Privacy Policy

How we collect, use, and protect your personal information.

Our promise

Blossom Wings is a brand built around personal care — and personal care begins with your privacy. We collect only the information we need to serve you. We never sell your data, and we give you full control over how your information is used.

This Privacy Policy explains what we collect, why we collect it, how we use it, and the rights you have over your information. It applies to everyone who visits blossomwings.com, places an order, signs up for our newsletter, or interacts with us through any of our channels.

If you have any questions, email us at privacy@blossomwings.com or WhatsApp +966 50 516 9433.

Who we are

Blossom Wings is operated by:

  • Legal entity: Barq AlMada Company
  • Commercial Registration (CR): 7054059360
  • VAT Number: 314731788300003
  • Registered address: 2999 Imam Faisal Bin Turki Bin Abdullah, Al Dirah 7652, Riyadh, Kingdom of Saudi Arabia
  • Email: privacy@blossomwings.com
  • WhatsApp: +966 50 516 9433

For the purposes of Saudi PDPL, GDPR, and CCPA, Blossom Wings is the Data Controller of your personal information.

Information we collect

We collect three types of information: information you give us directly, information we collect automatically, and information we receive from third parties.

Information you give us directly

  • Name, email address, phone number, shipping and billing addresses (when you place an order or create an account).
  • Payment card details (processed directly by our payment providers — we never see or store full card numbers).
  • Date of birth (only if you choose to share it for birthday rewards or age-verification purposes).
  • Customer service messages, including any details you choose to share via WhatsApp, email, or our contact form.
  • Marketing preferences and consent signals.
  • Reviews, photos, or feedback you submit voluntarily.

Information we collect automatically when you visit our site

  • Device information: IP address, browser type, operating system, screen size, device type.
  • Usage data: pages visited, time spent, links clicked, referring website, search terms used on our site.
  • Location: approximate location based on IP address (city/country level — we do not track precise GPS location).
  • Cookies and similar technologies (see the Cookies section below).

Information we receive from third parties

  • Payment confirmation and fraud-screening data from our payment providers (Mada, Apple Pay, Visa, Mastercard).
  • Shipping status updates from our courier partners.
  • Aggregated audience insights from advertising platforms (Meta, TikTok, Google) — never tied to your individual identity.
  • Information from social media platforms when you interact with our profiles or click on our ads.

How we use your information

We use your information for the following purposes only:

  • To process and deliver your orders, including handing your shipping details to our courier.
  • To communicate with you about your orders, returns, and customer service inquiries.
  • To send marketing communications (newsletters, promotions, product updates) — only with your explicit consent, and you can opt out at any time.
  • To improve our products, website, and customer experience.
  • To prevent fraud, security incidents, and unauthorized transactions.
  • To comply with legal obligations under Saudi law, tax authorities, and any applicable regulations.
  • To run anonymized analytics that help us understand how customers use our site.

Legal basis for processing (GDPR)

If you are a resident of the European Economic Area or the United Kingdom, we rely on the following legal bases:

  • Contract: To process your order and deliver products you've purchased.
  • Consent: To send marketing communications, set non-essential cookies, and use your data for advertising.
  • Legitimate interests: To improve our products and services, prevent fraud, and run our business — balanced against your rights.
  • Legal obligation: To meet tax, accounting, and regulatory requirements.

Your rights under Saudi PDPL, GDPR, and CCPA

Regardless of where you live, we honour the following rights for all customers:

  • Right to access: Request a copy of the personal information we hold about you.
  • Right to correction: Ask us to correct inaccurate or incomplete information.
  • Right to deletion: Ask us to delete your personal information, subject to legal retention requirements.
  • Right to object: Object to specific uses of your data, including direct marketing.
  • Right to restrict processing: Ask us to pause processing of your data while a request is reviewed.
  • Right to data portability: Receive your data in a portable format you can transfer elsewhere.
  • Right to withdraw consent: Withdraw any consent you previously gave, at any time.
  • Right to opt out of sale (CCPA): We do not sell your personal information. If this ever changes, California residents will be given a clear opt-out.
  • Right to non-discrimination (CCPA): We will never charge you more or give you worse service for exercising your rights.

