Table of Contents
- 1. Introduction
- 2. Legal Entity
- 3. Personal Data We Collect
- 4. How We Use Your Data
- 5. Sharing Data With Third Parties
- 6. Legal Basis for Processing
- 7. Cookies & Tracking Technologies
- 8. Customer Rights Under Saudi PDPL
- 9. Data Retention
- 10. Data Security Measures
- 11. International Transfers
- 12. Children's Privacy
- 13. Marketing Communications
- 14. Policy Updates
- 15. Contact Us
Privacy Policy
December 2025
1. Introduction
Hyogena respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains:
- What data we collect
- Why we collect it
- How we use it
- With whom it is shared
- Your rights under Saudi PDPL
- How you can contact us
This policy applies to all users of sa.hyogena.com and all related services.
2. Legal Entity
Company Name: HEALTHY AND COSMETIC UNION COMPANY
Hyogena is the Data Controller for all customer data processed through the Platform.
3. Personal Data We Collect
We collect the following categories:
3.1 Information You Provide
- Name
- Email address
- Phone number
- Delivery address
- Payment details (tokenized, not stored by us)
- Account information
- Communication history
- Return/refund requests
3.2 Automatically Collected Data
- Device information
- Browser type
- IP address
- Cookies
- Login timestamps
- Traffic analytics
- Heatmaps and interaction logs
3.3 Data from Analytics Tools
Hyogena uses:
- Google Analytics
- Meta Pixel
- TikTok Pixel
- Microsoft tracking scripts
These tools collect behavioral data, including:
- Page views
- Click behavior
- Session duration
- Ad performance
3.4 Marketplace Data
For marketplace items, we collect:
- Seller identification data
- Fulfillment status
- Transaction metadata
4. How We Use Your Data
We use data for:
- Fulfilling orders
- Delivering shipments
- Processing payments
- Managing returns
- Customer support
- Fraud detection
- Performance analytics
- Marketing communications (email, SMS, WhatsApp)
- Improving the Platform
We never sell customer data.
6. Legal Basis for Processing
We process data under PDPL approved bases:
- Contract fulfillment
- Customer consent
- Legitimate interest
- Compliance with Saudi regulatory requirements
8. Customer Rights Under Saudi PDPL
Customers have the right to:
- Access their personal data
- Request correction
- Request deletion (where applicable)
- Object to processing
- Withdraw consent for marketing
- Request clarification of data handling
Requests can be made via: info@hyogena.com
9. Data Retention
We retain:
- Order & transaction data: as required by Saudi law
- Behavior analytics: typically 12 - 36 months
- Account information: until the customer requests deletion
10. Data Security Measures
Hyogena uses:
- HTTPS encryption site-wide
- Secure payment proxies
- Firewall protection
- Access-controlled systems
- Regular compliance audits
No online platform can guarantee absolute security, but Hyogena follows global best practices.
11. International Transfers
Hyogena systems may use international processors (e.g., analytics providers). All transfers adhere to PDPL requirements for cross-border data movement.
12. Children's Privacy
The Platform is not intended for users under 18 years old without parental consent.
13. Marketing Communications
With consent, Hyogena may send:
- Email offers
- SMS notifications
- WhatsApp updates
Customers can opt-out at any time.
14. Updates to This Policy
This Privacy Policy may be updated to reflect:
- PDPL updates
- Internal process changes
- Security improvements
The latest version will be posted here.
15. Contact Us
For privacy inquiries or PDPL requests:
info@hyogena.com
+966 55 440 0144