Legal
Privacy Policy
A piece of jewellery is a personal thing, and so is the information you give us to make and deliver it. This policy explains what we collect, why we collect it, who else sees it, how long we keep it and the rights you hold over it under the Saudi Personal Data Protection Law.
Last updated: 13 September 2026 · Governed by the laws of the Kingdom of Saudi Arabia.
1. Who we are
L'Atelier Nawbar KSA — the Saudi establishment of the house founded in Beirut in 1891, with its flagship boutique at Via Riyadh Mall, Riyadh — is the data controller for the personal data collected through this website and in our Saudi boutique. We decide what is collected and why, and we are answerable for it.
For anything in this policy, or to exercise any of the rights in section 11, write to customercare@lateliernawbar.com.
2. What this policy covers
This policy covers personal data we handle when you browse this site, place an order, open an account, join our mailing list, book an appointment, commission a bespoke piece, send a piece for repair, or contact us by email, telephone or social media. You can browse most of this site without telling us who you are; we collect personal data only when you give it to us, or when it is created automatically by your visit, as described below.
3. The personal data we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Identity and contact | Name, salutation, email address, mobile number, delivery and billing address, preferred language | You, at checkout, on registration or when you book an appointment |
| Order and transaction | Pieces purchased, order and invoice numbers, delivery status, exchanges, repairs and store credit | Created when you order; couriers update the delivery status |
| Payment | Payment method, the last four digits and card type, authorisation result. We never receive or store your full card number | Our licensed payment providers |
| Personalisation | Engraving text, initials, dates, ring and bangle sizes, design notes for a commission | You, when you personalise or commission a piece |
| Communications | Emails, WhatsApp and live-chat messages, call notes, appointment records, reviews | You, when you contact us |
| Technical and usage | IP address, device and browser type, pages viewed, referring site, time zone, cookie identifiers | Collected automatically by your visit — see section 5 |
| Preferences | Wishlist, saved addresses, newsletter and marketing choices | You, through your account and consent choices |
We do not seek sensitive personal data, and we ask you not to send it to us. Please do not include national-identity numbers, health information or anything of that nature in a message or an engraving instruction unless we have specifically asked for it — for example, an identity document required to release a high-value order at the boutique.
4. Why we use it, and our lawful basis
The Personal Data Protection Law requires us to have a lawful basis for every use of your personal data. Ours are set out below.
| What we do | Data used | Lawful basis |
|---|---|---|
| Take, make, pack and deliver your order; arrange collection in boutique | Identity and contact, order, payment, personalisation | Performance of our contract with you |
| Handle exchanges, store credit, repairs, resizing and aftercare | Order, identity and contact, communications | Performance of our contract with you |
| Issue tax invoices and keep accounting records | Identity and contact, order, payment | Compliance with a legal obligation (Saudi tax and commercial legislation) |
| Answer your messages, run appointments and advise on a commission | Communications, identity and contact, preferences | Performance of our contract, or our legitimate interest in serving our clients well |
| Detect and prevent fraud, secure the site and our systems | Technical and usage, order, payment | Our legitimate interest in protecting the house and its clients, and legal obligation |
| Improve the storefront, our collections and our service through analytics | Technical and usage, order (aggregated wherever possible) | Your consent for non-essential cookies; otherwise our legitimate interest |
| Send newsletters, invitations and news of new collections | Identity and contact, preferences, order history | Your consent, which you may withdraw at any time |
| Advertise to you on other platforms and measure those campaigns | Technical and usage, cookie identifiers | Your consent |
| Establish, exercise or defend a legal claim | Whatever is strictly relevant | Our legitimate interest, and legal obligation |
Where we rely on your consent, you may withdraw it at any time and we will stop that use — withdrawing consent does not affect what we did lawfully before. Where we rely on a legitimate interest, we have satisfied ourselves that it does not override your rights, and you may ask us to explain our reasoning.
5. Cookies and similar technologies
Cookies are small files placed on your device. We use them to keep your bag and your session working, to understand how the storefront is used, and — only with your consent — to measure and target advertising.
| Type | What it does | Can you refuse it? |
|---|---|---|
| Essential | Keeps you signed in, remembers your bag, your language and your delivery country, and protects the checkout | No — the site cannot work without them |
| Performance and analytics | Tells us which pages and pieces are viewed, and where the storefront is slow or confusing | Yes |
| Functionality | Remembers preferences such as your wishlist, recently viewed pieces and ring size | Yes |
| Marketing | Measures our campaigns and shows you our pieces on other platforms | Yes |
You can block or delete cookies at any time in your browser settings, and where a consent banner is shown on this site you can change your choice through it. Refusing non-essential cookies does not stop you shopping with us; it only makes the site less tailored to you. If you would like us to stop using analytics or advertising cookies for you, write to customercare@lateliernawbar.com and we will act on it.
