Privacy Policy

1. Our commitment

EYEMOO respects your privacy and handles your personal data in line with Saudi Arabia's Personal Data Protection Law (PDPL). This policy explains what data we collect, why, and how we protect it.

2. Data we collect

• Contact and order details: name, mobile number, email, delivery address, and order and invoice details.
• Prescription: your eye power and any prescription photo you provide. We treat this as sensitive data and use it only to make your glasses.
• Usage data: such as pages visited, device and browser type, to improve the website.
• Payment: card details are processed directly by the payment provider. We do not store them.

3. Why we use your data

• To fulfil your order, make and deliver your lenses, and issue your invoice.
• To contact you about your order or prescription.
• To comply with the law, such as ZATCA e-invoicing requirements.
• To send offers only if you agree. You can unsubscribe at any time.

4. Who we share your data with

We never sell your data. We share only what is needed with:

• Lens laboratories and suppliers (your power and order only), to make your glasses.
• Payment and buy-now-pay-later providers (such as Tamara and Tabby).
• Shipping and delivery companies (name, address and mobile number).
• The technology providers we use to run the store, and government authorities when legally required.

5. How long we keep it

We keep your data for as long as it is needed to serve you, and keep invoice and transaction records for the period required by Saudi law.

6. Your rights

• Access your data and get a copy of it.
• Correct inaccurate data.
• Ask us to delete your data where it is not legally required.
• Withdraw your consent to marketing messages.

To use these rights, contact sales@eyemoo.sa or message us on WhatsApp.

7. Cookies

We use essential cookies for the website and shopping cart to work, and analytics cookies to count visitors and improve the site. You can control cookies in your browser settings.

8. Protecting your data

We use encrypted connections and secured systems, and limit access to your data to staff who need it to serve you.