Last Updated: July 28, 2026
Data Controller: Anoosh Food & Sweets Company ("Anoosh" / "We" / "Us")
Scope: Applies to Anoosh app, website (order.anoosh.sa), and all online ordering, gifting, and delivery services operated by Anoosh in the Kingdom of Saudi Arabia.
2.1 Overview & Introduction
Anoosh Food & Sweets Company respects your privacy and is committed to protecting your personal data in compliance with the Kingdom of Saudi Arabia Personal Data Protection Law (PDPL) issued under Royal Decree No. (M/19) and its implementing regulations.
This Privacy Policy explains how we collect, use, share, and protect your personal data when using our website or mobile application, along with your statutory rights as a data subject.
Legal Clarification (Data Controller vs. Data Processor): Anoosh acts as the Data Controller, responsible for determining the purposes and means of processing your personal data. The e-commerce software vendor Taker / Dook Infotech acts as the Data Processor, providing technology infrastructure under Anoosh's instructions.
2.2 Contact Information & DPO
If you have questions, inquiries, or requests regarding this Privacy Policy or the processing of your personal data, you may reach out to us through:
Privacy & Support Email: info@myanoosh.com
Customer Care Phone / WhatsApp: +966593827836
Official Websites: www.anoosh.sa | order.anoosh.sa
Headquarters: Riyadh, Kingdom of Saudi Arabia
2.3 Personal Data We Collect
We collect personal data that you provide directly or that is automatically collected when using our services:
Account & Profile Data: First & last name, mobile number, email address, birthdate & gender (optional), password/OTP, wallet balance, and loyalty points.
Order & Gifting Data: Order history, selected menu items (cookies, chocolates, dragée, cakes, coffee), special instructions, and Gifting Details (recipient name, phone number, and custom gift card message).
Delivery & Pickup Data: Service type (delivery, branch pickup, curbside car pickup), detailed address and GPS coordinates, selected branch, and vehicle details for curbside pickup.
Payment & Transaction Data: Payment methods (Mada, Credit Card, Apple Pay, Tamara, Tabby), transaction amounts, receipts, and promo codes. (Card details are processed securely via PCI-DSS compliant payment gateways and are never stored on Anoosh servers).
Device & Automated Technical Data: IP address, device type, operating system, digital identifiers, cookies, and analytics trackers.
2.4 Purposes of Processing & Legal Basis under KSA PDPL
| Processing Purpose | Data Categories | Legal Basis (PDPL) |
|---|---|---|
| Account Creation & Management | Account & Contact Info | Contract Performance (Art. 6/2) |
| Fulfilling Anoosh Orders | Orders & Menu Items | Contract Performance (Art. 6/2) |
| Gifting & Third-Party Delivery | Recipient details & Gift card | Legitimate Interest (Art. 6/4) |
| Delivery & Pickup Logistics | Address, Phone & Vehicle info | Contract Performance (Art. 6/2) |
| Payment Processing & Invoicing | Payment Data & Invoices | Legal Obligation (Art. 6/2) |
| Wallet, Cashback & Loyalty Program | Loyalty Points & Wallet | Consent & Contract (Art. 5/1 & 6/2) |
| Customer Support & Care | Support logs & Queries | Legitimate Interest (Art. 6/2) |
| Marketing & Seasonal Promotions | Mobile & Email | Explicit Consent (Art. 5/1) |
| Fraud Prevention & Security | Device data & History | Legitimate Interest (Art. 6/4) |
2.5 Data Sharing & Third Parties
We do not sell or rent your personal data to any third party. We share data only with the following recipients as necessary:
Anoosh Branches & Kitchens: To prepare fresh products and customize gift greeting cards.
Delivery Partners & Couriers: To provide recipient name, contact number, and address for accurate delivery.
Payment Gateways & Financial Institutions: (Checkout.com, Tap, Apple Pay, Mada, Tamara, Tabby) for secure payment processing.
Technology & Cloud Sub-Processors: (Taker / Dook Infotech, AWS, MoEngage, Zoho, Google Firebase).
Government & Regulatory Authorities: When required by applicable laws in Saudi Arabia.
2.6 Your Legal Rights Under KSA PDPL
Under KSA PDPL, you hold the following rights regarding your personal data:
Right to be Informed: To know how your personal data is collected and processed.
Right of Access: To request a copy of your personal data held by us.
Right to Rectification: To request corrections or updates to inaccurate or incomplete data.
Right to Erasure (Destruction): To request deletion of your personal data when no longer required, subject to statutory retention obligations.
Right to Withdraw Consent: To withdraw consent for processing or direct marketing communications at any time.
To exercise any of these rights, contact us at: info@myanoosh.com or via WhatsApp at +966593827836.
2.7 Security, Data Retention & Policy Updates
Security & Retention: We implement strict technical and organizational safeguards. Data is retained for as long as your account remains active or as required by Saudi tax and commercial laws.
Policy Updates: Material updates to this policy will be communicated via our website, mobile application, or email.
Questions or Inquiries?
Our team is here to assist you. Contact us anytime at info@myanoosh.com.