Privacy policy

Your trust matters to us. This policy explains what personal data we collect, why we use it, who we share it with, how long we keep it, and the choices and rights you have. It applies to our website yndecided.com, your client account, your orders, and every message between you and ™ غَيْرُ مُقَرَّرً | YNDECIDED.

We follow the Saudi Personal Data Protection Law, its Implementing Regulations and its Regulation on Personal Data Transfer outside the Kingdom, as well as the Saudi E-Commerce Law. Please read this policy before you share your personal data with us. If anything is unclear, our Customer Excellence team is always happy to help.

1. Who is responsible for your data

Your personal data is controlled by Designs and Arts Trading, registered in Arabic as (شركة التصاميم والفنون للتجارة (شركة شخص واحد)), trading as (™ غَيْرُ مُقَرَّرً | YNDECIDED), (“™ غَيْرُ مُقَرَّرً | YNDECIDED”, “we”, “us”), company registered in Riyadh, Kingdom of Saudi Arabia, with commercial registration number 1010768880 and VAT registration number 314442544600003.

For any question about your personal data, please contact our Customer Excellence team:

2. The data we collect

We only collect the data we need. Depending on how you deal with us, this may include:

  • Identity and contact details: your first and last name, phone number, email address, and delivery address, including your Saudi short national address.
  • Full name details (optional): if you choose to add them to your client account, your father's, grandfather's and great-grandfather's names, your tribe or family name, and whether you are addressed as "son of" or "daughter of", so we can address you by your full name.
  • Order details: the pieces you buy, your sizes, your order and return history, and your invoices.
  • Gift details: when you send a gift, the recipient's name, phone number and delivery address, your gift message, and your choices about whether your name and the prices are shown to the recipient.
  • Payment details: your payment is handled by our payment providers. We see only limited details, such as the payment method, the last four digits of a card and the payment status. We never see or store your full card details.
  • Client account details: the email address you sign in with, the one-time sign-in codes we send you, and your saved addresses and preferences.
  • Messages with us: what you write to us by email, WhatsApp, website chat or social media, and our replies.
  • Marketing preferences: whether you have agreed to receive our news and offers, and on which channels.
  • Technical data: your device, browser, IP address, approximate location, the pages you visit and how you use our website, collected through cookies and similar tools (see section 11).

Your name, contact details and delivery address are needed to process and deliver your order. Without them, we cannot complete your order. All other details, such as the full name details and marketing preferences, are optional, and not giving them will not affect your order.

We do not ask for sensitive data, such as health, religious or biometric data. Please do not share it with us in your messages.

3. How we collect your data

  • From you: when you create an account, place an order, send a gift, sign up for our news, or write to us.
  • Automatically: through cookies and similar tools when you visit our website, according to your cookie choices.
  • From others: from a client who sends you a gift and gives us your delivery details; from our payment and delivery partners (for example, payment and delivery status); and from social media platforms when you contact us through them.

If you give us the details of another person, such as a gift recipient, please make sure they are happy for you to share them with us. We use them only to deliver the gift and to contact the recipient about that delivery.

4. Why we use your data

We use your data only for the purposes below, and we always rely on a legal basis allowed by Saudi law:

Purpose Legal basis
To process, deliver and support your orders, gifts, returns, exchanges and refunds Our agreement with you (your order)
To create and manage your client account and send you sign-in codes Our agreement with you
To send you order, delivery and service updates by email, SMS or WhatsApp Our agreement with you
To answer your questions and requests Our agreement with you, or your request
To prevent fraud and keep our website and our clients secure Our legitimate interests
To understand how our website is used and to improve our website, pieces and service Your consent (analytics cookies), or our legitimate interests for anonymous statistics
To show you relevant content and measure our campaigns on platforms such as Instagram, Facebook and TikTok Your consent (marketing cookies)
To keep your full name details in your account Your consent
To send you news, offers and invitations Your consent
To meet our legal, tax and accounting duties and to answer lawful requests from authorities Legal obligation

When we rely on our legitimate interests, we make sure they do not override your rights and interests, and we never use sensitive data on this basis. We do not make decisions about you based only on automated processing.

5. Messages from us

Order and service messages. We will send you messages that are needed for your order, such as order confirmation, shipping, delivery, return and refund updates, by email, SMS or WhatsApp. These are part of our service and are not marketing.

News, offers and invitations. We will only send you marketing messages if you have actively agreed, for example by ticking the box at checkout or signing up on our website. The box is never ticked for you. Every marketing message will clearly show that it is from (™ غَيْرُ مُقَرَّرً | YNDECIDED) and will include a free and easy way to stop receiving them, such as an unsubscribe link or a reply on WhatsApp. You can also withdraw your agreement at any time by writing to cx@yndecided.com. Once you do, we will stop without delay.

