This Privacy Policy explains how Viorra collects, uses, stores, shares, and protects the personal data of visitors and customers when they visit our store, use our services, or make a purchase.

We process personal data in accordance with the applicable laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law, its Implementing Regulations, and the E-Commerce Law.

Personal Data We Collect

We may collect information that customers or users provide directly, including:

• Name.
• Phone number.
• Email address.
• Shipping and billing address.
• Order and purchase details.
• Account information, where a store account is created.
• Communications and inquiries submitted to customer service.
• Cancellation, return, exchange, and complaint information.
• Product reviews, feedback, and preferences.
• Content of conversations with customer service or our chat assistant.
• Any other information voluntarily provided while using the store.

We may also automatically collect certain technical and usage information, including:

• Internet Protocol address.
• Device type, browser, and operating system.
• Pages and products viewed.
• Searches and product interactions.
• Date, time, duration, and source of the visit.
• Shopping cart and favorite-product information.
• Cookies and similar technologies.
• Interaction with messages, advertisements, and marketing campaigns.

Payment Data

Payments are processed through approved payment service providers.

Viorra does not ordinarily store complete bank card information, such as the full card number or security code.

We may receive limited information relating to a payment transaction, including:

• Payment status.
• Payment method used.
• Transaction amount.
• Transaction reference number.
• Limited final digits of the card, where provided by the payment service provider.

Payment data is also subject to the privacy and security policies of the selected payment service provider.

How We Use Personal Data

We may use personal data to:

• Create and manage customer accounts.
• Receive, process, and fulfill orders.
• Collect payments and verify financial transactions.
• Prepare, ship, and track orders.
• Communicate with customers regarding orders and delivery.
• Issue invoices and order notifications.
• Process cancellations, returns, and exchanges.
• Provide customer service and respond to inquiries and complaints.
• Improve the store’s performance and user experience.
• Personalize store content and product suggestions.
• Analyze website usage and product performance.
• Measure the effectiveness of advertising and marketing campaigns.
• Detect unusual activity and prevent fraud or misuse.
• Protect the store, customers, and electronic transactions.
• Comply with legal, accounting, and tax obligations.
• Send promotional messages where consent or another appropriate legal basis exists.

We do not use personal data for purposes that are incompatible with the purposes for which it was collected, unless permitted by law or after obtaining any required consent.

Artificial Intelligence and Automated Systems

Viorra may use artificial intelligence tools and automated systems to improve its services and the customer experience, including:

• Operating chat assistants and customer service tools.
• Responding to product and order inquiries.
• Providing product recommendations and suggestions.
• Personalizing store content and offers.
• Analyzing customer preferences and browsing or purchasing behavior.
• Improving store search results.
• Summarizing and categorizing inquiries and improving response times.
• Improving product descriptions and content.
• Measuring service and marketing performance.
• Detecting unusual activities and reducing fraud.

Data provided while using these services may be processed, including conversation content, inquiries, browsing history, order history, and preferences, to the extent necessary to provide and improve the service.

We may use technology or artificial intelligence service providers to process certain data on our behalf. Before approving such providers, we will consider:

• Where the data is stored and processed.
• Whether customer data or conversations are used to train artificial intelligence models.
• Whether the use of data for training can be disabled.
• Whether the data is transferred outside Saudi Arabia.
• The provider’s security and data-protection measures.
• Contractual terms concerning confidentiality, use, retention, and deletion of data.

We will not ask users through chat tools to provide passwords, complete bank card information, or sensitive information that is not necessary to provide the service.

Where consent is legally required for a particular processing activity, we will obtain it before processing. Users may withdraw their consent in accordance with applicable laws.

Automated product recommendations should not be treated as medical or specialized professional advice. Customers remain responsible for purchasing and using products in accordance with the product information and instructions.

Legal Bases for Processing

We may process personal data on one or more of the following legal bases:

• The data subject’s consent.
• Performance of a sales contract or requested service.
• Taking steps requested by the customer before completing an order.
• Compliance with a legal obligation applicable to the store.
• Pursuing a legitimate interest that does not override the rights and interests of the data subject.
• Protecting the vital interests of the data subject or another person where permitted by law.

Sharing Personal Data

We may share the minimum amount of data necessary with parties that help us operate the store and provide our services, including:

• Shopify and related technology providers.
• Shipping and delivery companies.
• Payment service providers and banks.
• Hosting, storage, and cybersecurity providers.
• Email and SMS service providers.
• Customer-service and chat-system providers.
• Analytics, advertising, and marketing providers.
• Artificial intelligence and automated-system providers.
• Accountants, auditors, and professional advisers where necessary.
• Governmental, judicial, or regulatory authorities where legally required or permitted.

We do not sell customers’ personal data for monetary consideration.

We share data only to the extent necessary for the specified purpose and seek to require service providers processing data on our behalf to maintain appropriate confidentiality and security measures and not use the data for unauthorized purposes.

Shopify

Viorra is hosted and operated using Shopify, which provides the technical infrastructure required to run the store and receive and process orders.

