We are committed to protecting your privacy and ensuring the highest level of security for your personal information. This Privacy Notice explains the types of personal information we collect, how we use that information, who we share it with, and how we protect that information.
Please read the following carefully to understand our views and practices regarding your personal information.
The terms of this Privacy Notice will be governed and be interpreted pursuant to the laws and regulations of the Kingdom of Saudi Arabia.

This Privacy Notice is provided by Darb Al Wasel, a branch of Al Waqt Al Abyad Trading (Single Person Company) incorporated under the laws of the Kingdom of Saudi Arabia, with license number 1010978340 and registered office at 8000, King Fahed Road, 4055, PO Box 12333, Riyadh, Kingdom of Saudi Arabia (collectively referred to as “AWAA”, “we”, “us” or “our”).
Al Waqt Al Abyad Trading (Single Person Company) is Aesop’s distributor in the Kingdom of Saudi Arabia).
Aesop offers skin, hair, and body care formulations available for sale both in stores and on the website www.aesop.sa (together the “Aesop Services”). This Privacy Notice applies to personal information that AWAA collects from or about you to provide the Aesop Services.

This Privacy Notice covers personal information that AWAA collects and processes in connection with the Aesop Services, including but not limited to, personal information collected to create your customer account. Personal information refers to any data identifying a natural person directly or indirectly, such as, name, identification number, location data, an online identifier.

We may collect information about you from the following sources:

4.1 Information we receive from you
We may collect personal information (such as your name, delivery address, postal and email address, telephone number, date of birth, title, payment information, skin type) that you provide to us when you:
• Visit our website and register an account with us.
•Purchase products through our website, social media channels, over the phone, or in store.
• Create a customer account when visiting one of our Aesop retail stores or counters.
• Take part in our promotions, competitions, and surveys.
• Attend an AWAA or Aesop event; and
• Correspond with us across any of our channels (e.g., messaging platforms such as, text message, WhatsApp, social media, and email).

4.2 Information we collect about you When you visit our website, we may use cookies and other technologies to collect the following information:
• technical information, including your IP address, your login information, browser type and version, details of any website which has referred you to our website, device identifier, location and time zone setting, browser plug-in types and versions, operating system and platform, page response times, and download errors.
• information about your visit, including the websites you visited before and after our website and products you viewed or searched for.
• length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouseovers) and methods used to browse away from the page.
For more information on our use of cookies and similar technologies, please refer to the section on cookies below.

We may collect personal information from other sources when applicable, including publicly available information as well as the use of the CCTV cameras in our stores.

