Privacy Policy

Commercial Registration No. (7001729149)
Company’s Name: (Alshaghaf Alarabia)
Privacy Policy

Introduction
At Five Guys KSA we place a high priority on the protection of the personal data, and we manage it with utmost care. The confidentiality and integrity of the data you provide to us, whether by using our website, our platforms, applications, making in-store transactions or utilizing our customer care services. This is done in full compliance with the Personal Data Protection Law issues under Royal Decree No. (M/19) dated 09/02/1443 AH corresponding to 16/09/2021 G, the Amended pursuant to Royal Decree No. (M/148) dated 05/09/1444 AH corresponding to 27/03/2023 G (“PDPL”), as well as other relevant security standards and regulations in the Kingdom of Saudi Arabia. All data processed is in line with the provisions outlined in this privacy policy (the “Privacy Policy”).
Safeguarding your privacy and the security of your personal information is important to us. Please take a few minutes to read the Privacy Policy so that you understand how we treat your personal information.

This Privacy Policy explains how we collect, use and safeguard personal information about our customers and others who use our websites and mobile apps in compliance with the PDPL

We strive to create a seamless and secure experience for all our users, and we are dedicated to maintaining transparency in how your personal data is handled. Your trust is at the core of what we do, and this Policy reflects our commitment to safeguarding your privacy.
Unless otherwise expressly defined in this Privacy Policy, capitalized terms used herein shall have the meanings ascribed to them under the PDPL and its Implementing Regulations.

Who we are
We are the entity responsible for processing your personal data collected. As the Data Controller, our role is to ensure that all your personal data is managed securely and used solely for permitted purposes in accordance with the PDPL.
If you have any questions about this Privacy Policy or how your personal data is managed, you can reach out to us through the following:

Email: ([email protected])
Address: Alamar Tower, 3507 Prince Sultan Bin Abdulaziz Road, Al Olaya District, Riyadh 11412, Saudi Arabia
Phone: +966 11 2504747

How do we collect your Personal Data
Personal Data refers to any data that would lead to your identification in a specific manner or make it possible to identify you whether directly or indirectly, for example, your name, address, telephone/fax number, email address or any information you submit to ([email protected]) that identifies you individually. We collect this data for processing purposes in accordance with the applicable legal bases under the PDPL, as further described in section 4 below. We collect the minimum amount of personal data necessary to fulfil the purposes of its collections, which is essential to provide our services and functions.
We may collect Personal Data that you provide directly to us, as well as certain Personal Data collected automatically when you access or use our website, platforms or applications.
Therefore, if you do not want us to obtain any personal data about you, please do not submit it to us. You can visit and browse our website without revealing or providing us with your Personal Data. You may also choose to disclose Personal Data about yourself, which may be maintained as described below. This website may collect Personal Data about you by methods such as:

Registration Forms– If you order any of our products or services or if you are offered the opportunity to enter a promotion, to become a registered user of (Five Guys KSA) or to opt-in to receive our information through another site, you must apply by filling out the registration form on the website. This form requires certain personal data that may include, without limitation, your name, email address, postal address, telephone number, areas of interest, product usage, payment method details and/or a unique individual password.

Email and other voluntary communications– You may also choose to communicate with us through email, via our website, by telephone, in writing, or through other means. We collect the information in these communications, and such information may be personally identifiable.

Collection of Personal Data from the Device or Browser– The purpose of this processing is to facilitate the use of the website on devices and browsers and providing the required functionality to users on the website. We process data such as the type of browser you use, the IP address, and device information.
Our website, platforms and applications are not intended for children, and we do not knowingly collect or process Personal Data relating to children. Where we become aware that Personal Data relating to a child has been collected, or where the processing of such Personal Data is necessary for a permitted purpose, we will process such Personal Data only in accordance with the PDPL and its Implementing Regulations, including obtaining the consent of the child’s legal guardian where such consent is required. Where we become aware that Personal Data relating to a child has been collected or processed without the required consent or other lawful basis, we will take appropriate measures in accordance with applicable law.

Legal Basis for Collecting and Processing Data
We collect and process personal data based on specific legal grounds to ensure that our data practices are transparent and lawful under the PDPL. The legal reasons for collecting and processing your personal data are as follows:
Performance of a contract: We collect and process your personal data to fulfill our contractual obligations to you; this includes processing your orders, managing payments, providing customer support and delivering your food. Without this data, we would be unable to perform these essential services for you.
Your explicit consent: In certain cases, we rely on your explicit consent to process your personal data, such as when you sign up to receive marketing communications or personalized offers. You can withdraw your consent at any time.
Compliance with legal obligations: We may process your data to comply with legal and regulatory obligations, including record-keeping, fraud prevention and responding to legitimate requests from public authorities (e.g., tax authorities or law enforcement agencies).
Legitimate business interests: We may process your Personal Data where necessary to achieve a legitimate interest of ours, provided that such processing does not prejudice your rights or interests, does not involve Sensitive Data, and otherwise satisfies the requirements of the PDPL and its Implementing Regulations. We may also process Personal Data where necessary to achieve a legitimate interest of the Data Subject where contacting the Data Subject is impossible or impracticable.

