Privacy Policy

Last updated: 23 October 2026

1. Who we are

This Privacy Policy explains how Rahash Food Industries Co. ("Rahash", "we") collects, uses, shares, stores and destroys personal data when you visit www.rahash.sa, place an order, contact us or apply for a job. It is issued in line with the Personal Data Protection Law of the Kingdom of Saudi Arabia and its Implementing Regulations.

Data controller: Rahash Food Industries Co. — Commercial Registration 1011153756 — Unified No. 7034614185 — VAT No. 311658367700003 — Al Kharj Industrial City, Street 30, Factory 11, Al Kharj 16417, Kingdom of Saudi Arabia (National Address short code OAAA3200) — Phone / WhatsApp +966 56 648 0256 — Email info@rahash.sa.

2. Personal data we collect

• Identity and contact data: name, mobile number, email address and delivery address.
• Order data: products, quantities, invoices, payment method and payment confirmations (for example a copy of a bank transfer receipt). We do not collect or store bank card details.
• Business customer data: company name, commercial registration and VAT numbers, and the name and contact details of the person dealing with us.
• Messages and enquiries you send us through website forms, email or WhatsApp.
• Job applications: CV, qualifications, experience and contact details. We do not ask for sensitive data such as health information.
• Technical data collected automatically: IP address, browser and device type, pages visited and cookies needed to run the site and the shopping cart.

3. How we collect it

Directly from you when you create an account, place an order, fill in a form, message us or apply for a job; automatically when you browse the site; and, for business customers, from documents you provide during account opening.

We process data to perform your order or request, to comply with our legal obligations, on the basis of our legitimate interest in running and protecting our business, or with your consent where consent is required.

Data collected automatically through cookies and website analytics comes from your browser and device; it covers technical and usage data only.

4. Why we use it

• To process, deliver and invoice your orders and to handle returns and complaints.
• To meet our legal obligations, including tax and e-invoicing requirements of the Zakat, Tax and Customs Authority.
• To reply to enquiries, quotation requests and distributor, supplier, private-label and export applications.
• To assess job applications.
• To keep the website secure and working, and to improve it.
• To send offers and news only where you have agreed; you can withdraw this consent at any time.

We use your data only for the purpose for which it was collected, we will not use it later for an unrelated purpose, and we do not sell it.

Fields marked with * in our forms are required. If you do not provide them we cannot process your order or request; all other fields are optional.

5. Who we share it with

• Our delivery staff and any delivery company we use, to deliver your order.
• Banks, for confirming payments and refunds.
• Service providers who host or run our systems (website, ERP, email and messaging), under contracts that oblige them to protect the data.
• Government authorities when required by law.

6. Storage and transfer outside the Kingdom

Some of our service providers (such as our cloud ERP and website provider) may store or process data on servers outside the Kingdom. Any such transfer is made only within the limits allowed by the Personal Data Protection Law and its regulations, with appropriate safeguards.

7. How long we keep it

We keep personal data only as long as needed for the purpose it was collected for, or as long as the law requires (for example, invoices and accounting records are kept for the period required by tax regulations). Job applications are kept for up to one year unless you ask us to delete them sooner. After that, data is destroyed securely or anonymised.

8. How we protect it

We use organisational, administrative and technical measures to protect personal data, including encrypted connections (HTTPS), access limited to authorised staff, and protected accounts.

If a data breach occurs that may harm you, we will notify the competent authorities and inform you as required by law.

9. Your rights

• To be informed about how and why your data is collected and used.
• To access your personal data held by us.
• To obtain a copy of your data in a readable and clear format.
• To ask us to correct, complete or update your data.
• To ask us to destroy your data when it is no longer needed, unless the law requires us to keep it.
• To withdraw your consent at any time, where processing is based on consent.

To use any of these rights, email info@rahash.sa or message +966 56 648 0256. We may ask you to verify your identity. We respond within 30 days; if we need more time, we will tell you the reason, and the extension will not exceed another 30 days.

10. Marketing messages

We send marketing messages only with your consent. Every message includes a way to stop receiving them, and you can also ask us at any time.

11. Cookies

The site uses cookies needed to operate it (for example language, login and the shopping cart) and may use analytics cookies to understand how it is used. You can block or delete cookies in your browser settings; some features may then not work.

12. Children

Our website and services are not directed to children, and we do not knowingly collect children's data without the consent of their guardian.

13. Complaints

If you have a concern about how we handle your data, contact us first at info@rahash.sa. You also have the right to file a complaint with the Saudi Data & AI Authority (SDAIA), the competent authority under the Personal Data Protection Law.

14. Changes to this policy

We may update this policy. The latest version is always published on this page with its update date.

This policy is published in Arabic and English. If there is any difference, the Arabic text prevails.