EN
AR

Privacy Policy

ZAP Burgers
Effective Date: 1st March, 2026
Jurisdiction: Kingdom of Saudi Arabia

1. Introduction

1.1 This Privacy Policy (“Policy”) governs the collection, processing, storage, disclosure, and protection of personal data by ZAP Burgers (“Company,” “we,” “our,” or “us”) in connection with our website, digital platforms, restaurant services, ordering channels, and customer interactions.

1.2 We are committed to safeguarding personal data in accordance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia and its implementing regulations.

1.3 By accessing our website, placing orders, or interacting with our services, you acknowledge that you have read, understood, and accepted the practices described in this Policy.

2. Scope of Application

2.1 This Policy applies to all visitors, customers, suppliers, and users who:

  • Access our website or digital platforms
  • Place orders online or offline
  • Communicate with us electronically or physically
  • Participate in promotions, surveys, or marketing activities

2.2 This Policy applies regardless of whether personal data is collected online, in-store, through delivery partners, or via third-party platforms.

3. Categories of Personal Data Collected

3.1 Identification Data

  • Name
  • Contact number
  • Email address
  • Delivery or billing address

3.2 Transaction Data

  • Order history and preferences
  • Payment confirmations (processed securely via third-party providers)
  • Loyalty program or promotional participation data

3.3 Technical and Usage Data

  • IP address and device identifiers
  • Browser type and operating system
  • Website usage analytics
  • Location data where enabled

3.4 Communications Data

  • Customer service correspondence
  • Feedback, reviews, complaints, or survey responses

4. Methods of Data Collection

4.1 Personal data may be collected directly when you:

  • Place an order
  • Register on our website
  • Subscribe to marketing communications
  • Contact customer support

4.2 Data may also be collected automatically through cookies, analytics tools, or authorized third-party service providers, in accordance with applicable laws.

5. Purpose of Processing Personal Data

Personal data may be processed for the following purposes:

  • Processing orders, deliveries, and customer service requests.
  • Operating, maintaining, and improving our website and services.
  • Marketing communications where lawful consent has been obtained.
  • Fraud prevention, security monitoring, and legal compliance.
  • Internal administration, operational management, and service improvement.

Personal data will not be processed beyond these purposes without an appropriate legal basis.

6. Legal Basis for Processing

Personal data processing may be based on:

  • Consent provided by the data subject
  • Performance of contractual obligations
  • Compliance with legal or regulatory requirements in Saudi Arabia
  • Legitimate business interests consistent with PDPL provisions

7. Disclosure and Data Sharing

7.1 Personal data may be shared with:

  • Delivery and logistics partners
  • Payment processing providers
  • IT hosting, analytics, and technical service providers
  • Government authorities where legally required

7.2 We do not sell personal data to third parties.

7.3 All third-party providers are required to maintain confidentiality and appropriate data security measures.

8. International Data Transfers

Where personal data is transferred outside the Kingdom of Saudi Arabia, such transfers will comply with PDPL requirements and applicable regulatory safeguards.

9. Data Retention

9.1 Personal data will be retained only as long as necessary for:

  • Operational and business purposes
  • Legal and regulatory compliance
  • Dispute resolution
  • Contract enforcement

9.2 Data no longer required will be securely deleted, anonymized, or archived in accordance with applicable regulations.

10. Cookies and Tracking Technologies

10.1 Our website may use cookies and similar technologies to:

  • Enhance user experience
  • Analyze website performance
  • Support marketing and advertising activities

10.2 Users may control cookies through browser settings where applicable.

11. Data Security Measures

11.1 We implement reasonable technical and organizational measures, including:

  • Secure hosting infrastructure
  • Access control restrictions
  • Encryption where appropriate
  • Continuous monitoring and security updates

11.2 While reasonable safeguards are implemented, absolute data security cannot be guaranteed.

12. Data Subject Rights (Under Saudi PDPL)

Subject to applicable law, you may have the right to:

  • Access personal data held about you
  • Request correction or updating
  • Request deletion where legally permissible
  • Withdraw consent where applicable
  • Lodge complaints with relevant Saudi authorities

Requests may be submitted using the contact details below.

13. Marketing Communications

13.1 Promotional communications will only be sent where legally permitted.

13.2 You may opt out at any time through unsubscribe options or by contacting us directly.

14. Third-Party Platforms

14.1 Our website may include links to external platforms such as delivery apps, maps, or social media services.

14.2 We are not responsible for the privacy practices or policies of third-party platforms.

15. Children’s Privacy

Our services are not intended to knowingly collect personal data from minors without parental or guardian consent.

16. Policy Amendments

16.1 We reserve the right to amend this Policy at any time.

16.2 Updated versions will be published on our website with the revised effective date.

17. Contact Information

ZAP Burgers
3261 Prince Majid Bin Abdulaziz St, Al Rayan Dist., Riyadh, Saudi Arabia
Email: hello@zap-sa.com
Phone: +966-53-533-2599