Privacy Policy

This Privacy Policy explains how PRIZE Company (“PRIZE”, “we”, “us”, or “our”) collects, uses, protects, and processes personal data when you use the PRIZE mobile application and website.

PRIZE provides services including shopping, wishlists, occasions, gift purchases, group contributions toward gifts, and the use of in-app balance.

We are committed to protecting the privacy of our users and handling personal data in accordance with the applicable laws and regulations of the Kingdom of Saudi Arabia.

⸻

1. Data Controller

PRIZE Limited Liability Company

Kingdom of Saudi Arabia – Riyadh

Unified National Number: 7049411981

Commercial Registration Number: 1009211319

For privacy and personal data inquiries, please contact us at:

[email protected]

⸻

2. Personal Data We Collect

PRIZE may collect and process personal data necessary to provide and operate its services, including:

Account and Contact Information

* Name.

* Mobile phone number.

* Email address.

* Account registration and account management information.

Order and Delivery Information

* Delivery addresses.

* Information about purchased products.

* Recipient information necessary to fulfill and deliver a gift.

* Order details and order status.

Wishlists and Occasions

* Products added to wishlists.

* Occasions created by users.

* Wishlist and occasion visibility settings.

* Information that users choose to share with others.

Contributions and Balance Information

* Contribution records.

* Balance top-ups.

* Use of the in-app balance.

* Refund and settlement records related to the service.

Customer Support and Communications

* Communications with customer support.

* Complaints and inquiries.

* Information related to orders or transactions that the user contacts us about.

Payment and Delivery Information

PRIZE may receive payment status from the payment service provider, delivery status from the delivery company, and information related to order fulfillment from the relevant merchant when necessary to provide the service.

PRIZE does not retain bank card information except to the extent that this is actually confirmed based on the payment service provider and the technical operating model used by the platform.

⸻

3. Gift Recipient Information

When purchasing a gift for another person, the user may provide information relating to the gift recipient, such as their name, delivery address, and contact information necessary to fulfill the order.

The user is responsible for ensuring that they have a lawful basis for sharing the recipient’s personal data with PRIZE. PRIZE uses such information only to the extent necessary to fulfill the order, arrange delivery, and provide the requested service.

Gift recipient information will not be used for unrelated purposes unless there is an independent lawful basis or the required consent, where applicable.

⸻

4. Technical Data and Cookies

PRIZE may collect certain technical information necessary to operate, secure, and improve its website and application, including device information, technical logs, IP address, cookies, and similar technologies, depending on the services and tools actually used by the platform.

These technologies may be used for purposes including:

* Operating the website and application.

* Maintaining account security.

* Detecting and preventing fraud and misuse.

* Improving service performance.

* Analyzing usage where such tools are enabled.

The specific tools and services used, and their purposes, depend on the actual configuration and operation of the platform.

⸻

5. How We Use Your Personal Data

PRIZE uses personal data for purposes necessary to provide and operate its services, including:

* Creating and managing user accounts.

* Processing orders and gift purchases.

* Processing group contributions.

* Managing wishlists and occasions.

* Recording and managing balance transactions.

* Delivering products and gifts.

* Communicating with users regarding orders and transactions.

* Handling complaints and inquiries.

* Preventing fraud and misuse of the platform.

* Complying with applicable legal and regulatory obligations.

The processing of personal data may be based on the performance of a contract with the user, compliance with a legal obligation, consent where required, or a legitimate interest where permitted by applicable law and after considering the rights of the data subject.

⸻

6. Marketing and Promotional Communications

PRIZE may send marketing communications or promotional offers where there is an appropriate lawful basis for doing so.

Users may opt out of marketing communications or withdraw their consent where applicable.

Opting out of marketing communications does not affect necessary service-related communications, including:

* Order confirmations.

* Delivery updates.

* Account notifications.

* Security notifications.

* Notifications necessary to complete transactions.

⸻

7. Wishlists, Occasions, and Contributions

PRIZE allows users to create wishlists and occasions and share them with others according to the privacy and sharing options available within the platform.

A shared page or link may contain information that the user chooses to make visible, such as products, occasion information, the name of the wishlist owner, or information relating to contributions, depending on the available sharing settings.

Users are responsible for reviewing their privacy and audience settings before sharing a wishlist or occasion.

Sharing a wishlist or occasion link may allow people who can access the link to view the information made available through the applicable sharing settings.

