privacy policy

privacy policy

Effective Date: 02/11/2025

Welcome to oneshot Food Supplement Trading LLC operating under the domains www.oneshot.sa (“we” or “our”). This Privacy Policy explains how we collect, use, disclose and protect your personal information when you visit our website.


This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our website or make a purchase. It also outlines your rights under the Personal Data Protection Law and other applicable laws in the Kingdom of Saudi Arabia.


1. Personal Data We Collect

We collect the data needed to provide our services and fulfil your orders. Depending on how you use our website, this may include:

  • Contact and delivery details: Your name, mobile number, email address, city, delivery address, and National Address Short Code.
  • Order and transaction details: Products ordered, purchase history, billing information, and payment status.
  • Communications with us: Information you provide when submitting an enquiry, support request, or complaint.
  • Technical data: Your Internet Protocol (IP) address, device and browser type, website usage data, and cookie data, depending on the technologies used.

Payment information is processed through the payment service providers used by our store. The payment data we receive depends on the payment method and service used.


2. How We Collect Personal Data

We collect data directly from you when you place an order, complete a form, or contact customer service. Some technical data may also be collected automatically through cookies and similar technologies when you browse our website.

We may also receive information relating to your order from payment and shipping providers, such as payment confirmation and delivery status.


3. How We Use Personal Data

We use your personal data to:

  • Prepare, fulfil, and deliver orders.
  • Process payments, issue invoices, and manage exchanges and returns.
  • Send order confirmations and related updates.
  • Provide customer service and respond to enquiries and complaints.
  • Improve website performance and the shopping experience.
  • Protect our website and transactions and help prevent fraud.
  • Meet our legal obligations.
  • Send offers and marketing communications with your consent, with the option to unsubscribe.

Depending on the purpose, we process personal data to perform our agreement with you, meet legal obligations, act on your consent, or rely on another lawful basis permitted under applicable laws.

If you do not provide the information required to process or deliver your order, we may be unable to provide the service.


4. Sharing Personal Data

We may share the necessary data with parties that help us provide our services, including:

  • E-commerce platform, technical service, and hosting providers.
  • Payment service providers, to complete transactions.
  • Shipping companies, to deliver and track orders.
  • Competent authorities, where disclosure is required or permitted by law.

We limit the data we share to what is necessary for the specified purpose and comply with applicable data protection requirements. Service providers may have their own privacy policies explaining how they process data. This does not affect our legal obligations.

If your data is transferred or made available to parties outside the Kingdom of Saudi Arabia, the requirements and safeguards set out in applicable laws and regulations will apply.


5. Cookies

Our website may use cookies and similar technologies to support its functions, remember your preferences, analyse usage, and improve your shopping experience. Your consent will be obtained where required.

You can manage cookies through your browser settings or the consent tools available on the website. Disabling certain essential cookies may affect some store functions.


6. Data Storage and Security

Personal data is stored electronically within the systems used to operate our store and provide our services. We take appropriate technical and organisational measures to protect it against unauthorised access, use, disclosure, or alteration. Access is restricted to authorised individuals who need it to perform their duties.

Despite these measures, no method of electronic transmission or storage can be guaranteed to be completely secure.


7. Data Retention and Disposal

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected. This includes fulfilling orders, providing customer service, meeting record and invoice retention requirements, and handling claims and disputes.

Retention periods are determined by the type of data, the purpose for which it is held, and applicable legal requirements. When data is no longer needed, it is securely destroyed or anonymised, unless there is a lawful basis for retaining it.


8. Your Personal Data Rights

Under applicable laws, and subject to the conditions and exceptions they provide, you have the right to:

  • Be informed about how your personal data is collected and used.
  • Request access to your personal data and obtain a copy in a clear, readable format.
  • Request that your personal data be corrected, completed, or updated.
  • Request the destruction of your personal data where the legal conditions are met.
  • Withdraw your consent to processing based on that consent, without affecting the lawfulness of processing carried out before withdrawal.
  • Unsubscribe from marketing communications.

To exercise these rights, please contact customer service through the contact channels listed on our website. To protect your privacy, we may request information necessary to verify your identity before acting on your request. We will handle your request within the time limits prescribed by law.


9. Contact and Complaints

If you have a question about this policy, or wish to submit a request or complaint regarding your personal data, please contact oneshot customer service through the contact channels listed on our website and explain the nature of your request.

You also have the right to submit a complaint to the competent personal data protection authority in the Kingdom of Saudi Arabia, in accordance with the applicable procedures.


10. Changes to This Privacy Policy

We may update this policy to reflect changes to our services, data processing practices, or legal requirements. The updated version will be published on this page with the date of the latest revision. We will notify you of changes where required by law.