Privacy Policy

Last updated: 14 October 2026

This Privacy Policy explains how Enmaa and Injaz Sanitary Ware Company (“we”, “us”) collects, uses, protects and shares your personal data when you use our online store at enma-injaz.com, and the rights you have over that data, in accordance with the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations. We are the “controller” responsible for personal data processed through this website.

1. Personal data we collect

  • Data you provide: your name, email address, mobile number, shipping and billing address, company name (optional), order details, and anything you send us through contact forms, email or WhatsApp.
  • Account data: your login details if you create an account.
  • Payment data: card details are processed directly by our secure payment gateway provider. We do not store card numbers on our servers.
  • Data collected automatically: IP address, device and browser type, pages visited, products viewed or added to the cart, and cookie and advertising identifiers.

We do not ask for your National ID or Iqama number to complete a purchase, and we do not collect sensitive data. You can browse the website without creating an account.

2. Why we process your data and our legal basis

  • To fulfil your orders, including payment, shipping, delivery, exchanges, returns and customer service, and to manage your account. (Performance of our contract with you)
  • To issue invoices and keep commercial and tax records. (Compliance with our legal obligations)
  • To protect the website and prevent fraud and spam. (Our legitimate interest)
  • To analyse how the website is used and improve the shopping experience. (Your consent or our legitimate interest, depending on the tool)
  • To show and measure advertising and to send offers and marketing messages. (Your consent)
  • To remind you about items left in your cart. (Your consent or our prior dealings with you; you can opt out at any time)

We do not use your data for purposes incompatible with those listed above, and we limit it to the minimum needed to achieve them.

3. Cookies, analytics and advertising tools

Cookies are small files stored on your device that remember your cart, login and preferences, and help us measure how the website is used. Our website uses Google Analytics, Google Tag Manager and Microsoft Clarity, as well as advertising tools from Google, Meta, TikTok and Snapchat. These tools process information about the pages you visit, product interactions and purchase events, and purchase measurement data may also be sent from the store’s server to Google Analytics and Meta. Microsoft Clarity provides behavioural metrics, heatmaps and session recordings that help us understand how visitors use the website.

You can accept or reject non-essential cookies through the website’s cookie settings when they appear, and you can manage or delete cookies in the settings of whichever browser you use. Blocking essential cookies may affect features such as the shopping cart or account login. A browser “Do Not Track” signal does not automatically stop all analytics or advertising technologies on this website. To learn more, see the privacy policies of Google, Microsoft, Meta, TikTok and Snap.

4. Sharing your data

We do not sell your personal data. We share it only as needed with:

  • Our payment gateway provider, to process payments.
  • Shipping and delivery companies, to deliver your orders.
  • Providers of hosting, content delivery, security and email delivery services.
  • The analytics and advertising providers listed in section 3.
  • Government or judicial authorities where the law requires us to.

Service providers that process data on our behalf are required to protect it and to use it only for the specified purposes.

5. Transfers outside the Kingdom

Some of the service providers listed above may process your data outside the Kingdom of Saudi Arabia. Where this happens, transfers are limited to the minimum necessary and are carried out in accordance with the PDPL and the Regulation on Personal Data Transfer outside the Kingdom, with appropriate safeguards in place.

6. How long we keep your data

We keep personal data only for as long as needed for the purpose it was collected for. Order and invoice records are kept for the periods required by applicable Saudi laws. When data is no longer needed, we destroy it or anonymise it so that it can no longer be linked to you.

7. How we protect your data

We apply organisational and technical measures to protect your data, including encrypted connections to the website (SSL/TLS), restricting access to authorised staff who are bound by confidentiality, and periodic security reviews of the website. Payments are processed through a secure payment gateway provider, and card details are not stored on our servers.

8. Your rights under the PDPL

  • Right to be informed about how your data is collected, why it is processed and on what legal basis, as set out in this policy.
  • Right of access to the personal data we hold about you, and to receive a copy in a clear, readable electronic format.
  • Right to correction of inaccurate, incomplete or outdated data. You can update much of it directly from your account.
  • Right to destruction of your data when it is no longer needed, unless the law requires us to keep it. This includes deleting your account.
  • Right to restrict processing while the accuracy of your data is being verified.
  • Right to withdraw consent at any time for any processing based on your consent, including marketing messages. Withdrawal does not affect processing carried out before it.

To exercise any of these rights, email us at e-store@enma-injaz.com with the subject “Personal data request”. We will respond within 30 days; in certain cases this may be extended by a further 30 days, and we will let you know if so. We may ask you to confirm details linked to your account or order to verify your identity before acting on a request. You can unsubscribe from marketing messages at any time using the link in the message or by contacting us.

If you are not satisfied with how we have handled your data, please contact us first. You also have the right to lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA), as the competent authority, within 90 days of the incident, in accordance with the Implementing Regulations.

9. Children

This website is not directed at anyone under 18. We do not knowingly collect personal data from people who lack full legal capacity without their guardian’s consent, and if we become aware of such data we will destroy it.

10. Third-party links

The website may include links, products or services from third parties that have their own independent privacy policies. We are not responsible for the content or practices of those websites, and we recommend reviewing their privacy policies.

11. Data breaches

If a breach of, or unauthorised access to, personal data occurs that could harm you or your rights, we will notify SDAIA within 72 hours of becoming aware of it, and we will notify you without undue delay in clear language, explaining what happened and the steps you can take to protect yourself.

12. Changes to this policy

We may update this policy from time to time. The updated version will be posted on this page with its last updated date, and we will notify you of material changes through appropriate means.

Contact us
If you have any questions about this Privacy Policy or your personal data, you can contact us using the information below.
Email: e-store@enma-injaz.com
Unified number: 0138105755
Address of the main office of Enmaa and Injaz Sanitary Ware Company:
Balhamar Business Gate, Al Shati Al Sharqi District, Dammam, Kingdom of Saudi Arabia