Shopify, its affiliates, and its service providers may process visitor and customer data to provide, operate, and secure the platform.

Shopify’s processing of personal data is subject to its own policies and terms, as well as applicable legal and contractual requirements.

Shipping and Delivery Providers

When an order is placed, we may provide the shipping company with the information necessary to deliver it, including:

• Recipient’s name.
• Phone number.
• Delivery address.
• Order number.
• Shipment details required for delivery.
• Cash-on-delivery amount, where this payment method is available.

Shipping providers are expected to use this information only to provide delivery services and fulfill related obligations.

Marketing Communications

We may use email addresses, phone numbers, or interaction data to send:

• Offers and discounts.
• New-product announcements.
• Shopping-cart reminders.
• Product recommendations.
• Surveys.
• Promotional messages and campaigns.

Such communications are sent based on customer consent or as otherwise permitted by applicable laws.

Customers may unsubscribe from marketing communications at any time by:

• Using the unsubscribe link in the message.
• Following the opt-out instructions in an SMS.
• Updating marketing preferences through their account, where available.
• Contacting us by email.

Opting out of marketing communications does not affect essential messages relating to orders, payments, shipping, returns, or customer service.

Cookies

The store uses cookies and similar technologies to operate the website and improve the user experience.

These technologies may be used to:

• Remember shopping-cart contents.
• Save user preferences.
• Support login and session management.
• Operate essential website functions.
• Analyze store visits and usage.
• Detect technical issues and unusual activity.
• Personalize content and recommendations.
• Display advertisements and measure their effectiveness, where any required consent has been obtained.

Users may control cookies through their browser settings or through a consent-management tool available on the store, where provided.

Disabling essential cookies may affect certain store functions.

International Data Transfers

Because we use Shopify and technology, payment, shipping, analytics, marketing, and artificial intelligence providers that may operate through international infrastructure, some personal data may be processed or stored outside the Kingdom of Saudi Arabia.

When transferring data outside Saudi Arabia, we seek to comply with applicable legal requirements and safeguards. These may include appropriate contractual arrangements and an assessment of the level of protection provided by the receiving party.

We will review service providers before approving them, particularly regarding data-storage locations, the use of data to train systems, retention periods, and the ability to retrieve or delete data.

Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected or to meet legal, accounting, tax, dispute-resolution, and rights-protection requirements.

Retention periods vary depending on the type of data, the purpose of its use, and applicable legal requirements.

When data is no longer required, it will be deleted, destroyed, or anonymized unless there is a lawful basis for retaining it for a longer period.

Data Security

We implement appropriate organizational, technical, and administrative measures designed to protect personal data against:

• Unauthorized access.
• Unlawful use or disclosure.
• Unauthorized alteration.
• Loss or damage.
• Security breaches or leaks.

These measures may include restricting access permissions, using secure communications, reviewing service providers, and regularly updating security procedures.

However, no electronic method can guarantee absolute security, and we continually review and improve our security practices.

Data Subject Rights

Subject to applicable laws, data subjects may have the following rights:

• The right to be informed about how their personal data is collected and processed.
• The right to access their personal data.
• The right to request a clear and readable copy of their personal data where legally available.
• The right to request the correction, completion, or updating of inaccurate data.
• The right to request destruction of data once the purpose for which it was collected has ended, subject to legal retention requirements.
• The right to withdraw consent where processing is based on consent.
• The right to submit a complaint to the competent authority.
• Any other rights granted under applicable law.

Certain rights may be subject to legal restrictions or exceptions, including legal requirements to retain transaction and invoice records.

Exercising Data Rights

Requests to access, correct, destroy, or inquire about personal data, or to withdraw consent, may be submitted to:

care@viorra-sa.com

Please clearly describe the request and provide the information necessary to verify the requester’s identity and protect personal data from unauthorized access.

We will review and respond to the request within the legally applicable period. We may request additional information to verify identity or identify the relevant data.

Children’s Data

The store is not primarily directed at children, and we do not knowingly intend to collect personal data from minors without the supervision of a parent or legal guardian.

If we become aware that a child’s data has been collected inappropriately, we will take appropriate steps to delete or otherwise process it in accordance with applicable legal requirements.

Third-Party Links and Services

The store may contain links to or integrations with external websites and services.

Viorra is not responsible for the independent privacy practices of those third parties. Users are encouraged to review their privacy policies before providing personal data or using their services.

Legal Disclosure

We may disclose personal data where required by law, a court order, or a request from a competent authority.

We may also disclose data where necessary to protect the rights of the store or its customers, investigate fraud or security risks, or enforce agreements and policies, to the extent permitted by law.

Changes to This Privacy Policy

We may update this Privacy Policy when our services, service providers, data-processing practices, or legal requirements change.

The updated version will be published on this page. The date shown below will indicate when the updated version takes effect.

Last updated: July 16, 2026

Contact Us

For questions or requests relating to privacy and personal data, please contact us at:

care@viorra-sa.com