Why we process your information	How we use your information for this purpose	Based on the following justification
To provide you with Aesop Services that you have requested from us.	We may process your personal information (such as your name, contact details) to provide Aesop Services that you have requested (e.g., where you have purchased a product or service from us, like a hand cream or a facial treatment). It is mandatory to collect and process your personal information to provide the Aesop Services.	It is necessary for us to process your personal information in this way to perform our statutory and/or contractual obligations to you.
To provide you with information about the Aesop Services.	We process your order history to develop, market, sell or otherwise provide products, services, or information to you. It is not mandatory to process your personal information for this purpose and you may decide to opt-out of processing your personal information for this purpose.	We process your personal information in this way based on your consent. You may withdraw this consent anytime.
To process your payments and protect you against fraudulent transactions.	We process your personal information, including your card details to fulfil your purchase orders for the Aesop Services and/or Aesop gift cards.   We also process this information to keep your payment details safe and protect you against fraudulent transactions.   It is mandatory to collect and process your personal information for this purpose as it is required to provide the Aesop Services.	It is in our legitimate interests to process financial information to keep payment transactions secure. Processing this information is also necessary for the performance of our contract with you.
To send marketing communications and event invitations	We may process your personal information, such as name and contact details, to send information about products we think you may be interested in or send invites to Aesop or AWAA events.   It is not mandatory to process your personal information for this purpose and you may decide to opt-out of processing your personal information for this purpose.	We process your personal information in this way based on your consent. You may withdraw this consent at any time.
To provide Aesop product recommendations.	We may request information about your skin type, known skin allergies, and product preferences to advise on the right Aesop product(s) that meets your skincare needs. We do not maintain records of any skin allergies disclosed to our skincare consultants during your consultation in our stores. It is not mandatory to process your personal information for this purpose and you may decide not to provide information regarding your skin type and/ allergies. However, please note that if you do not provide this information, our skincare consultants will not be able to provide you with tailored product recommendations.	We process your personal information pursuant to our legitimate interests to recommend products and services that meet your skincare needs.
To provide access to your user account and improve your experience on our website.	We process information such as your Aesop.ae account username and password, IP address, information about your purchases, and your other activities on our website to improve our website, including to modify it to your usage, history, and preferences and to troubleshoot problems. It is mandatory to collect and process your personal information for this purpose as we will not be able to provide access to important aspects and functionality on our website without processing such information.	It is in our legitimate interests to ensure we provide you with a seamless experience on our website.
To detect fraudulent or suspicious transactions.	We process the details of your device when you shop on our website to enable us detect fraudulent transactions or suspicious purchasing activity. It is mandatory to carry out this processing to ensure we maintain security and provide continued access to our website.	It is in our legitimate interests to keep payment transactions secure and prevent fraud on our payment gateways.
To assess the online activities of our website users.	We process information collected by our website automatically and through cookies and other technologies to assess the activities of our users, to measure the interest in and use of our website and communications, and to customise the website and our communications with you. We do this using both individual and aggregated data. Please see the sections titled 'Information we collect about you' and ‘Cookies’ for more detail. It is not mandatory to process your information for this purpose and you may choose to disable all cookies in your web browser setting. However, if you disable all cookies, you may not be able to access all or parts of our website.	It is in our legitimate interests to process personal information using cookies and similar technologies to provide a seamless experience on the website. For use of targeting and functionality cookies, we process personal information based on consent.
To understand and analyze our sales, your needs, and preferences.	We may use your information such as, your geographical location to conduct focused market research based on trends and common factors so that we develop, enhance, market, and provide products and services to meet customer needs. It is not mandatory to process your personal information for this purpose and you may opt-out of this kind of processing by contacting us using the details provided in the “How can you contact us?” section of this Notice.	It is in our legitimate interests to process personal information to develop, enhance, market, and provide products and services to you.
To manage your customer account.	We process your information to maintain, update, and service your account with us.   This processing also allows us to conduct internal administrative activities and planning.   It is mandatory that we process your personal information for this purpose to provide Aesop Services to you.	It is in our legitimate interests to provide a seamless experience and improve our relationship with our customers.
To process exchanges or returns.	We may use your personal information to process exchanges or returns based on your request.	It is mandatory to collect and process your personal information to process your return/exchange requests.	It is necessary for us to process your personal information in this way to fulfil our contractual obligations to you and to comply with applicable law.
To respond to requests or complaints.	We will need to process your name and contact details to respond to your requests or complaints.	It is mandatory to collect and process your personal information to register and respond to your complaints.	It is necessary for us to process your personal information based on our legitimate interest to ensure swift resolution of complaints and provide seamless experience to our customers.
To process VAT refunds	We need to collect a copy of your government-issued identification (e.g., passport copy) to process your request for VAT refund.	We process this information to comply with applicable law.

Your personal information is intended for Mizzen and Aesop but may be shared with third parties in certain circumstances:

6.1 AWAA’s group of companies:
We may share your personal information with affiliate companies of AWAA to register your account with us, deliver the Aesop Services, provide you with customer support, process your payments, understand your preferences, send you information about products that may be of interest to you, and conduct the other activities described in this Privacy Notice.

6.2 Our service providers:
We use other companies, contractors, and service providers to perform services on our behalf or to assist us with the provision of the Aesop Services to you. We may share personal information with the following categories of service providers:
• infrastructure and IT service providers, including for email archiving, mailing, website hosting, payment/billing, booking/appointment systems, IT support desk, and cloud-based services.
• Banks and other financial services providers.
• marketing, advertising, and communications agencies.
• logistics or last mile delivery companies.
• Legal advisers, external auditors, and advisers.
While providing such services, these service providers may have access to your personal information. However, we will only provide our service providers with personal information which is necessary for them to perform their services, and we require them not to use your information for any other purpose. We will use our best efforts to ensure that all our service providers keep your personal information secure.

6.3 Aesop product manufacturers:
We may share and transfer your personal information with and to Aesop UK Ltd in their role as the offshore manufacturer of Aesop products.

6.4 Third parties permitted by law:
In certain circumstances, we may be required to disclose or share your personal information to comply with a legal or regulatory obligation (for example, we may be required to disclose personal information to the police, regulators, government agencies, or to judicial or administrative authorities).
We may also disclose your personal information to third parties where disclosure is both legally permissible and necessary to protect or defend our rights, matters of national security, law enforcement, or protect your rights or those of the public.

