Last modified:
June 14, 2026
1. Acknowledgment and Acceptance
By accessing, using or registering on the Yiswa Connect Platform (the “Platform”) owned by Yiswa Information Technology Company Commercial Registration No.: 7032885225 (Hereinafter referred to as “the Company”, “we”, “us”, or “our”), you acknowledge that you have read, understood and agreed to be bound by this Privacy Policy. You further consent to the collection, processing, use and disclosure of your personal data in accordance with this Policy.
2. Scope
This Policy applies to all users of the Platform, including without limitation:
Restaurant and business owners
Authorized users and employees
End customers
Visitors to the Platform
Partners and third-party service providers
3. Definitions
For the purposes of this Policy, the following terms shall have the meanings set out below:
Personal Data: Any information that directly or indirectly identifies an individual.
Processing: Any operation performed on personal data, whether automated or manual.
Data Subject: The individual to whom the personal data relates.
Platform: The Yiswa Connect platform operated by the Company.
Controller: The entity that determines the purposes and means of processing personal data.
Processor: The entity that processes personal data on behalf of a Controller.
4. Data Processing Roles
4.1 The Company acts as a Data Processor with respect to personal data submitted by users through the Platform.
4.2 In certain operational or technical use cases, the Company may act as an Independent Data Controller, depending on the nature of the service provided.
4.3 Users remain responsible for determining the legal basis for collecting and processing their end customers’ personal data.
5. Personal Data We Collect
We may collect and process the following categories of personal data, depending on the use of the Platform:
5.1 Identity and Account Data
Full name
Email address
Phone number
Login credentials
Business/user information
5.2 Usage and Operational Data
IP address
Device and browser information
System logs
Platform interaction data
5.3 Business Transaction Data
Orders and transactions
Branch information
Menu data
Billing and payment information
5.4 End-Customer Data
Order details
Contact information
Delivery addresses (where applicable)
Transaction history
5.5 Technical Data
Cookies
Digital identifiers
Analytics and performance data
6. Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:
Performance of a contractual obligation
Compliance with legal and regulatory obligations
Legitimate interests of the Company
Explicit consent of the Data Subject, where required
7. Purposes of Processing
Personal data is processed for the following purposes:
Operating and maintaining the Platform
Providing and managing services
Processing transactions and orders
Supporting operational activities
Improving and developing services
Analytics and performance measurement
Fraud prevention and misuse detection
Regulatory and legal compliance
8. Data Sharing and Disclosure
We may share personal data in the following circumstances:
8.1 With third-party service providers engaged in hosting, infrastructure and technical support services.
8.2 With payment service providers and financial processors.
8.3 With technical partners providing integrations with the Platform.
8.4 With governmental, regulatory, or judicial authorities where legally required.
8.5 In connection with a merger, acquisition, restructuring, or sale of assets.
The Company does not sell, rent, or trade personal data.
9. Mandatory Disclosure
We may disclose personal data where such disclosure is necessary to:
Comply with applicable laws and regulations
Respond to legally binding requests from competent authorities or courts
Protect the legal rights and interests of the Company or users
Investigate or prevent fraud, abuse, or unlawful activity
10. Data Retention
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations.
Retention periods may include:
Account Data: For the duration of the contractual relationship plus a reasonable retention period thereafter
Transaction Data: As required for legal, accounting, and operational purposes
System Logs: Up to 12 months
Support Records: Up to 24 months
Analytics Data: Aggregated or anonymized where reasonably possible
Upon expiry of the retention period, data shall be securely deleted or anonymized.
11. Data Subject Rights
In accordance with the PDPL, Data Subjects are entitled to the following rights:
The right to be informed
The right of access
The right to obtain a copy of personal data
The right to rectification
The right to erasure
The right to restrict processing
The right to object to processing
The right to withdraw consent
The right to data portability, where applicable
Requests to exercise these rights may be submitted through the Company’s designated channels.
12. International Data Transfers
Personal data may be transferred outside the Kingdom of Saudi Arabia where necessary for service delivery, subject to:
Operational or technical necessity
Adequate safeguards ensuring protection of personal data
Compliance with applicable Saudi regulatory requirements
13. Data Security
The Company implements appropriate technical and organizational security measures, including but not limited to:
Encryption of data in transit and at rest
Access control and authorization mechanisms
Security monitoring and intrusion detection systems
Incident response procedures
Regular security audits and assessments
However, no system can guarantee absolute security.
14. Third-Party Integrations
The Platform may integrate with third-party services.
The Company shall not be liable for:
The privacy practices of such third parties
Their handling of personal data
Any security breach occurring within their systems
Users are advised to review the privacy policies of such third parties independently.
15. Artificial Intelligence and Data Processing
The Platform may use artificial intelligence technologies for service enhancement, including analytics and recommendations.
Accordingly:
Data is processed solely for service delivery and improvement purposes
Personal data is not used to train external models without explicit authorization
Certain AI functionalities may be restricted in accordance with regulatory requirements
16. Data Breach Notification
In the event of a personal data breach that may affect confidentiality or security, the Company shall:
Take immediate measures to contain and mitigate the incident
Assess the nature and impact of the breach
Notify relevant regulatory authorities as required by law
Notify affected Data Subjects where legally required
17. Cookies
The Platform uses cookies for purposes including:
Enhancing user experience
Storing preferences
Performance and analytics
Users may manage or disable cookies via their browser settings.
18. Amendments to this Policy
The Company reserves the right to amend or update this Privacy Policy from time to time.
Any material changes shall be communicated through the Platform or other appropriate channels. Continued use of the Platform constitutes acceptance of such changes.
19. Contact Information
Yiswa Information Technology Company
Yiswa Connect Platform
Commercial Registration No.: 7032885225
Email: info@yiswa.app