Privacy Policy | Bloomingdale's KSA - Your Data Privacy Matters

www.Bloomingdales.sa including the mobile application (together the "Website") is owned and operated by Nibras Al Arabia LLC trading as Bloomingdale’s, in the Kingdom of Saudi Arabia (“we”, “us” “our” or “Nibras”). Nibras is a limited liability company incorporated under the laws of the Kingdom of Saudi Arabia, with commercial license number 4030181765 and with its registered office at Jeddah, Building Number 7436 King Abdulaziz Branch Road, Ash Shati District, Postal Code 23612, Kingdom of Saudi Arabia. Nibras is part of Al Tayer Group.

By visiting the Website or otherwise supplying information to us or any third party acting on our behalf, you are consenting to the practices described in this Privacy & Cookie Policy. Please note that our Privacy & Cookie Policy is updated from time to time and that you will be bound by the most recent update of the policy appearing on our Website. It is therefore your responsibility to continue to check our Privacy & Cookie Policy for updates.

We (and our authorized service providers) collect information supplied by you via the Website, other websites operated by us, through interactions with our customer service channels, if you communicate with us by phone, email, social media and/or via our Live Chat feature (where available), when you request to receive marketing or other promotional communications, competition entries, customer surveys, or from third parties authorized to share your information with us.

We and our authorized service providers may collect information even if you are not a registered user or do not place an Order.

The types of information we collect include:

Contact and personal details such as: name, delivery address, phone number, email address, billing and payment information, date of birth, gift recipient details, gender, nationality and personal shopping preferences;
Website statistical information such as: your location, the URL you use to access the Website, browser or device type/unique fingerprint, your computer’s IP address and domain type, cookie information, which pages you visited, search terms you entered, items you clicked on;
transactional information such as: Orders you placed, items you purchased, date and time of your Order as well as Orders you decided not to complete or items you placed in your basket and discarded, preferences you have indicated to us, requested personalization of items;
your account information such as: account credentials (username and password), details of your shopping preferences such as favourite brands and products, dates of payments owed and received, the subscription services you use, or any other information related to your account;
Information from third parties such as: couriers, payment providers or through the Amber Program; and
Information you supply to us via online or offline surveys, competitions or product registration.

Please note that your full payment card details are captured only for the purposes of processing your transaction and are not stored, sold or rented by us. Your full payment card details are not available to our staff. All card transactions are managed by trusted, certified and legally authorized partners who are responsible for ensuring that your payment details remain secure during the payment process.

Where you provide the information of a third party to us, you are confirming that you have their consent to do so.

Data protection law sets out a number of different lawful reasons for which a company may collect and process your personal information. The lawful reasons are:

where we have entered into a contract with you;
where we are legally obligated to;
where we have your consent; and
where we have determined a legitimate interest that does not impact your rights and freedoms and is not contrary to any laws in the Kingdom of Saudia Arabia.

Examples of when we might rely on these lawful reasons include:

Contract:

We use your personal information to process and fulfil your Orders and payments or to give you a refund.

Legal Obligation:

To verify and execute financial transactions you make through the Website, including procuring credit checks or performing fraud detection.
To identify you when you contact us.
To assist the Police and/or other regulatory or government bodies in relation to an investigation by a public authority.
To complete any requests you make regarding your rights in respect to your data (please see the section headed ‘Your Rights’ for more information).
For financial administration.
Where necessary for health and safety purposes.

Consent:

For marketing purposes including communicating promotional information about us, our partners and our websites, through newsletters and re-marketing ads. This is subject to whether you have opted out of receiving such communications. (please see the section headed ‘Contacting Us and Opting Out of Certain Communications’ for more information).
To provide you with a personalized or improved shopping experience.
To enter you into competitions.
To record if you have additional needs due to vulnerable circumstances or need extra support when communicating with us.
To assist you with your customer service queries or provide information you have requested.

Legitimate Interests:

To provide customer support and to respond to, and communicate with you, about your requests.
To provide you with a personalized or improved shopping experience.
To check our records are right and to check every now and then that you’re happy and satisfied (e.g. customer research activities carried out by us or agencies on our behalf such as interview, surveys and observations).
To protect our rights, safety or the safety of others including for preventing fraud and other criminal activity.
For network and information security in order for us to take steps to protect your information against loss or damage, theft or unauthorised access.
For marketing activities (other than where we rely on your consent), such as marketing permissions captured during the course of a sale and personalising marketing messages through social media and other third party platforms;
To monitor how our email marketing campaigns are performing and personalise email content towards you by monitoring email opens and what links, if any, you are clicking within the email.
To ensure a smooth experience on our Website, including making sure our Websites work correctly (more information is available in the section headed ‘Cookies’).
To help us understand more about you as a customer, the products and services you use, the way you use them and how you shop across the company, so we can serve you better.
Improve the content and appearance of the Website(s), and to make sure that content is presented in the most effective manner for you.
To operate, evaluate and improve our business, including the development of new products and services, to determine the effectiveness of our sales, marketing and advertising; and the analysis and improvement of our products, offers, promotions, and Website and other technologies.
To send you claim details as part of fulfilling promotional offers if you have made a qualifying purchase.
To help reduce the overall fraud and credit risk for our customers.

Where we process your information under Legitimate Interest, we will have assessed this processing and balanced it against your rights and freedoms.

We may offer a Live Chat feature to assist you with queries you may have. Where available we may record and store all chat conversations. These transcripts are only accessed for customer service purposes on desktop only.

If you have any queries about this Privacy & Cookie Policy, you can contact us using any of the following methods: by calling us on our number +966115103213 or by filling in the ‘contact us’ form on the Website.

