How we collect, use, and protect your personal data — in line with Saudi Arabia's Personal Data Protection Law (PDPL).
Shipnex is committed to protecting the privacy of everyone who uses the platform — customers, merchants, and couriers — and to processing their personal data in line with the Personal Data Protection Law (PDPL) issued in Saudi Arabia and its implementing regulations. This policy explains the data we actually collect, why we process it, and your rights over it.
The party responsible for processing your data is Shipnex — a limited liability company registered in Saudi Arabia, commercial registration number 7054573881, based at Building 8310, Salman bin Abdulaziz Street, Al Rayyan District, Unaizah 56241, Saudi Arabia.
We collect the minimum the service needs to run:
| Category | Examples | From |
|---|---|---|
| Account data | Your name, mobile number (verified by an OTP code) | Everyone |
| Addresses | Saved delivery addresses and their coordinates | Customers |
| Order data | Order history, contents, value, chosen payment method | Customers |
| Location | The courier's location while carrying out a delivery (for tracking and assignment) | Couriers |
| Store data | Business name, menu, opening hours, settlement data | Merchants |
| Usage data | Technical logs needed for security and fault diagnosis | Everyone |
A note on payment: electronic payments are processed by a licensed payment provider; the platform does not store your bank card numbers.
Shipnex does not transfer your personal data outside Saudi Arabia today. If that changes, we will update this policy before it takes effect.
We keep your data for as long as your account is active and for as long as we need it for the purposes above, or to meet legal requirements (such as financial records and invoices). After that, it is deleted or securely anonymised.
Under the Personal Data Protection Law, you have the right to:
To exercise any of these rights, contact us through the channel below and we will respond within the statutory timeframes.
We apply appropriate technical and organisational measures to protect your data, including encrypted connections, access to data restricted on a need-to-know basis, and audit logs for sensitive operations.
We do not use automated decision-making or profiling that produces legal or similarly significant effects on you today.
We may update this policy from time to time, and will notify you of any material change through the app. The date at the top of this page always shows the last update.
For any privacy question, or to exercise your rights, contact us through the help centre.
The Arabic text of this policy prevails over any translation, including this one.