issue tax invoices.
• To provide medical consultations and keep their summaries in your account.
• To personalise Rihanna's product and routine suggestions.
• To send order notifications — and offers only if you agree.
• To comply with regulations (such as ZATCA requirements) and prevent fraud.

The AI assistant (Rihanna)

Rihanna uses AI technology from trusted providers. We send only what is needed to answer your question and never use your conversations for advertising. Rihanna does not replace a doctor and refers you to one when needed.

Sharing data

We do not sell your data. We share it only with: shipping companies (name, address, mobile), payment gateways, the doctor you book, and technical service providers bound by confidentiality — or official authorities when legally required.

Your rights

• Access your data and obtain a copy.
• Correct your data from your profile.
• Request deletion of your account and data (keeping what the law requires, such as invoices).
• Withdraw consent to marketing messages at any time.

Privacy contact: info@rihannacare.com

Security and retention

We use encrypted connections (HTTPS), hashed passwords and limited access permissions. Data is kept for the life of the account, and invoices for as long as the law requires.

Cookies

We use cookies to keep you signed in and remember your cart and language, and for aggregated usage statistics. You can control them in your browser settings; some features may stop working if disabled.

Changes

We may update this policy and will announce material changes on the site or by email.