Privacy Policy

1. Introduction

Kasah respects the privacy of website visitors and customers. This policy explains how we handle personal data when you visit our website or contact us through the available channels. It is not a claim of final legal approval and must be reviewed when the website moves to production or its services change.

2. Who is responsible for the data?

The party currently responsible is the trade name Kasah, located in Buqayq, Eastern Province, Saudi Arabia. Privacy enquiries and requests may be sent to [email protected]. References to Kasah in this policy do not assert an unconfirmed registered legal entity name.

3. Data we collect

We may handle only the information a customer chooses to provide through WhatsApp or email, such as their name, contact details, enquiry or service-request content, garment information, or selected service name. Operating the website may also generate basic technical data such as IP address, request time, requested page, browser type, referrer information, and server logs.

WordPress does not store a contact form or customer messages in the website database.

4. How we collect data

• When a customer voluntarily sends information through WhatsApp or email.
• When a customer selects a service and chooses a WhatsApp button; the service name or enquiry text may be included in the prepared message.
• Through technical data automatically generated by the server to operate and protect the website.
• Through the functional language-preference cookie.

5. Purposes of processing

We use data to respond to enquiries, understand the requested service, provide service and pricing information, follow up through the communication channel chosen by the customer, improve website operation and user experience, protect the website and prevent misuse, and meet applicable legal requirements.

6. Legal basis for processing

Depending on the purpose and circumstances, processing may be based on information voluntarily provided by the user, steps taken at the user’s request to provide information or a service, compliance with a legal requirement, or a legitimate interest such as website security and reliable operation where its conditions apply. These bases should be legally reviewed when the production environment is approved or new features are introduced.

7. Data sharing

Kasah does not sell personal data. Data may be processed as necessary by the hosting provider to operate the website, by WhatsApp/Meta when a user chooses to continue to WhatsApp, by the email provider when corresponding by email, or by public authorities where disclosure is legally required. The production hosting provider and server location will be reviewed before launch, and this policy will be updated accordingly.

8. Potential transfers outside Saudi Arabia

External services such as WhatsApp/Meta and the email provider may process some data outside Saudi Arabia under their own infrastructure and policies. The location of technical-data processing also depends on the production hosting provider, which has not yet been selected. We do not claim that all data is stored in Saudi Arabia or that Kasah controls the processing locations and retention practices of external providers.

9. Retention periods

• WhatsApp and email enquiry correspondence: 12 months from the last contact, unless a contractual or legal need requires a different period.
• Website server logs: 90 days, unless the hosting provider or an applicable security or legal requirement requires otherwise.
• Backups: 30 days within the backup cycle, after which they are replaced or securely destroyed.
• Privacy-rights requests: for the duration of handling the request and then as necessary to demonstrate the response or comply with a legal requirement.

WhatsApp, email providers, and other external services apply their own policies and retention periods. Kasah cannot promise deletion from systems it does not control.

10. Data protection

We work to minimise collected data, restrict administrative access, protect administrator accounts, maintain WordPress, the theme, and plugins, manage backup access and retention, and enable encrypted HTTPS connections in production. No electronic method can guarantee absolute security.

11. Data-subject rights

Under the laws applicable in Saudi Arabia, data-subject rights may include the right to be informed, access personal data, obtain a copy subject to applicable controls, request correction, completion, or updating, request destruction where applicable, and withdraw consent where consent is the basis of processing.

Requests may be sent to [email protected]. We may request proportionate information to verify the requester’s identity and protect the data while avoiding unnecessary collection.

12. Cookies

The website uses a functional cookie named tailorfit_language to remember the Arabic or English display language for one year. It contains no personal information or tracking identifier and is not used for advertising. Its current attributes are HttpOnly and SameSite=Lax, and it is set as Secure when the website uses HTTPS.

WordPress may create administrative cookies when a website administrator signs in. These are not normally used for an unregistered visitor. The website currently uses no analytics or marketing cookies.

13. WhatsApp and external services

The website does not send user information to WhatsApp merely by loading a page. The transfer begins when the user chooses a WhatsApp button, and the message may include the selected service name or text chosen by the user. After continuing, processing is governed by WhatsApp/Meta policies and may involve processing or transfer outside Saudi Arabia. Please review the official WhatsApp Privacy Policy.

The website may also contain email links or links to external platforms. Use of those services is subject to the policies of their respective operators.

14. Children’s privacy

Kasah services are not intentionally directed at collecting children’s personal data. If we learn that a child’s information has reached us without an appropriate basis, a parent or guardian may contact us through the privacy email so that we can review it and take appropriate action.

15. Policy updates

We may update this policy when website functions, communication channels, the hosting provider, or data recipients change. The latest update date will appear on this page, and an appropriate notice may be displayed if a material change occurs.

16. Privacy contact

For privacy enquiries or to exercise applicable rights, contact [email protected]. This address is approved temporarily until a professional address under the website’s domain is available.