Privacy Policy

This policy explains what personal data we collect about you when you deal with us in our branches, in our online shop at suwaab2b.com, in the Suwaa app or over WhatsApp; why we collect it; who we share it with; how long we keep it; and your rights over it. We process your data under the Personal Data Protection Law, issued by Royal Decree No. M/19 of 9/2/1443H and amended by Royal Decree No. M/148 of 5/9/1444H, and its Implementing Regulation.

1. Who we are

HASSAID FOR COFFEE ESTABLISHMENT (مؤسسة حصائد للقهوة), owner of the Suwaa brand, commercial registration 4030595911, address 7027 Amna Bint Wahb St, Al Naeem, Jeddah 23622.

For anything to do with your personal data: email info@suwaaroastery.com, or WhatsApp 0558996675.

2. What we collect

• Contact details: name, mobile number, email and delivery address.
• Business details for business customers: trade name, VAT number and commercial registration.
• Purchases: orders, invoices and loyalty points.
• Account details: what you add to your account in the shop or the app.
• Correspondence: the WhatsApp messages and emails we exchange.
• Usage data: IP address, device and browser type, and the pages you visit on the site.
• Job applications and surveys: what you submit when you apply for a job or take part in a survey.

We collect this data from you directly, and usage data automatically while you browse the site and use the app; we also record notes our staff make while serving you. We do not keep payment card details: they are entered directly with the payment provider.

A mobile number is needed to create an app account, and contact details and an address to place an order in the online shop; you may leave out anything marked optional. If you do not give the data we need, we cannot create the account or complete the order; buying in a branch remains open to you.

3. Why we use it

• To fulfil and deliver your orders and invoice them.
• To send receipts, invoices and order and shipping updates by WhatsApp or email.
• To run your account and the loyalty programme.
• To understand how our customers buy and ask for their feedback, so we can improve our products, offers and services.
• To answer your questions and requests.
• To protect the site and the app from fraud and abuse.
• To meet our legal obligations, including e-invoicing and keeping tax records.
• To consider job applications.

We do not send you marketing messages without your consent.

4. Lawful basis

We process your data to do what you ask of us, to meet a legal obligation, for a legitimate interest that does not prejudice your rights, or with your consent. You may withdraw consent at any time by writing to us, turning notifications off in your device settings, or deleting your account; withdrawal does not affect processing done before it.

5. Sharing your data

We do not sell or rent your personal data. We share it only as far as needed with:

• The technical service providers we rely on: cloud hosting, system operation and maintenance, WhatsApp Business, email and app notifications.
• Shipping companies, to deliver your orders.
• The payment provider, when you pay by card.
• The Zakat, Tax and Customs Authority, for e-invoicing.
• Competent judicial and official authorities, where the law requires it.

6. Where it is kept, and transfer outside the Kingdom

Your data is kept with a cloud computing provider outside the Kingdom of Saudi Arabia, and some of the service providers above also process data outside the Kingdom.

7. How long we keep it

We keep data as long as it is needed for the purpose it was collected for, and invoices and tax records for at least 6 years, as the VAT Implementing Regulation requires. We then destroy the data or remove what identifies you.

8. Your rights

You have the right to know what we collect and why; to access your data and obtain a copy; to have it corrected, completed or updated; to have it destroyed once its purpose has ended, except what the law requires us to keep; and to withdraw your consent.

To use any of these, write to info@suwaaroastery.com or WhatsApp 0558996675. We first verify your identity and reply within 30 days of receiving the request, which may be extended by a further 30 days with notice and reasons. If our answer does not satisfy you, you may complain to the Saudi Data and Artificial Intelligence Authority (SDAIA) at sdaia.gov.sa.

9. Deleting your account

You can delete your account in the app (My account, then Delete my account) or by writing to us. On deletion, loyalty points and any gift-card balance are forfeited and cannot be restored, and invoices are kept for the statutory period.

10. Data security

We take reasonable technical and organisational measures to protect your data, including encrypted connections. No method of transmission or storage is completely secure; if a breach affects your data, we notify the competent authorities and you as the law requires.

11. Changes and governing language

We may update this policy when our services or the legal requirements change; we publish any change on this page, and we tell you before we use your data for a new purpose. The policy is in Arabic and English; the Arabic text prevails in case of any difference.