Privacy policy

Privacy Policy

Last updated: 19 August 2026

This store, almondhair.com, and the Almond Hair brand are operated by HEYGLOW CO. ("Almond Hair", "we", "us"). This policy explains what personal data we collect, why we collect it, how we use it, and the rights you have. We handle personal data in line with the Saudi Personal Data Protection Law (PDPL).

Who is responsible for your data

HEYGLOW CO.
Al-Fayhaa District, Postal Code 22241, Jeddah, Kingdom of Saudi Arabia
Commercial Registration 4030566281 · VAT Registration 312422252200003
hello@almondhair.com · +966 55 036 7709

What we collect

  • Order information: name, email address, mobile number, delivery address, billing address, and the contents of your order.
  • Payment information: processed directly by our payment providers. We never see or store your full card number.
  • Account information: if you create an account, your login details, saved addresses and order history.
  • Marketing information: your email or mobile number if you subscribe, and whether you open or click our messages.
  • Customer service information: what you send us by email, WhatsApp or a form on this site, including any photographs you attach.
  • Technical information: IP address, device and browser type, pages viewed, and how you reached our site. Collected through cookies and similar technologies.

Why we use it

  • To process, ship and support your order, and to handle returns
  • To communicate with you about your order and to answer your questions
  • To send marketing messages, where you have consented
  • To improve our products, our site and our advertising
  • To detect and prevent fraud, and to meet our legal and tax obligations in the Kingdom of Saudi Arabia

Who we share it with

We do not sell your personal data. We share it only with parties who need it to deliver our service to you:

  • Shopify — our e-commerce platform
  • Aramex and other carriers — to deliver your order
  • Payment providers — to process payment and prevent fraud
  • Analytics and advertising platforms — to understand site usage and measure our campaigns
  • Government authorities — where required by law

International transfers

Some of these providers operate servers outside the Kingdom of Saudi Arabia. Where data leaves the Kingdom, we take reasonable steps to ensure it remains protected to a standard consistent with the PDPL.

How long we keep it

Order and invoice records are kept as long as required by Saudi tax and commercial law. Marketing data is kept until you unsubscribe. Account data is kept until you ask us to delete it.

Your rights

Under the PDPL you have the right to:

  • Be informed about how your data is used
  • Access the personal data we hold about you
  • Request a copy of your data
  • Request correction of data that is inaccurate or incomplete
  • Request deletion of your data, where we are not required to keep it

To exercise any of these, email hello@almondhair.com. We respond within 30 days. We may ask you to verify your identity first.

Photographs you send us

If you send us a photograph — for a return, a review, or a before-and-after — we use it only for the purpose you sent it for. We will never publish a photograph of you in our marketing without asking you separately and receiving your clear agreement.

Marketing messages

We send marketing only to people who have subscribed. You can unsubscribe at any time using the link in any email, or by replying STOP to a WhatsApp or SMS message. Order-related messages are not marketing and will continue.

Cookies

Our site uses cookies to keep your cart working, remember your preferences, measure how the site is used, and support our advertising. You can block or delete cookies in your browser settings, though parts of the site may stop working correctly.

Security

The site runs over an encrypted connection and payment data is handled by PCI-compliant providers. No system is completely secure, but we take reasonable technical and organisational measures to protect your data.

Children

This store is intended for customers aged 18 and over. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

Changes

We may update this policy. The date at the top shows when it last changed. Material changes will be announced on this page.