When you first register with us you will be able to choose whether or not to receive marketing communications from us or our carefully selected third parties. Whenever you receive a marketing communication or newsletter from us (which may be by email, SMS, push notification, telephone or direct mail), you will be given an opportunity to unsubscribe. In addition, you can change your marketing preferences at any time by contacting us as described above.

Data protection law specifies that certain types of data (such as a person’s ethnic or tribal origin, religious beliefs, criminal data and health data) known as ‘sensitive data’ requires a higher level of protection. We do not expect to handle any of your sensitive data unless it becomes relevant in our dealings with you, or you volunteer the information. Examples of this might be where you have a medical condition which is relevant to our dealings with you; where you are involved in a medical emergency or accident in a store; if the information is relevant to a legal dispute or complaint; or while addressing criminality impacting our business. On the rare occasions we handle more sensitive information, we only do so as permitted by applicable law.

Al Tayer Group is a United Arab Emirates (“UAE”) based business and so your personal information will be predominantly handled by us in the UAE. From time-to-time we may also transfer your personal information (for example, to our suppliers, service providers or other companies within Al Tayer Group) out of the territory in which the data was collected and also outside of the UAE for the purposes described in this Privacy & Cookie Policy.

Unless otherwise allowed by data protection law, where we transfer information to a country not recognised by the regulator as having adequate levels of protection, we will put in place appropriate safeguards to ensure your information is protected in the same way as if it was being used in the territory in which it was collected. This can include putting in place contractual protections (known as standard contractual clauses) and other organisational or technical measures designed to safeguard information. We require all third parties to whom any personal data is disclosed to keep it secure, treat it as confidential and use it only for the purposes agreed with us. In submitting your data to us and using our Website, you acknowledge and agree to the international transfer of your information in line with this Privacy & Cookie Policy.

Whenever we collect or process your personal data, we’ll only keep it for as long as is necessary for the purpose for which it was collected.

We will keep your personal information for as long as you're a customer. After you stop being a customer, in most cases, we will keep your information for up to 7 years after the last time you interacted with us.

We may keep your information for longer than 7 years if we cannot delete it for legal, regulatory or technical reasons. We may also need to keep it in order to help support product recalls or safety notices. If we do, we will make sure that your privacy is protected and only use it for those purposes, we may also anonymise your data.

You have the right to request the following:

Access to the data that we hold about you.
To obtain a copy of your data in a readable and clear format.
The correction of your data when incorrect, out of date or incomplete.
The deletion of the data we hold about you, in specific circumstances; for example, when you withdraw consent or object, and we have no legitimate overriding interest, or once the purpose for which we hold the data has come to an end.
That we stop any consent-based processing of your personal data after you withdraw that consent.

You can contact us to request to exercise these rights at any time by emailing us at Bloomingdales_KSA_datarequest@altayer.com. Before providing personal information to you or another person on your behalf, we may ask for proof of identity and sufficient information about your interactions with us so that we can locate your personal information. Except in exceptional cases, we will respond to you within 30 days after we have received this information or, where no such information is required, after we have received your request. If we choose not to action your request, we will explain the reasons for our refusal.

We know how much data security matters to all our customers and we take our responsibility to protect your information seriously.

We protect your information in a number of ways, which includes storing your information on secure servers and encrypting payment transactions carried out through our Website using Secure Socket Layer (SSL) technology. We have implemented various steps to safeguard the integrity of our information technology infrastructure, including by implementing authentication, monitoring, auditing, and encryption technology. Security measures have been integrated into the design, implementation, and day-to-day operations of the Website as part of our continuing commitment to the security of electronic content and the electronic transmission of information.

It is your responsibility to keep any Website passwords or login codes issued to or chosen by you, confidential.

Despite such efforts, generally the transmission of information via the internet is not completely secure and its security can never be guaranteed. Any transmission of data via our Website is therefore carried out at your own risk.

Our Website uses first party cookies (very small files that are sent by us to your computer or other access device) and other similar technologies which we can access when you visit our Website in the future. We may also use third party cookies.

There are five types of cookies:

Website Functionality Cookies

These cookies enable you to browse the Website and use our features such as shopping baskets.

Website Analytics Cookies

We use these cookies to measure and analyze how our customers use the Website. This allows us to continuously improve our Website and your shopping experience.

Customer Preference Cookies

When browsing or shopping online, the Website will remember your preferences (for example your user name, language or location). This makes your browsing experience simpler, easier and more personal to you.

Targeting Cookies or Advertising Cookies

These cookies are used to deliver adverts relevant to you. In addition, they limit the number of times you see an advertisement as well as helping us measure the effectiveness of our advertising campaigns.

Third-Party Service Provider Cookies

We may work with third party companies whom we authorize to place third-party cookies, web beacons, or similar technologies for storing information on the Website. These service providers help us to provide you with a better, faster, and safer experience. These service providers may use these technologies in the ways described above and in addition may help us and you to avoid fraud. By using our Website you agree that we and they can place these types of cookies on your device and access them whenever you visit the Website or other websites operated by us. If you want to delete any cookies that are already on your computer, please refer to the help and support area on your internet browser for instructions on how to locate the file or directory that stores cookies. Please note that by deleting our cookies or disabling future cookies you may not be able to access certain areas or features of our Website.

Third Party Websites

This Privacy & Cookie Policy does not apply to third party websites to which the Website may link and we are not responsible for the privacy and cookie practices of those websites or for any information you submit to those websites via the Website. Please be sure to read their privacy and cookie policies separately to ensure you are comfortable. If you are a Google and/or Facebook member, then data collected via the Google and/or Facebook websites will be subject to the Terms and Conditions of the Google and/or Facebook website (as applicable) save that we may combine your Google and/or Facebook data with data collected through the Website.