6. Marketing and how to stop it
We write only to those who have asked to hear from us — a few times a year, about new collections, boutique events and the occasional private appointment. Every message carries a one-click unsubscribe, and you can change your preferences in your account or by writing to customercare@lateliernawbar.com. Unsubscribing from marketing does not stop the messages we must send about an order you have placed — the confirmation, the dispatch note and the invoice.
7. Who else sees your data
We do not sell or rent personal data, and we never will. We share it only with those who need it to serve you, under written agreements that oblige them to protect it and to use it for nothing else:
- Couriers — SMSA Express and Aramex receive your name, address and mobile number so that they can deliver and keep you informed.
- Payment providers — licensed processors and the deferred-payment providers Tabby and Tamara, where you choose them, handle the transaction and their own checks.
- Our atelier and our house in Beirut — order and personalisation details travel to the workshop that makes and repairs your piece.
- Technology providers — hosting, email, analytics, customer-service and marketing platforms that run the storefront on our behalf.
- Professional advisers and authorities — auditors, lawyers and the competent Saudi authorities where the law obliges us, including tax and customs authorities.
If the house is ever reorganised, sold or merged, personal data may transfer with the business. We would post a notice on this page, and the new controller would remain bound by this policy until it published its own.
8. Transfers outside the Kingdom
Some of your personal data leaves Saudi Arabia. Our atelier and design studio are in Beirut, Lebanon, and some of the technology providers that run this storefront host data elsewhere. We transfer only what is necessary — and never more than the purpose requires.
Every such transfer is made in accordance with the Personal Data Protection Law and the Regulation on Personal Data Transfer outside the Kingdom: to a country recognised as providing an adequate level of protection, or, where none applies, under appropriate safeguards and a transfer-risk assessment, with the contractual commitments the Regulation requires. You may ask us for further detail about a specific transfer at any time.
9. How long we keep it
We keep personal data only for as long as the purpose that justified collecting it lasts, and then delete or anonymise it.
- Account data — for as long as your account is open, and for a short period afterwards in case you return.
- Order, invoice and tax records — for the period that Saudi tax and commercial legislation requires us to keep them, even if you close your account.
- Personalisation and commission records — for the lifetime of the piece, so that we can repair, resize or reproduce it for you years later.
- Marketing consent records — until you withdraw consent, plus a record of the withdrawal itself so that we honour it.
- Analytics and cookie data — for the lifetime of the cookie concerned, and in aggregate form afterwards.
10. How we protect it
The site runs over encrypted connections, access to client records is limited to the people who need it and logged, and payment details are handled by licensed providers rather than by us. No system can be guaranteed absolutely secure. Should a breach occur that is likely to harm you or your data, we will notify the competent authority and, where the law requires, you, within the periods set by the Personal Data Protection Law.
11. Your rights under the PDPL
The Personal Data Protection Law gives you the following rights over your personal data. They are free to exercise.
- To be informed — to know why we collect your data, how we use it and who receives it. That is what this policy is for.
- To access — to ask whether we hold personal data about you and to see it.
- To obtain a copy — to receive your data in a readable, clear format.
- To correct — to have inaccurate data corrected, incomplete data completed and outdated data updated.
- To destroy — to have your data deleted when it is no longer needed for the purpose we collected it for. We may have to keep records the law obliges us to retain.
- To withdraw consent — at any time, where our use rests on consent.
To exercise any of them, write to customercare@lateliernawbar.com from the email address on your account, telling us which right you wish to use. We may ask for proof of identity so that we do not disclose your data to someone else. We reply within 30 days of receiving a complete request, as the Implementing Regulations require; if a request is complex we will tell you and explain the delay.
12. If you are not satisfied
Please come to us first — write to customercare@lateliernawbar.com and we will look into it properly. If you remain unsatisfied, you have the right to complain to the Saudi Data & Artificial Intelligence Authority (SDAIA), the authority supervising the Personal Data Protection Law, through its channels at sdaia.gov.sa. Complaining to us first does not reduce that right in any way.
13. Children
This storefront is intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, tell us and we will delete it.
14. Automated decisions
We do not make decisions that produce legal effects for you by automated means alone. Automated checks do screen orders for fraud and payment risk; where such a check stops an order, a person reviews it, and you may ask us to explain the outcome and to reconsider it.
15. Changes to this policy
We update this policy when our practices, our providers or the law change. The date at the top of the page always tells you which version you are reading; where a change is material we will say so on the site and, if you have an account, by email.
16. Contact us
-
L'Atelier Nawbar KSA
Riyadh Flagship Store, Via Riyadh Mall
Riyadh, Kingdom of Saudi Arabia - Privacy enquiries customercare@lateliernawbar.com
- Telephone +966 53 995 0306 · Sunday to Thursday, 10:00 – 22:00
Last updated: 13 September 2026. See also our terms and conditions.