Privacy Policy

Last updated: 27 July 2026

This Privacy Policy explains how 39riyal.com, operated by Jazirah Al Ahdhiyah For Trading, collects, uses, shares, stores, and protects personal information.

The Saudi Personal Data Protection Law requires organisations processing personal information to provide an accessible privacy policy before collecting that information.

1. Business Information

Legal company name: Jazirah Al Ahdhiyah For Trading
Trading name: 39 Riyal
Commercial Registration number: 4030201099
VAT registration number: 311333372400003
Registered business address: 3406, Jeddah, Makkah Province 22236, Saudi Arabia
Website: 39riyal.com
Email: support@thelightstep.com
WhatsApp: +966 54 214 0973

For privacy requests, email is preferred because it provides a clear and straightforward record.

2. Information We Collect

Depending on how you use our services, we may collect:

  • Full name
  • Email address
  • Mobile number
  • Billing address
  • Delivery address
  • Account information
  • Order history
  • Product selections
  • Payment status
  • Transaction references
  • Return and refund information
  • Customer-support messages
  • Reviews and feedback
  • Photographs or videos submitted for a complaint
  • Social-media usernames
  • Marketing preferences
  • Device and browser information
  • IP address
  • Approximate location based on IP address
  • Website activity
  • Products viewed
  • Cart and checkout activity
  • Cookie and advertising identifiers

3. Payment Information

Payments may be processed by Shopify, payment gateways, banks, card networks, digital wallets, or instalment providers.

We generally do not directly receive or store complete card numbers or card-security codes when payment is processed by an authorised payment provider.

We may receive limited information such as:

  • Payment method
  • Transaction status
  • Transaction reference
  • Card type
  • Limited card information supplied by the payment processor

4. How We Use Information

We may use personal information to:

  • Create and manage customer accounts
  • Process and confirm orders
  • Process payments
  • Prepare and deliver products
  • Send order and delivery updates
  • Process returns and refunds
  • Provide customer support
  • Respond to complaints
  • Prevent fraud
  • Protect website security
  • Improve our website and products
  • Analyse website activity
  • Maintain accounting and VAT records
  • Comply with legal obligations
  • Send marketing communications where permitted
  • Measure advertising performance

5. Legal Grounds for Processing

Depending on the circumstances, personal information may be processed based on:

  • Customer consent
  • The need to fulfil an order or contract
  • Legal or regulatory obligations
  • Legitimate business interests where permitted
  • Fraud prevention and security
  • Another lawful basis available under applicable Saudi law

Where processing is based on consent, consent may be withdrawn subject to applicable requirements.

6. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, and similar technologies.

These technologies may be used for:

  • Shopping-cart operation
  • Checkout
  • Customer login
  • Security and fraud prevention
  • Remembering preferences
  • Website analytics
  • Website improvement
  • Advertising measurement
  • Personalised advertising where permitted

Customers may manage available cookie preferences through the website’s cookie settings or browser settings.

Disabling essential cookies may affect website functionality.

7. Marketing Communications

Where permitted, we may send:

  • Promotional emails
  • New-product announcements
  • Offer notifications
  • Discount codes
  • Back-in-stock alerts
  • Product recommendations

Customers may unsubscribe using the link provided in a marketing email or by contacting support@thelightstep.com.

Unsubscribing from marketing will not stop essential messages concerning orders, payments, deliveries, returns, refunds, or account security.

8. Sharing Personal Information

We do not sell customer personal information.

We may share necessary information with:

  • Shopify
  • Payment providers
  • Banks and card networks
  • Digital-wallet providers
  • Buy-now-pay-later services
  • Courier and delivery companies
  • Website and cloud-service providers
  • Customer-support providers
  • Analytics providers
  • Advertising platforms
  • Fraud-prevention providers
  • Accountants, auditors, and legal advisers
  • Government or competent authorities where legally required

Service providers are expected to use information only for authorised purposes.