6.5 Third parties connected with business transfers:
We may transfer your personal information to third parties relating to a reorganization, restructuring, merger, acquisition, or transfer of assets, provided that the receiving party agrees to treat your personal information in a manner consistent with this Privacy Notice. We do not sell your personal information to third parties.
Please note our website may, from time to time, contain links to and from third-party websites of our partners or affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy notices and that we have no control over how they may use your personal information. You should check the privacy notices of third-party websites before you submit any personal information to them.

Aesop is a global brand and provides Aesop products and services all over the world. Your personal information may be transferred to and processed in:

• The United Kingdom

By our affiliates and our service providers. We will take all steps that are reasonably necessary to ensure that your personal information is treated securely and in accordance with this Privacy Notice.

You have the following rights available to you in respect of the personal information we hold about you:

Right to Access:
You have the right to obtain confirmation as to whether we process your personal information, request a copy of your personal information being processed by us, and obtain certain other information about how and why we process your personal information (like the information provided in this Privacy Notice). For your own security and to comply with applicable data protection law, we may require you to prove your identity before providing the requested information. We may not be able to fully comply with your request if it will negatively impact the rights of others or if it involves disclosing personal information that identifies another individual.

Right to Rectification:
You have the right to have incomplete or inaccurate personal information that we process about you rectified.

Right to Erasure:
You have the right to request that we delete personal information that we process about you, except we are not obliged to do so if we need to retain such data to comply with a legal obligation or to establish, exercise or defend legal claims.

Right to Restrict Processing:
You have the right to restrict our processing of your personal information temporarily for a period when you have contested the accuracy of the personal information.

Right to Data Portability:
You have the right to obtain personal information we hold about you, in a structured electronic format, and to transmit such data to another data controller, where this is (a) personal information which you have provided to us, (b) if we are processing that data based on your consent or to perform a contract with you, (c) the processing is carried out by automated means.

Right to Object:
Where the legal justification for processing your personal information is our legitimate interest, you have the right to object to such processing. We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or if we need to continue to process the data for the establishment, exercise, or defense of a legal claim.

Right to Withdraw Consent:

If you have consented to our processing of your personal information, you have the right to withdraw your consent at any time, free of charge. This includes cases where you wish to opt out from marketing messages that you receive from us. Please note that where you have withdrawn your consent to our collection, use, and disclosure of your personal information at any time (subject to contractual and legal restrictions and reasonable notice), we may be unable to provide you the Aesop Services you have requested or contact you in the future.

Right to Lodge a Complaint with a Data Protection Authority:
You have the right to lodge a complaint with the local data protection authority if you believe that we have not complied with applicable data protection laws. We would however appreciate the chance to deal with your concerns before you approach any local data protection authority so, please contact us at the first instance.

You can make a request to exercise any of these rights in relation to your personal information by sending the request to privacy@awaa.sa

We will generally provide you with access to your personal information if practicable and will take reasonable steps to amend any of your personal information which is inaccurate or out of date.

Please note that where CCTV is in operation in our stores, you may be captured in recorded CCTV footage (image and video) when you visit any of our stores. All CCTV footage is captured purely for your security and for the prevention and detection of crime. If you would like to know more about this, please contact us using the details provided below.

The security of your personal information is an important concern to us. We provide the utmost care in secure transmission of your personal information from your computer and other electronic devices to our servers. We use industry security standards to safeguard the confidentiality of your information and to make sure that your personal information is secure with us.
We have implemented and maintained appropriate technical and organizational security measures, policies, and procedures to protect your personal information from accidental loss, unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on our secure servers behind a secure network. All payment transactions are encrypted. Examples of measures we take include:

Imposing confidentiality obligations on our staff and service providers

Restriction of access to your personal information to employees and third parties strictly on a need-to-know basis, such as to respond to your enquiry or request

Using secure communication channels for transmitting personal information; and

Employing adequate administrative and technical controls to secure personal information.

As we collect personal information for different purposes, there is not a single retention period for all personal information. We will only retain your personal information for as long as necessary for the purpose for which that data was collected and to the extent permitted by applicable laws. However, we may retain some information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. We will ensure your personal information is disposed of in a secure manner when it is no longer needed. For more information on where and how long your personal information is stored, and for more information on your right of erasure, please contact us using the details provided in Section - ‘How can you contact us?’