Collection and Use of Personal Data
Personal data you provide is collected by us (a Saudi company headquarter at (Alamar Tower, 3507 Prince Sultan Bin Abdulaziz Road, Al Olaya District, Riyadh 11412, Saudi Arabia)).
We may use the Personal Data collected primarily for purposes such as:
Helping to establish and verify the identity of users.
Opening, maintaining, administering, and servicing users’ accounts or memberships.
Processing, servicing, or enforcing transactions and sending related communications.
Providing services and support to users.
Improving the Websites and Applications, including tailoring them to users’ preferences.
Providing users with product or service updates, promotional notices and offers, and other information about us and/or our affiliates.
Contacting users via surveys to conduct research about users’ opinions of the current products and services or of potential new products and services that may be offered by Alamar or our brands.
Responding to your questions inquiries, comments, and instructions.
Maintaining the security and integrity of its systems.
Without your Personal data, we would not be able to perform some or all the above purposes.
Your Personal Data will not be processed otherwise than in accordance with the purpose of its collection and applicable laws.
We may use technical and browsing information collected automatically by our servers primarily to help us administer and improve our website. We may also use aggregated anonymous information to provide information about our website to potential business partners and other unaffiliated entities. Again, this information is not personally identifiable.
We do not knowingly collect or process Sensitive Personal Data unless such processing is necessary for a specific and lawful purpose and is permitted under the PDPL and its Implementing Regulations. Where we process Sensitive Personal Data, we will apply the additional requirements and safeguards applicable to such processing under the PDPL and its Implementing Regulations and will implement appropriate organizational, administrative and technical measures to protect such data against unauthorized or unlawful access, disclosure, alteration, loss or destruction.

Data Sharing with Third Parties
We do not sell or otherwise share personal data about you except as set out in this Policy
We take your privacy seriously and ensure that your personal data is only shared with trusted third parties when absolutely necessary for providing our products and services. All third parties with whom we share your data are bound by confidentiality agreements.

We ensure that all third parties with whom we may share your personal data:
are bound by confidentiality/non-disclosure agreements;
are required to adhere to strict data protection standards;
are required, as applicable to their role and the processing activities they perform on our behalf, to process Personal Data in accordance with applicable data protection requirements and the contractual safeguards we impose.

Your data may be shared with:
Delivery Partners: We share your location, contact information and order details with our delivery partners to ensure that your meals are delivered accurately and on time; any such disclosure of personal information is strictly limited to that which is necessary for delivery.
Payment Processors: Your payment information is securely processed by third-party payment providers who handle your payment details under strict security protocols to complete transactions efficiently and safely.
Service Providers and Vendors: We work with selected service providers to support the functionality of our website, application, etc., such as hosting services, customer support platforms and analytics tools. These third parties may have limited access to your personal data, but only for the purpose of providing services on our behalf.

Legal Authorities: We may be required to disclose your personal data to comply with mandatory legal obligations, court orders, regulatory requirements and government requests, as required by the law of Saudi Arabia. In such cases, we will use our commercially reasonable endeavors to ensure that any personal data disclosed is limited to the extent legally required to be disclosed and is handled responsibly and with due consideration for your privacy by the recipient.

Data Retention Period
Unless stated otherwise in this Privacy Policy, we retain your personal data only for as long as it is needed for the intended purpose. Once that purpose has been fulfilled, we will delete your data in accordance with its type and use, unless we are legally required or entitled to retain it for a longer duration.
In some cases, we are required to retain certain personal data for a specified period in order to comply with the laws and regulations of the KSA (including the PDPL) and/or applicable regulatory requirements. For example, financial data may be retained for tax compliance purposes. In cases where data needs to be retained for legal purposes, it will be securely stored and restricted from further processing.
You may request the destruction of your Personal Data in accordance with the circumstances and subject to the exceptions provided under the PDPL and its Implementing Regulations.
Our goal is to handle your personal data responsibly and minimize retention to only that which is necessary. Be assured that we take all necessary precautions to ensure your personal data is securely stored and protected during any retention period.

