Privacy Policy

Introduction

At Question & Answer Trading Company (hereinafter referred to as “Q&A” or “we” or “us”), we prioritize the privacy of our customers and website visitors and are committed to providing them with excellent service. This Privacy Notice has been created in accordance with the Saudi Personal Data Protection Law (KSA PDPL) and its Implementing Regulations. The purpose of this notice is to help you understand the nature of the data we collect from you and how this data will be handled by Question & Answer Trading Company.

For the purposes of this Privacy Notice, “personal data” means: “any information—regardless of its source or form—that may lead to identifying the user specifically or make them identifiable directly or indirectly, including but not limited to names, personal identification numbers, addresses, contact numbers, license numbers, records and personal properties, bank account numbers and credit card numbers, static or moving images of the user, and other personal data.”

This Privacy Notice applies to all sectors and business units within the company. All employees, contractors, and temporary or permanent workers are required to adhere to the standards and procedures outlined in this document. Our commitment to your privacy is fundamental to our operations, ensuring that your personal data is handled with the utmost care and in compliance with relevant legal requirements.

Collection and Use of Personal Data

Purpose and Legal Basis for Processing Personal Data

At Q&A, we are committed to providing outstanding services and products. To achieve this, your personal data is collected and used based on the following legal grounds:

Contractual obligations: Personal data is processed to fulfill our contractual obligations to provide the service to you.

Consent: Personal data is processed for other activities including but not limited to sharing information, sales, marketing, etc.

Legal compliance: Personal data is processed to comply with governmental requirements including but not limited to national security and public health protection, to meet legal requirements, or to respond to legal claims.

Purpose of Data Collection

Collecting your personal data serves multiple purposes including but not limited to:

• Enhancing our ability to develop, market, and provide products and services to Q&A customers.

• Supporting our organizational and operational needs to ensure continuity and quality of services, and to provide accurate billing and process payments for products and services.

• Understanding your needs as a customer and your eligibility for products and services and recommending products and services that may suit you.

• Notifying you of new products and services.

• Responding to any inquiries or complaints you may have, allowing us to provide you with a personalized customer experience across all our channels.

• Preventing fraud by processing your usage data to protect against and detect fraud and to protect and detect misuse or damage to our networks or to recover debts or track those who owe us money resulting from the use of our services.

Cooperation with Third Parties

Q&A Trading Company may cooperate with other entities to ensure the quality of the services provided. If your personal data is shared with these entities, it will be limited to the purposes specified in this Privacy Notice and according to the consent you have provided.

This Privacy Notice reflects our commitment to protecting your personal data while delivering the highest standards of service quality.

Types of Personal Data We Collect and Use

• Registration data: Data required when registering for our services (such as name, email address, address, phone number, date of birth, nationality, and gender).

• Usage data: Data required to use our services, websites, or mobile applications (such as cookies and usage patterns).

• Communication data: Data exchanged during communication with you (such as customer support requests and feedback).

• Device information: Device data for product recommendations and resolving technical complaints (such as device ID).

• Operational data: Data required to improve operational services (such as customer location data).

Methods of Data Collection

• Products and services: When registering on the website or store or using or signing a contract to become our customer and using one of our products or services.

• Direct interactions: When completing and submitting a form to us through our website, mobile applications, email, mail, or via a phone call to our contact center. This includes any personal data you provide when making an inquiry or participating in a promotional offer. (Steps to unsubscribe from promotional emails: click on the “unsubscribe” option at the bottom of the promotional email page or in your personal account page).

• Social media interactions: Any posts and interactions you make with us directly on social media channels.

• Browsing: Data about how you use our website, including the date and time of your visit, the type of internet browser you use, and how you were referred to our website.

Data Retention Policy

Your personal data is stored as long as necessary, in accordance with specified retention periods, for the purposes for which it was collected and to meet any legal, regulatory, accounting, or reporting requirements.

We regularly review data retention periods to ensure that your personal data is not retained longer than necessary. Your personal data may be retained after the purpose of its collection has ended only if retention is based on a legal basis or if it is related to a case under consideration before a judicial authority, and it will be deleted after a specified period.

Furthermore, we may retain your personal data if such retention is necessary to prevent fraud or future misuse, to enable us to exercise our legal rights and/or defend against legal claims, or if required by law or for other legitimate purposes. We may continue to retain some of your personal data for analysis and research purposes after anonymization so that you cannot be identified.

