Privacy Policy

This policy explains how ReemanAI Co. (Commercial Registration 7053996133, VAT 314717021200003), which operates the MIAPURA store at miapura.com, collects, uses, retains and protects your personal data. It is written to meet the Saudi Personal Data Protection Law (Royal Decree M/19) and its Implementing Regulations.

By using the store or placing an order you confirm that you have read this policy. If you do not agree with it, please do not use the store.

1. Who we are and who is responsible

ReemanAI Co. is the controller of your personal data and is responsible for deciding why and how it is processed. You can reach us at any time at support@miapura.com, or at the national address shown on our Contact page.

Our national address: Building 3352, Jabal Radhwi Street, Al Nakheel District, Secondary No. 6330, Postal Code 12395, Riyadh, Kingdom of Saudi Arabia. Short address: RGNA3352.

2. What we collect

We collect only what is needed to run the store and fulfil your order, and we do not ask for data we have no use for:

• Identity and contact: name, email address, mobile number.
• Delivery: national or shipping address, city, postal code.
• Order: the products purchased, amounts, order date, shipment status.
• Payment: handled entirely by a licensed payment service provider. We never see or store your card number or security code.
• Account: your password is held only in irreversible hashed form.
• Technical: IP address, browser and device type, pages visited.
• Correspondence: customer-service messages, return requests, and anything you attach to them.

3. Lawful basis

We process your data only on a clear lawful basis:

• Performance of a contract — processing, shipping and supporting your order.
• Legal obligation — keeping invoices and accounting records as ZATCA rules require.
• Explicit consent — marketing messages and the Maison List, withdrawable at any time.
• Legitimate interest — protecting the store against fraud and improving the experience, without prejudicing your rights.

4. How we use it

To fulfil and deliver your order, keep you informed of its status, issue your tax invoice, handle returns and exchanges, answer your enquiries, protect the store and its customers from fraudulent activity, and improve our products and service. We do not make solely automated decisions that produce legal effects for you.

5. Who we share it with

We do not sell, rent or trade your personal data under any circumstances. We share it only as far as necessary, with:

• Shipping and delivery companies, to bring you your order — name, address and mobile number only.
• Our payment service provider, licensed by the Saudi Central Bank, to take payment.
• Hosting and infrastructure providers that operate the store on our behalf.
• Google, as our analytics provider, as described in the cookies section below.
• Competent government authorities, where required by law or judicial order.

Every party we work with is bound to protect your data and to use it for nothing beyond the task we gave them.

6. Transfers outside the Kingdom

Some technical services may be hosted outside Saudi Arabia. Where that happens, the transfer is made only as permitted by the SDAIA regulations on transferring personal data outside the Kingdom, and on terms that secure protection no lower than the Law requires.

7. How long we keep it

Order and invoice records are kept for the period Saudi accounting and tax rules require — at least six years from the end of the tax period. Account data is kept while your account remains open, and mailing-list data until you withdraw consent. Once the purpose and the statutory period have passed, data is destroyed or made non-identifying.

8. Your rights

The Personal Data Protection Law gives you rights that we honour in full:

• To be informed — of the lawful basis for collecting your data and the purpose of it.
• To access — the data we hold about you.
• To obtain a copy — in a clear, readable format.
• To rectification — of data that is inaccurate or incomplete.
• To destruction — where the data is no longer needed, unless a law requires us to keep it.
• To withdraw consent — at any time, without affecting processing carried out before the withdrawal.

To exercise any of these, write to support@miapura.com. We will respond within thirty days, extendable by a further thirty where the request requires exceptional effort — in which case we will tell you. Exercising your rights is free of charge.

9. Security and breach notification

We apply technical and organisational measures to protect your data, including HTTPS encryption in transit, access restricted on a need-to-know basis, and irreversibly hashed passwords. If a breach occurs that is likely to harm you or your data, we notify the competent authority within seventy-two hours of becoming aware of it, and notify you without undue delay.

10. Cookies

The store uses essential cookies it cannot work without — keeping your bag, your signed-in state and your display language. We may also use analytics cookies to understand how the store is used and improve it. You can control or delete cookies in your browser settings, though disabling the essential ones will prevent checkout from completing.

We also use Google Analytics, an analytics service provided by Google, to understand how the store is used and improve it. It collects: which pages you visited and how long you stayed, your device, browser and operating system, your approximate location at city level, your IP address, and how you arrived at the store. This data is not used to identify you, and we do not link it to your order or account data.

The Google Analytics tag is present on every page of the store and measurement begins when you arrive, so that we can understand and improve the store. The lawful basis for this processing is our legitimate interest in measuring and improving our own store, weighed against your privacy: the analytics data is pseudonymous and we do not link it to your account. We also use advertising measurement tools from the social platforms we advertise on — Meta (Facebook and Instagram), TikTok, Snapchat, X and Pinterest — together with Google Ads. These record the pages you view, the products you add to your bag, and completed orders including the order value, so that we can measure which campaigns lead to sales and show our advertising to people with similar interests. They may set their own cookies and may combine what they receive with the account you hold with that platform. We never send them your name, address or payment details. You have the right to object at any time and stop it: choose "Decline" in the cookie notice and we immediately stop collection and delete the analytics cookies from your device. Your choice is remembered on that device. You can also refuse Google Analytics entirely by installing Google's official opt-out add-on at tools.google.com/dlpage/gaoptout. None of these choices affects your ability to shop or complete an order.

This data is processed on Google servers outside the Kingdom. That transfer is made under the SDAIA regulations on transferring personal data outside the Kingdom, relying on the standard contractual terms Google is bound by as a processor acting on our behalf. Google retains analytics data for a maximum of fourteen months, after which it is deleted automatically.

11. Children

The store is intended for those aged eighteen and over. We do not knowingly collect data from anyone younger, and will destroy it if we discover otherwise.

12. Complaints

If you believe our handling of your data breaches the Law, write to us first at support@miapura.com. You also have the right to escalate to the Saudi Data and AI Authority (SDAIA) as the supervisory authority.

13. Changes to this policy

We may update this policy as our services or the applicable regulations change; the version published on this page is the one that applies. Where a change is material and affects your rights, we will tell you by email or by a prominent notice in the store.

Last updated: 6 April 2026