Privacy

Speedi is a leading e-commerce platform under Othaim Markets, established to provide customers with the easiest and most convenient shopping experience. Offering a wide variety of products with the best deals, Speedi ensures fast delivery and an exceptional level of service, making online grocery shopping simple and efficient.

By accessing or using Speedi’s services, you acknowledge and agree to the practices described in this Privacy Notice. If you have any inquiries or require further information regarding our privacy practices, you may contact us at the contact details provided below.

Contact Details

  • Involved Department/Team: [Risk and compliance Department]
  • Address: [Riyadh City - Khurais Branch - Al-Andalus District - Building No.: 4452, Postal Code: 13212, Branch No 6957]
  • Phone Number: 00966112547000 EXT [3969]
  • E-mail: info@speedi.sa
  • License or Commercial Register: [1010320848]
  • Date of Last Update The Privacy Policy was last updated on [03/11/2024].

What is the purpose of this Privacy Notice?

This Privacy Notice informs you how Speedi, as the controller of your personal data, collects, manages, protects, and processes your information. It applies to all personal data collected by us in-store, through our website, mobile application, or via other interactions.

This notice is in line with the Kingdom of Saudi Arabia’s Personal Data Protection Law, enacted by Royal Decree No. (M/19) issued on 16/09/2021 and amended by Royal Decree No. (M/148) on 27/03/2023.

Who is the Controller of your Personal Data?

Speedi, a subsidiary of Othaim Markets, is the legal entity responsible for the collection, use, and protection of your personal data. As the data controller, we determine the purposes and means of processing your personal data.

What Personal Data do we collect about you?

At Speedi, we collect data essential for delivering and enhancing our services, which includes:

  • Personal Information: Names, email addresses, phone numbers, and postal addresses.
  • Purchase Details: Purchase history, order details, and payment information.
  • Location Data: We collect device geolocation data and physical addresses.
  • Marketing Preferences: Your preferences regarding receiving promotional communications, including opt-in or opt-out status for receiving marketing emails, SMS, and other promotional notifications.
  • Feedback and Complaints: Information collected from direct customer service interactions, customer surveys, and feedback from social media channels.
  • Security Information: One-Time Password (OTP) data used for secure login and verification processes.
  • Customer Service Interaction Records: Records of communications with our customer service team, including call recordings, emails, and chat logs.

How do we Collect your Personal Data?

At Speedi, we collect personal data through various channels to ensure seamless service delivery and a personalized shopping experience. The methods of data collection include:

  • Direct Interactions: You provide personal data when you create an account, make purchases, communicate with customer support, or interact with us on social media.
  • Automated Technologies: Data such as geolocation and technical information is automatically collected through cookies and similar technologies for app functionality, delivery optimization, and user experience improvement.
  • Third-Party Sources: We may receive your personal data from business partners, external agencies and public sources to facilitate and enhance the services we offer. This includes information received from marketing initiatives, social media comments, and delivery service providers.

How do we use your Personal Data?

We use the personal data collected at Speedi for the following purposes, aimed at enhancing your experience and the efficiency of our services:

  • Account Management: We use your personal information to manage your account, allowing you to place orders, track order history, and update your account settings.
  • Order Fulfilment: We use your transaction details, location data, and personal information to process and fulfil your orders, including payment processing, assigning delivery slots, and ensuring timely delivery.
  • Marketing and Promotional Activities: To send you personalized promotional notifications, offers, and advertisements based on your preferences and previous interactions with the app.
  • Customer Support: Your contact details and customer service interaction records help us address and resolve any complaints or issues you might face, ensuring responsive and effective customer service.
  • Service Improvement and Feedback: We use the information gathered from your feedback and complaints to improve our services and address any concerns raised via direct customer service interactions or our social media platforms.
  • Security and Safety: To ensure the safety of our premises, we utilize CCTV surveillance systems which provide a secure shopping environment and enhance the safety of all our customers.

What are the Legal Bases for Processing your Personal Data?

Our legal bases for processing your personal data include:

  • Consent: We process some of your data based on the consent you provide, such as sending marketing and promotional updates and collecting feedback. You have the right to withdraw your consent at any time.
  • Contractual Necessity: We process your personal data to fulfill our contractual obligations, such as processing your orders, delivering products, and managing your account on the Speedi platform.
  • Legal Obligations: We may also process your data to comply with legal obligations, regulatory requirements and financial regulations.
  • Legitimate Interests: We process personal data based on our legitimate interests in improving our services, enhancing the user experience, and securing our platform. This includes activities such as app testing and development, as well as fraud prevention measures. We ensure that these legitimate interests do not override your privacy rights.

How do we protect your Personal Data?