Data Protection and Disclosure

We prioritize protecting your data and implement strict organizational and technical measures including internal and external audits and training employees and contractors on privacy. Disclosure of personal data is strictly regulated and occurs only when required by law or necessary to provide the service, while maintaining privacy and compliance with the Saudi Personal Data Protection Law (KSA PDPL). We always maintain the confidentiality of all personal data collected. This personal data may be disclosed or shared after obtaining necessary approvals and when required by law or when we believe such action is necessary or desirable to provide products, services, or technical support and in accordance with the purposes of data collection and types of personal data collected.

Exceptions to Data Disclosure

Data may be transferred outside the Kingdom of Saudi Arabia or disclosed to third parties only in specific cases such as legal obligations or extreme necessity related to the health or safety of an individual, in accordance with the Saudi Personal Data Protection Law (KSA PDPL) and its Implementing Regulations.

Cases of Disclosure Without Consent

We will not disclose your personal data without your consent except in the following circumstances, where the requesting entity is a public authority. In this case, personal data will be shared in accordance with the controls and procedures specified in the Saudi Personal Data Protection Law:

• For security purposes

• To enforce another law

• To meet judicial requirements

• To protect public health or safety

• To protect the life or health of a specific individual (or group of individuals)

Customer Rights

As our customer, you have the right to be informed about the purpose and type of personal data we hold about you, and you have the right to access, correct, update, delete, and obtain a copy of it. You also have the right to withdraw your consent to the processing of your personal data at any time in accordance with applicable laws, regulations, and provided there are no legal, regulatory, or judicial restrictions preventing this. We will provide you with the following rights based on your relationship with us:

• Right to be informed: the right to know how we process your personal data, the legal basis, and the purpose of collection.

• Right of access: the right to access your personal data that we retain.

• Right to request personal data: the right to request your personal data in a clear and readable format.

• Right to withdraw consent: the right to withdraw your consent for processing your personal data.

• Right to request correction of personal data: the right to request correction, completion, or updating of your personal data.

• Right to request deletion of personal data: the right to request deletion of your personal data when it is no longer required for the purpose for which it was collected.

Steps to Delete Account through Q&A Website / Store

Step one: Log in to (My Account)

Step two: Personal Information < (Delete Account)

We aim to respond to all data subject rights requests within 30 days in accordance with Article Three of the Implementing Regulations of the Personal Data Protection Law. In some cases, it may take an additional 30 days to respond if your request is particularly complex or you have multiple requests. In this case, we will inform you and keep you updated on progress.

Additional Provisions

Updates to Privacy Notice

Periodic reviews: The Privacy Notice may be updated to reflect new legal requirements or operational changes. You will be notified of any changes in processing activities through the updated Privacy Notice. We recommend visiting the website regularly for updates, or we will notify you through the agreed communication method.

This notice was last updated on Friday, October 14, 2024

Links to Other Websites

Our digital platforms may contain links to third-party websites, which may be subject to separate privacy policies. These websites are not under our control, and we are not responsible for their privacy policies.

If you have any questions or concerns regarding our personal data processing activities or this Privacy Notice, you can contact us through support channels or call 8001196666

Quality Policy

For health and safety reasons, all cosmetic products are not returnable or exchangeable, except in the case of a manufacturing defect or error in the product.

Shipping Duration:

1 – Customers in major cities: delivery time ranges from 2 to 4 business days from the invoice date.

2 – Customers outside major cities: shipping time ranges from 4 to 7 business days from the invoice date,

If the order is not received by the customer within 15 days, it will be automatically canceled.

Payment Methods:

You can use one of the following payment methods:

1 – Through the website using (Visa – MasterCard) issued from anywhere.

2 – Cash on Delivery:

3 – Via Tamara and Tabby

· Using (Visa – MasterCard – debit card) through the Saudi mobile POS device

· Cash payment upon delivery to the courier, with no additional fees added to the product

Return policy for Tamara and Tabby payment method:

The full invoice intended for return will be refunded in full, and the refunded amounts to the customer will be through Tamara and Tabby.

A new invoice will be issued with a new order, and the amounts will be paid by the customer to Tamara and Tabby.

For orders paid through the Tamara and Tabby payment method, returns are within (7) days according to the following mechanism:

The item to be returned must be returned in full, and the refunded amounts to the customer will be through Tamara and Tabby.