If your web browser is set up to accept cookies, a cookie will be stored on your hard drive when you visit this website. Cookies allow us to collect information about your computer or device, which may include your IP address (a number assigned to your computer/device when you register with an Internet Service Provider), type of browser, operating system, domain name, and the details of any website which has linked you to our website. Our website uses cookies to track and collect information about which parts of our website and newsletter (including links to other websites) you visited. Cookies also allow us recognize your computer/device while you are on our website, and to send you to the country of origin and language you selected on your first visit to this website. This information is used to maintain the quality of our service and to provide tracking and statistics regarding the use of our website. The types of cookies we use include:

• Strictly necessary cookies: these are required for the operation of our website, such as cookies that enable you to log into your account or make purchases, or cookies that enable us comply with applicable law (for example, to keep your information safe). We would not be able to operate our website without using strictly necessary cookies.
• Performance cookies recognize and count the number of users on our website and help us see how users move around our website. These cookies do not collect information that identifies a user. Any information collected by these cookies is anonymous. We only use such information to improve our website. This information helps us to find out how well the website works and highlights where it can be improved.
• Functionality cookies are used to recognize you when you return to our website and assist us to personalize your content and website experience by remembering your preferences. These cookies are also used to provide services you have asked for (such as watching a video). You may choose to enable or disable this cookie on your first visit to our website. Please note that if you disable this cookie, you may not be able to access all the functionality on our website.
• Targeting cookies are used to record your visit to our website, the pages you have visited, and the links you have followed. These cookies are used to advertise relevant products to you on other websites, based on the products and categories you looked at on our website. You may choose to enable or disable this cookie on your first visit to our website.

We also use third party cookies of suppliers who set their own cookies on our website with our permission to improve customer experience and offer additional functionality. We use the following third-party cookies –

• Google AdWords:
This website utilizes the online advertising program “Google AdWords”, and the associated conversion tracking cookie is set on the user’s browser. The information collected by the conversion cookies is used to provide aggregate conversion statistics to Google AdWords clients who have opted-in for conversion tracking. They are not used to acquire personal information. If you do not want to allow these cookies on your device, you can deactivate the Google conversion-tracking cookie through your user settings on your internet browser.
We also use Google AdWords remarketing codes to log when users view specific pages or take specific actions on a website. This allows us to provide targeted advertising in the future. If you do not wish to receive this type of advertising from us, you can opt out using the DoubleClick opt-out page (http://www.google.com/settings/ads) or the Network Advertising Initiative opt-out page (http://www.networkadvertising.org/managing/opt_out.asp) If you would rather not have any of this information stored on your computer/device, you can configure your browser, so it does not accept cookies. However, if you disable cookies, you may not be able to access all parts of this website, including the purchase section. For more information and to learn how to disable cookies, please visit www.allaboutcookies.org or www.youronlinechoices.com.
• Meta Pixel:
Meta Pixel is an analytical tool that allows us to measure user activity on our website. It is a piece of code that helps identify Facebook and Instagram users and see how they interacted with the content on our website (such as, page views, product views, adding to cart/wish list, starting checkout, purchases). Meta Pixel helps us measure the effectiveness of our advertising and campaigns. For more information and to opt-out of analytics using Meta Pixel, you may change your ad preferences (including your activity off Meta technologies) in your Meta accounts centre accessible through this link https://accountscenter.facebook.com/info_and_permissions
• TikTok Pixel:
TikTok Pixel is a piece of code that captures users’ action on our website, including events such as adding to cart or placing an order. This provides us with insights on how users are engaging with our website and to measure the effectiveness of our advertising and campaigns. For more information and instructions on how to opt-out of analytics using TikTok Pixel, please follow this link https://www.tiktok.com/privacy/ads-and-your-data/en

We will never knowingly collect personal information from individuals under the age of eighteen (18) without first obtaining verifiable parental consent. If you are under the age of 18, you should not provide information to us. If we become aware that a person under 18 has provided personal information to us without verifiable parental consent, we will take all reasonable measures to delete such information from our databases.

If there are any questions or concerns regarding this Privacy Notice, please contact us at privacy@awaa.sa

This Privacy Notice is written in English and may be translated into other languages. In the event of any inconsistency between the English version and the translated version of this Notice, the English version shall prevail.

We reserve the right to change our Privacy Notice from time to time. To obtain a copy of the latest version at any time, please visit this website.