9. Delivery Companies

To deliver an order, we may share:

  • Customer name
  • Mobile number
  • Delivery address
  • Shipment reference
  • Cash-on-delivery amount
  • Delivery instructions

10. International Data Transfers

Some technology, cloud, analytics, payment, or advertising providers may process information outside Saudi Arabia.

Where personal information is transferred internationally, we will seek to use the appropriate safeguards required under applicable Saudi data-transfer rules.

11. Data Retention

We retain personal information only for as long as reasonably necessary to:

  • Complete orders
  • Provide customer support
  • Process returns and refunds
  • Maintain accounting and tax records
  • Prevent fraud
  • Resolve disputes
  • Meet legal obligations
  • Fulfil the purposes described in this policy

When information is no longer required, we will take reasonable steps to delete, destroy, anonymise, or restrict it, subject to legal retention requirements.

12. Information Security

We use reasonable administrative, organisational, technical, and physical safeguards designed to protect personal information from:

  • Unauthorised access
  • Loss
  • Misuse
  • Alteration
  • Disclosure
  • Destruction
  • Cybersecurity threats

No online transmission or storage system can be guaranteed to be completely secure.

Customers are responsible for protecting their passwords and devices.

13. Personal-Data Rights

Subject to applicable law and permitted exceptions, customers may have the right to:

  • Be informed about personal-data processing
  • Access personal information
  • Request a copy of personal information
  • Correct inaccurate information
  • Update incomplete information
  • Request deletion or destruction where legally permitted
  • Withdraw consent where processing is based on consent
  • Submit a privacy complaint

14. Exercising Your Rights

To submit a privacy request, email:

support@thelightstep.com

Use the email subject:

Privacy Request – Your Full Name

Include:

  • Full name
  • Email address
  • Mobile number
  • Order number where relevant
  • Clear description of the request

We may request reasonable identity verification before releasing, correcting, or deleting personal information.

15. Children’s Privacy

The website is intended for customers who are legally capable of placing an order or who use it with the involvement of a parent or legal guardian.

We do not knowingly seek to collect personal information directly from children without appropriate involvement from a parent or guardian.

16. Social Media and Messaging Services

When customers contact us through WhatsApp, Telegram, Instagram, or TikTok, those platforms may independently collect information according to their own privacy policies.

Information sent to us may include:

  • Name or username
  • Mobile number
  • Profile information
  • Messages
  • Images
  • Videos
  • Order details

For privacy requests and detailed order matters, email is preferred.

17. Reviews and Public Content

Product reviews, comments, or photographs submitted publicly may be visible to other visitors.

Customers should not include:

  • Payment information
  • Full addresses
  • Private mobile numbers
  • Identification documents
  • Confidential information

18. Privacy Complaints

We encourage customers to contact us first so that we can investigate and attempt to resolve the concern.

Email: support@thelightstep.com
Subject: Privacy Complaint – Your Full Name

19. Changes to This Policy

We may update this Privacy Policy to reflect changes to our website, services, providers, practices, or legal requirements.

The latest version will be published with an updated revision date.

20. Contact Us

39 Riyal
Operated by Jazirah Al Ahdhiyah For Trading

Commercial Registration: 4030201099
VAT registration number: 311333372400003
Registered business address: 3406, Jeddah, Makkah Province 22236, Saudi Arabia
Website: 39riyal.com
Email: support@thelightstep.com
WhatsApp: +966 54 214 0973
Telegram: +966 54 214 0973
Instagram: @thelightstep_official
TikTok: @thelightstep_official

Customer-support hours:
Saturday to Thursday: 9:00 AM–9:00 PM
Friday: Closed
Saudi Arabia time

7. Cookie Notice

You can use this short notice in your Shopify cookie banner:

We use essential cookies to operate our website and, with your permission, analytics and advertising cookies to understand website usage and improve your shopping experience. You can accept, reject, or manage optional cookies through Cookie Preferences. For more information, please review our Privacy Policy.

Do not leave an old Arabic cookie message connected to The Light Step if 39riyal.com is currently displayed in English. Update the cookie-banner branding, privacy-policy link, and translations separately in Shopify.