To exercise any of these rights, email privacy@blossomwings.com or WhatsApp us. We respond within 30 days, often much sooner. If you're not satisfied with our response, you have the right to lodge a complaint with the Saudi Data and AI Authority (SDAIA), or your local data protection authority.

How we share your information

We never sell your personal information. We share it only with the following categories of trusted partners, and only as needed to operate our business:

  • Payment processors (Mada, Apple Pay, Visa/Mastercard networks, Stripe/Checkout.com or similar) to process transactions.
  • Shipping and courier partners (e.g. Aramex, SMSA) to deliver your orders.
  • Email and SMS marketing platforms (Klaviyo) to send communications you've consented to.
  • Analytics providers (Google Analytics 4) to understand site performance, in aggregated form.
  • Advertising partners (Meta, TikTok, Google) to deliver and measure ads — based on your cookie consent.
  • Customer service tools to manage your inquiries efficiently.
  • Hosting and infrastructure providers (Shopify) to operate our website securely.
  • Legal, accounting, and tax advisors when required by law or to protect our rights.

We sign Data Processing Agreements with all partners and require them to protect your data to the same standards we do.

International data transfers

Some of our partners (Shopify, Klaviyo, Google, Meta) are based outside Saudi Arabia. When your data is transferred internationally, we rely on standard contractual clauses, adequacy decisions, or your explicit consent — whichever applies under Saudi PDPL and GDPR. If you'd like more detail on a specific transfer, email privacy@blossomwings.com.

How long we keep your data

  • Order and customer data: 7 years (required by Saudi tax and commercial law).
  • Marketing data: Until you unsubscribe or withdraw consent, plus a short period for compliance records.
  • Website analytics: 14 months for individual data, longer for fully anonymized aggregate data.
  • Customer service records: 3 years from your last interaction.

How we protect your data

We use industry-standard safeguards to protect your information:

  • HTTPS/TLS encryption across our entire website.
  • PCI-DSS compliant payment processing — we never store full card numbers on our servers.
  • Access controls so only authorized team members can view customer data.
  • Regular security reviews and updates of our systems and partners.

If a security incident ever affects your data, we will notify you and the relevant authorities within 72 hours, as required by law.

Cookies and tracking technologies

We use cookies and similar technologies to make the site work, understand how it's used, and (with your consent) personalize your experience and serve relevant advertising.

Strictly necessary cookies (always active)

Required for the site to function — shopping cart, checkout, security. You cannot opt out of these.

Analytics cookies (require your consent)

Google Analytics 4 helps us understand how visitors use the site so we can improve it. Aggregated and anonymized.

Marketing cookies (require your consent)

Meta Pixel, TikTok Pixel, and Google Ads cookies allow us to show you relevant ads on those platforms and measure their effectiveness. Klaviyo cookies help us personalize email and SMS communications you've subscribed to.

You can manage your cookie preferences at any time through the cookie banner on our site, or by adjusting your browser settings. For detailed information about each cookie we use, see our Cookie Policy.

Marketing communications

We only send marketing emails and SMS to people who have explicitly opted in. Every marketing message includes a one-click unsubscribe link, and you can also email privacy@blossomwings.com to be removed from all marketing lists immediately.

Transactional messages (order confirmations, shipping updates, return confirmations) are not marketing — we send these even if you haven't opted into marketing, because they relate directly to your purchase.

Children's privacy

Our products are intended for use by women of menstruating age. We do not knowingly collect personal information from anyone under the age of 13. If you believe a child under 13 has provided us with personal information, please contact privacy@blossomwings.com and we will delete it.

For users between 13 and 18, we recommend the involvement of a parent or guardian when creating an account or making a purchase.

Changes to this Privacy Policy

We may update this Privacy Policy as our business evolves or as laws change. When we make material changes, we'll notify you by email (if we have your email) or by a prominent notice on the website. The 'Last updated' date at the top will always reflect the most recent revision.

Contact us about privacy

Questions, requests, or concerns about how we handle your information:

Chat with us