Customer Rights
In accordance with the PDPL, you have specific rights regarding your personal data.
We are committed to enabling you to exercise these rights in a clear and transparent manner. Here is a detailed overview of your rights:
You have the right to be informed about the personal data we collect, the reasons for collecting it, how it will be used, and the legal grounds for collecting your data.
You have the right to access the personal data we hold about you. You can obtain a copy of your personal data and understand how it is being processed and stored. Please submit a request by contacting us at ([email protected]).
If your personal data is inaccurate or incomplete, you have the right to request corrections. You can update inaccurate data to keep your records accurate and current by contacting us to make corrections at ([email protected]).
You have the right to receive a copy of your personal data in a structured, machine-readable format. Please contact us to obtain an electronic copy of your data at ([email protected]).
You can request the deletion of your personal data in the following circumstances:
when your data is no longer needed for the purposes for which it was collected; or
if you withdraw consent and there is no other legal basis for processing; or
To delete your personal data, please contact us at (([email protected]).).
If we rely on your consent to process personal data, you can withdraw that consent at any time. Once consent is withdrawn, we will stop processing your personal data, unless required by law. You can manage this by contacting us directly at (([email protected]).).
If you believe your rights have been violated or if you are concerned about how your personal data is being handled, you have the right to lodge a complaint. Please refer to section 9 of this Privacy Policy.

Complaints and Dispute Resolution
We are committed to addressing any concerns or complaints you may have regarding the handling of your personal data. If you believe your rights under the PDPL have been violated or if you are unsatisfied with how your personal data has been processed, you should follow the process for lodging a complaint as set out below.

Complaint to us:
In the first instance, you should raise your complaint directly with us using any of the following contact methods:
Email: ([email protected]).
Phone: +966 11 2504747
Our personal data team will investigate your complaint and respond as quickly as possible, generally within twenty-five (25) days of receipt of your complaint.

Dispute Resolution
In the event of a dispute concerning the processing of your personal data, we aim to resolve the matter amicably. If a satisfactory resolution cannot be reached through internal processes or the Saudi Authority for Data and Artificial Intelligence, we may explore other dispute resolution mechanisms, depending on the nature of the dispute and applicable law.
We are committed to resolving complaints in a fair and transparent manner, and we will cooperate fully with any official investigations or legal requirements to ensure your rights are protected.

Cross-Border Transfer of Personal Data
We may transfer, process or store certain Personal Data outside the Kingdom of Saudi Arabia. Any transfer of Personal Data outside the Kingdom will be carried out in accordance with article (29) of the PDPL and the Regulation on Personal Data Transfer Outside the Kingdom, including, where applicable, through appropriate safeguards or other transfer mechanisms permitted under applicable law.
Where personal data is transferred outside the Kingdom, we take appropriate steps to ensure that the data continues to be afforded a level of protection consistent with the requirements of the PDPL, including through contractual safeguards with recipients and adherence to applicable data protection standards in the destination jurisdiction.

“Cookies” and Advertisers
This website’s server, or the servers of companies that are used to operate this site, may place a “cookie” on your computer to allow you to use the website and personalize your experience. A “cookie” is a small piece of data that can be sent by a web server to your computer, which then may be stored by your browser on your computer’s storage. Cookies allow us to recognize your computer while you are on our website and help customize your online experience and make it more convenient for you. Cookies are also useful in allowing more efficient log-in for users and preserving information between sessions. The information collected from cookies may also be used to improve the functionality of the website.
Most web browser applications (such as Mozilla Firefox and Microsoft Edge) have features that can notify you when you receive a cookie or prevent cookies from being sent. However, if you disable cookies, you may not be able to use certain personalized functions of this website.

External Links
This website may contain links to other websites not maintained by or related to us. These links are provided as a service to users and are not sponsored by or affiliated with this website or us. We have not reviewed any or all the sites hyper-linked to or from this website and are not responsible for the content or privacy practices of other websites. The links are accessed at the user’s own risk, and we make no representations or warranties about the content, completeness or accuracy of these links or the sites hyper-linked to this website. Websites that are accessible by hyperlinks from this website may use cookies. We encourage you to read the privacy statements provided by other websites before you provide your Personal Data to them. We do not implicitly endorse third-party sites hyper-linked to this website.

Security
We maintain physical, electronic, and procedural safeguards to help guard your Personal Data. We restrict authorized access to your personal information to those persons who have a legitimate purpose to know that information to provide products or services to you and those persons you have authorized to have access to such information. Please be aware, however, that any email or other transmission you send through the internet cannot be completely protected against unauthorized interception and we will not be liable for such unauthorized interception.

Opt-Out of Promotional and Marketing Messages
From time to time, where you have provided the required consent, we may send you marketing communications regarding our products, services, promotions and other relevant activities. You may withdraw your consent and opt out of receiving future marketing communications at any time by using the ‘unsubscribe’ link included in our marketing emails, adjusting your communication preferences, or contacting us through our Contact Us page.

Changes to this Privacy Policy
We reserve the right to modify or supplement this Privacy Policy at any time. If a material change to the terms of this Privacy Policy is made, we will post a notice on our homepage and a link to the new policy.

Contacting Us
If you have questions about this privacy statement, our information practices or your dealings with our website, please Contact Us or write to the personal data protection team at ([email protected]).