Version: 2.0
1. Controller
The controller is Asmaa Al-Aqeelah Establishment, Unified National Number 7018039961, operating digitally as ASMAA PACK.
Privacy email: s@he.sa
Business WhatsApp: +966 55 670 9655
2. Scope
This notice explains how personal data is collected, used, stored and shared when a person visits the site, starts a quotation enquiry through WhatsApp, sends files through an agreed communication channel, accepts a quotation or approves artwork.
3. Data we may collect
We may collect contact and business details, project specifications, artwork and reference files, quote and transaction records, approval history, delivery information, communications, limited device and security data, essential cookies, and optional analytics data after any required choice.
Do not include unnecessary sensitive data, full card details or identity documents in an enquiry message.
4. Sources
Data may be received directly from you, your organization, your communications with us, payment or delivery providers as needed for the transaction, or public business records where commercial verification is reasonably required.
5. Purposes and legal grounds
We process data to respond, prepare and manage quotations, recommend packaging, review artwork, document approval, perform orders, arrange delivery and invoicing, address complaints, protect the site, prevent fraud, comply with law, defend rights, improve the service using aggregated or de-identified information, and send direct marketing only where a valid legal basis exists.
The applicable ground may include your request for pre-contract steps, contract performance, legal obligation, permitted legitimate interests, or consent.
6. Required information
Name, mobile number, business name or context, core products and city are normally needed to review a quotation. Other fields may be optional at first but become necessary before quotation or production. Without required information, we may be unable to proceed.
7. Sharing
We may share the minimum necessary data with authorized staff and contractors, approved hosting, storage, email, analytics, payment, invoicing and delivery providers, professional advisers, authorities where legally required, and a production supplier only when needed for the project and subject to suitable controls.
We do not sell personal data.
9. Retention
Data is kept only as long as necessary, then securely deleted or de-identified unless retention is legally required or reasonably needed to protect a right.
10. Security
Controls should include restricted access, private file storage where used, temporary signed links, encrypted transport, access logs, backups, security updates and provider review. Private storage URLs are not placed in generated WhatsApp messages, analytics or public pages. A customer may separately choose to send artwork or a reference image directly through WhatsApp or another agreed channel.
11. Cookies and analytics
Essential storage may be used for security, interface operation and privacy choices. Non-essential analytics or marketing tools must not run before any required choice. See the Cookie Notice.
12. Direct marketing
Quote data is not automatically enrolled in unrelated marketing. Optional marketing consent may be withdrawn at any time without affecting communications needed for an active request or order.
13. Rights
Subject to Saudi law and the circumstances, a person may request information about processing, access, a copy, correction, completion, deletion where retention is no longer justified, withdrawal of consent, and submission of a complaint. Identity and authority may be verified before acting.
14. Minors
The service is intended for business owners and representatives. We do not intend to collect child data and will take appropriate steps if such data is identified without a proper basis.
15. Updates
This notice may be updated when law, providers or practices change. The current effective date will be published and material changes will be communicated appropriately.
16. Contact and complaints
Privacy requests: s@he.sa
A complaint may also be submitted through the official channels of the Saudi Data and Artificial Intelligence Authority where applicable.