Privacy Policy

Last Updated: January 2026  |  Effective Date: January 2026

D&M Kitchen, operated by Warda Trading Est. (CR: 1010156103, VAT: 314106864900003), is committed to protecting the privacy and personal data of our customers and website visitors. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Saudi Arabia Personal Data Protection Law (PDPL) (Royal Decree No. M/19, 1443H / 2021G) and its implementing regulations.

By using our website or contacting us, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller Identity

The data controller responsible for your personal data is:

• Business Name: D&M Kitchen – Warda Trading Est.
• Commercial Registration (CR): 1010156103
• VAT Registration: 314106864900003
• Address: Udi Bin Amr, Industrial District, Riyadh 12871, Saudi Arabia
• Email: info@dandmkitchen.com
• Phone: 050-627-3619

2. Personal Data We Collect

We may collect the following types of personal data when you use our website or contact us:

• Contact information: First name, last name, email address, phone number
• Communication content: Subject and message text submitted via our contact form
• Technical data: Browser type, IP address, and pages visited (collected automatically for website security and analytics)

We do not collect sensitive personal data (as defined under the PDPL) and do not collect data from individuals under the age of 18.

3. Purpose and Legal Basis for Processing

We process your personal data for the following purposes:

• Responding to inquiries: To reply to messages submitted through our contact form — based on your consent and our legitimate interest in providing customer service.
• Project consultation: To schedule and carry out kitchen design consultations, measurements, and quotations — based on the performance of a pre-contractual or contractual relationship.
• Legal compliance: To comply with applicable Saudi laws and regulations, including tax and commercial registration requirements.
• Website security: To detect and prevent unauthorized access or fraud — based on our legitimate interests.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data to third parties. We may share your data only in the following limited circumstances:

• Service providers: We use Formspree (formspree.io) to process contact form submissions. Formspree processes data on our behalf and is bound by its own privacy policy.
• Legal obligation: We may disclose data when required by Saudi law, court order, or governmental authority.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy:

• Contact form submissions are retained for up to 12 months for follow-up and service delivery purposes.
• Business records (invoices, contracts) are retained for a minimum of 10 years as required by Saudi commercial regulations.

After the applicable retention period, personal data is securely deleted or anonymized.

6. Your Rights Under the PDPL

Under Saudi Arabia's Personal Data Protection Law, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data where there is no lawful reason for continued processing.
• Right to Restrict Processing: Request that we limit the processing of your data in certain circumstances.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@dandmkitchen.com. We will respond within 30 days of receiving your request. We may need to verify your identity before processing your request.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. Our website uses HTTPS encryption for all data transmissions. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

8. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to improve your browsing experience and analyze website traffic. We use:

• Essential cookies: Required for basic website functionality (e.g., language preference stored in localStorage).
• Analytics: We do not currently use third-party analytics services that track individual visitors across sites.

You may disable cookies through your browser settings; however, some features of the website may not function correctly as a result.

9. International Data Transfers

Your personal data may be processed by Formspree's servers, which may be located outside Saudi Arabia. Any such transfer will only occur where adequate safeguards are in place, in accordance with the PDPL's requirements for cross-border data transfers.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated policy will be posted on this page with a revised "Last Updated" date. We encourage you to review this page periodically.

11. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

• Email: info@dandmkitchen.com
• Phone: 050-627-3619
• Address: Udi Bin Amr, Industrial District, Riyadh 12871, Saudi Arabia

You also have the right to lodge a complaint with the National Data Management Office (NDMO) of Saudi Arabia if you believe your data protection rights have been violated.

Back to Home    Contact Us