6. Who we share your data with

We do not sell your personal data. We share only what is needed with trusted service providers who help us run (™ غَيْرُ مُقَرَّرً | YNDECIDED), and only for the purposes in this policy. These include:

  • Our online store platform (Shopify), which hosts our website, checkout, client accounts and order records.
  • Payment providers (such as HyperPay, Tamara and Tabby), which process your payment. If you choose to pay in instalments with Tamara or Tabby, that provider handles your application, including any checks it carries out, under its own privacy policy.
  • Delivery partners, including our shipping gateway (OTO) and national and international carriers, which receive the name, phone number and address needed for delivery. See our Shipping Policy.
  • Messaging services, such as email services and WhatsApp (Meta), which deliver our messages to you.
  • Analytics and advertising platforms, such as Meta (Instagram and Facebook), Snapchat, X, and TikTok, only according to your cookie choices.
  • Website and automation tools that help us run our cart, invoices, shipping updates and order workflows, including secure cloud hosting for our own order tools.
  • Online marketplaces, such as Amazon, Trendyol, Shein, and Noon, when you buy our pieces there. In that case, the marketplace also handles your data under its own privacy policy.
  • Professional advisers, such as our accountants and lawyers, when needed.
  • Government and judicial authorities, when the law requires it.

Our store platform, Shopify, may also use some store data, together with data from other Shopify stores, to improve its products, advertising and personalization, as described in Shopify's own terms and privacy policy. No other store can see your data.

We choose providers that protect personal data, and we require them to use it only to provide their service to us.

7. Transfers outside Saudi Arabia

Some of our service providers store or process data outside the Kingdom. For example, our store data is hosted in the United States. When your data is transferred outside the Kingdom, we transfer only what is needed, and we make sure the transfer follows the Saudi Personal Data Protection Law and its Regulation on Personal Data Transfer outside the Kingdom, including the safeguards it requires, such as standard contractual clauses.

8. How long we keep your data

We keep personal data only for as long as we need it for the purposes in this policy, or for as long as the law requires:

  • Orders, invoices and accounting records: for the period required by Saudi commercial and tax laws, which is currently up to 10 years.
  • Client account details, including optional full name details: while your account is active. You can delete the optional details yourself at any time. When your account is closed, they are deleted or made anonymous, unless the law requires us to keep them.
  • Gift recipient details: as part of the order record, for the period above.
  • Messages with us: for as long as needed to complete your request and any follow-up, then deleted, unless they form part of an order record.
  • Marketing preferences: until you unsubscribe or withdraw your consent. We keep a record of your consent and its withdrawal as the law requires.
  • Website and cookie data: for the time set for each cookie, and only as long as needed for analytics and security, then deleted or made anonymous.

When we no longer need your data, we delete it securely or make it anonymous so that it can no longer identify you.

9. How we protect your data

We use secure systems, encrypted connections, access controls and trusted providers to protect your data, and only the people who need your data to serve you can access it. No online system is completely secure, but we take great care of your data.

If a breach could harm you, we will tell you without undue delay and explain what happened and what you can do. We will also notify the Saudi Data & AI Authority (SDAIA) within 72 hours, and any other authority the law requires.

10. Your rights

Under the Saudi Personal Data Protection Law, you have the right to:

  • be informed of how and why we use your data, which is the purpose of this policy;
  • access the personal data we hold about you and ask for a copy in a clear and readable format;
  • ask us to correct, complete or update data that is wrong, incomplete or out of date;
  • ask us to delete your data when we no longer need it, where the law allows;
  • withdraw your consent at any time, including for marketing messages and cookies, which does not affect what we did before you withdrew it;
  • ask us to close your client account at any time.

To use your rights, please email cx@yndecided.com. To protect you, we may ask you to confirm your identity first. Using your rights is free. We will reply within 30 days. If your request needs more time, we will let you know, and we may extend this by up to 30 more days. If we cannot meet your request, for example because the law requires us to keep certain records, we will explain why.

11. Cookies

Cookies are small text files saved on your device when you visit a website. We use cookies and similar tools, such as pixels, to keep your cart working, to remember your choices, to understand how our website is used, and to show you relevant content. They fall into these groups:

  • Essential cookies: needed for the website, cart, sign-in and checkout to work and to keep them secure. These cannot be switched off.
  • Preference cookies: remember your choices, such as your language, and help our cart tools work as you expect.
  • Analytics cookies: help us understand how the website is used, so we can improve it.
  • Marketing cookies: used by us and by platforms such as Meta and TikTok to show you relevant content and to measure our campaigns. These platforms may also receive this information directly from our store, only when you have accepted marketing cookies.

When you first visit our website, our cookie banner lets you accept, reject or choose which non-essential cookies we use. We only use non-essential cookies with your agreement. You can change your choice at any time through the cookie preferences link at the bottom of our website. You can also control or delete cookies in your browser settings. Blocking some cookies may affect how the website works.

12. Social media and other websites

Our website links to our pages on Instagram, TikTok, X, Pinterest and Snapchat, and to payment and delivery pages. When you visit or contact us through these platforms, they handle your data under their own privacy policies, which we encourage you to read.

13. Children

Our website is intended for adults. If you are under 18, you may only use our website and place an order with the permission and supervision of your parent or legal guardian, who gives consent on your behalf. We do not knowingly collect children's data without this consent. If we learn that we have, we will delete it.

14. Changes to this policy

We may update this policy from time to time. The latest version is always on this website with its date. If we make an important change, we will tell you on our website or by email before it applies.

15. Contact

For any question about your privacy, please write to our Customer Excellence team at cx@yndecided.com, or contact us by phone or WhatsApp on +966 58 354 3046. We will reply as soon as possible.

Last updated: 6 October 2026