Cookie Policy Template for Saudi PDPL

Cookie Policy

Last updated: [date of last update]

1. Who we are
This policy explains how [store name] ("we") uses cookies and similar technologies on [store URL]. The organisation responsible for processing your data is [registered legal name], commercial registration number [CR number], of [address]. To contact us about this policy or your personal data: [privacy email address].

2. What cookies are
Cookies are small text files your browser saves on your device when you visit a website. We also use similar technologies, such as pixels, tracking tags and browser local storage, and in this policy we call all of them "cookies". Some of these can identify you directly or indirectly, so we treat them as personal data under Saudi Arabia's Personal Data Protection Law (PDPL).

3. The categories we use
We group the cookies on our store into four categories:
- Necessary: the store cannot work without them — keeping your cart, signing you in, protecting the site, and remembering your cookie choice. They are always on and cannot be switched off in the cookie settings.
- Analytics: help us understand how visitors use the store, such as which pages are visited most and where visits come from. They only run after you consent.
- Marketing: used to show you ads closer to your interests and to measure our ad campaigns, and may be set by advertising platforms we work with. They only run after you consent.
- Preferences: remember your choices, such as language and display settings. They only run after you consent.

4. Cookies used on our store
[Insert a table of every cookie your store sets, with five columns: cookie name, who sets it, category, purpose, and how long it lasts.]
[Example row: cookie name | provider | Analytics | purpose | duration]

5. Legal basis
We rely on your consent to run analytics, marketing and preference cookies, and we do not run them before you consent. For necessary cookies we rely on [the legal basis you rely on, confirmed with your legal adviser].

6. Who receives the data
Some cookies collect data on behalf of organisations we work with: [names of providers, such as analytics and advertising providers and the store platform]. This data may be processed outside Saudi Arabia, in [countries or regions], with the following safeguards: [safeguards applied to transfers outside the Kingdom].

7. How long we keep it
Each cookie lasts for the period shown in the table in section 4. We keep your cookie choice for [consent period, such as 365 days], then ask you again.

8. How to control cookies
On your first visit, a banner lets you accept, refuse, or choose the categories you allow one by one. You can change your choice or withdraw your consent at any time from [where your store's cookie settings are, such as the icon at the bottom of the page]. You can also delete or block cookies in your browser settings; blocking necessary cookies may stop parts of the store from working.

9. Your rights
Under the PDPL you have the right to know the purpose and legal basis of the processing of your data, to access your data, to ask for it to be corrected or deleted, and to withdraw your consent at any time. To exercise any of these rights, email [privacy email address] or use [link to your data request form], and we will reply within [response time]. You may also file a complaint with the Saudi Data and AI Authority (SDAIA).

10. Changes to this policy
We may update this policy when the cookies we use change, and we publish the date of the last update at the top. [If we add a new category or change the purpose of an existing one, we will ask for your consent again.]

Contact: [privacy email address] · [phone number]