Hiding a contributor’s name from other users does not necessarily mean that the contributor’s identity will be hidden from PRIZE or the payment service provider where disclosure is necessary to process the transaction or comply with applicable legal requirements.

⸻

8. Sharing Personal Data with Third Parties

PRIZE may share personal data to the extent necessary to provide its services with parties that assist in fulfilling transactions, including:

* The merchant involved in the order.

* JLT delivery services.

* Payment service providers.

* Technology service providers used to operate the platform.

* Notification or messaging service providers where necessary.

* Competent authorities where disclosure is required by law or pursuant to a lawful request.

PRIZE follows the principle of data minimization and seeks to share only the personal data necessary for the relevant purpose.

⸻

9. Data Security

PRIZE takes appropriate organizational and technical measures to protect personal data against unauthorized access, use, alteration, disclosure, or loss, and restricts access to personal data to authorized persons based on their need to access it.

However, no electronic or technical security measure can be considered an absolute guarantee of information security.

If a personal data incident occurs, PRIZE will handle the incident in accordance with applicable laws and regulatory requirements, including any required notifications where applicable.

⸻

10. Data Retention

PRIZE retains personal data for as long as necessary to fulfill the purposes for which it was collected or for the period required by applicable laws and regulations.

When there is no longer a legitimate operational or legal need to retain the data, PRIZE will take appropriate steps to delete, destroy, or anonymize it, subject to any legal retention requirements or ongoing disputes or claims.

⸻

11. International Data Transfers

PRIZE may rely on certain technology and service providers through which personal data may be processed inside or outside the Kingdom of Saudi Arabia, depending on the actual technical infrastructure and services used.

Where personal data is transferred or processed outside the Kingdom, PRIZE will do so in accordance with the applicable legal requirements and safeguards governing international transfers of personal data in Saudi Arabia.

⸻

12. Your Data Protection Rights

Subject to applicable laws, regulations, and relevant exceptions, data subjects may have rights including:

* The right to know how their personal data is being processed.

* The right to access their personal data.

* The right to obtain a copy of their personal data where permitted.

* The right to request correction or completion of inaccurate or incomplete data.

* The right to request destruction of personal data when there is no longer a legitimate need to retain it.

* The right to withdraw consent where processing is based on consent.

* The right to submit a complaint regarding the processing of personal data.

PRIZE will process data subject requests after verifying the identity of the requester to the extent necessary and in accordance with the applicable procedures, time limits, and legal exceptions.

⸻

13. Exercising Your Rights or Submitting a Complaint

You may contact PRIZE regarding your personal data, submit a privacy request, or file a complaint through:

Email:

[email protected]

Please describe the nature of your request and provide the information necessary to verify your identity without providing unnecessary personal data.

If you are not satisfied with the handling of your request or complaint, this Privacy Policy does not prevent you from exercising your legal rights or contacting the competent authority responsible for personal data protection in accordance with applicable laws and regulations.

⸻

14. Account Deletion

Users may request deletion of their account and the handling of their personal data through the mechanisms made available by PRIZE.

Certain information may not be immediately deleted where retention is required by law or is necessary to document a transaction, complete a financial settlement, resolve a dispute or claim, or comply with a legal obligation.

Any outstanding balances, contributions, or orders will be handled upon account deletion in accordance with applicable legal rights and obligations and the operating mechanisms of the service.

⸻

15. Children and Minors

PRIZE determines the minimum age required to use its services based on the nature of the service and applicable legal requirements.

Where a service is made available to minors, PRIZE will apply the necessary mechanisms and safeguards relating to parental or guardian consent and any other requirements imposed by applicable law.

⸻

16. Changes to This Privacy Policy

PRIZE may update this Privacy Policy from time to time due to changes in its services, applicable laws, or the way personal data is processed.

Where material changes are made, users will be notified through an appropriate method, and renewed consent will be obtained where required by law.

The Last Updated date will be displayed at the top of this Privacy Policy.

⸻

17. Contact Us

If you have any questions regarding this Privacy Policy or how PRIZE processes your personal data, you can contact us at:

PRIZE Company

Riyadh, Kingdom of Saudi Arabia

Email:

[email protected]

Website:

prize.sa

⸻

Effective Date: October 7, 2026

This Privacy Policy forms part of PRIZE’s policies and should be read together with the applicable Terms and Conditions and Refund and Return Policy.