At Speedi, we are committed to ensuring the security and confidentiality of your personal data. We implement a range of technical and organizational measures designed to protect your data from unauthorized access, alteration, disclosure, or destruction. These include:

Technical Security Measures:

  • Data Encryption: Personal data is encrypted both in transit and at rest using industry-standard encryption protocols. This ensures that unauthorized parties cannot access or read your data.
  • Access Controls: We strictly limit access to personal data to authorized personnel only, based on their role and necessity to engage with the data.
  • Secure Infrastructure: Our network and data storage solutions are protected with industry-standard firewall and antivirus software, alongside intrusion detection systems to prevent unauthorized access.
  • Regular Security Assessments: We conduct periodic security assessments and penetration testing to identify and address potential security vulnerabilities.

Organizational Security Measures:

  • Data Privacy Policies and Training: Our comprehensive data privacy policies are strictly followed by all our employees, ensuring awareness and adherence to the best practices in data privacy. We further support this with regular training sessions on the importance of personal data protection and the implementation of effective security measures.
  • Confidentiality Agreements: All our employees, contractors, and third-party service providers are required to sign confidentiality agreements that bind them to maintain the secrecy and security of all personal data.
  • Physical Security: Our facilities are secured with ID cards, biometrics, and constant surveillance to ensure that only authorized personnel can access data sensitive areas.
  • Vendor Management: Third-party vendors are rigorously screened and bound by contracts that enforce our data protection standards.
  • Incident Response Protocols: A structured incident response protocol is in place, detailing procedures for addressing any data security incidents. This includes immediate actions to manage and contain potential breaches and ensuring proper escalation and response without undue delay.

Who do we share your Personal Data with?

Speedi shares your personal data with specific categories of recipients to facilitate business operations and comply with legal requirements:

Categories of Recipients

  • Service Providers and Professional Partners: We share data with service providers such as delivery companies, payment processors, IT infrastructure providers, as well as professional firms such as law firms and financial auditors who support our business operations.
  • Financial Institutions and Payment Processors: For processing transactions and managing financial operations.
  • Digital Marketing and Advertising Partners: We may share personal data with marketing agencies to improve app usability, target promotional campaigns, and enhance the customer experience.
  • Government and Regulatory Authorities: In certain cases, we are legally required to share your personal data to comply with legal obligations or in response to legal requests.
  • App Development and Maintenance Partners: We may share your data with technical partners involved in app development, testing, and maintenance to ensure our platform operates smoothly and securely.

Safeguards in place to protect your Personal Data

Data shared with third parties is strictly governed by privacy agreements that ensure these parties adhere to confidentiality and data protection standards comparable to those followed by Speedi. We ensure:

  • All third parties are carefully vetted and bound by contractual safeguards such as Data Processing Agreements (DPAs) to ensure data protection.
  • Data transfers are limited to what is necessary for the services they provide.

International Data Transfers

In some cases, Speedi may transfer your personal data outside the Kingdom of Saudi Arabia. These transfers are conducted in compliance with KSA PDPL and are subject to appropriate safeguards.

When transferring data internationally, we ensure that your personal data is protected through safeguards such as:

  • Transfer Impact Assessments (TIAs): Assessing the risks of cross-border data transfers and ensuring compliance with applicable regulations.
  • Standard Contractual Clauses (SCCs): Implementing data protection clauses in contracts with international third parties.
  • Binding Common Rules (BCRs): For internal transfers within the company group across borders.

In cases where data is transferred to countries recognized by the Saudi Data & Artificial Intelligence Authority (SDAIA) as providing an adequate level of data protection, we adhere to the legal frameworks governing such transfers.

How long will your Personal Data be retained by us?

Speedi retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. Here’s how we determine retention periods for different types of personal data:

  • Operational Necessity: We retain your data for as long as needed to provide you with services and to conduct our business operations efficiently.
  • Legal Compliance: Certain types of data are retained for specific periods as required by law or other regulatory guidelines.
  • Marketing and Communications: Data used for marketing purposes is retained until you request that we stop contacting you, opt out from receiving marketing communications, or for as long as required to conduct our marketing activities.

Upon expiration of the retention period, personal data is securely deleted or anonymized, ensuring it can no longer be linked back to an individual.

How Can You Opt-Out of Marketing Communications

All marketing communications we send to you will provide a way for you to withdraw your consent for future marketing. If you no longer wish to receive promotional materials from Speedi, you can opt-out at any time through the app’s settings. This will remove you from our marketing list.

يرجى ملاحظة أنه حتى إذا قمت بإلغاء الاشتراك في الاتصالات التسويقية، فستظل تتلقى رسائل مهمة تتعلق بالعمليات والخدمات، مثل التحديثات حول طلباتك أو الردود على الاستفسارات.

Please note that even if you unsubscribe from marketing communications, you will still receive important operational and service-related messages, such as updates about your orders or responses to inquiries.

How do we use Cookies?

We utilize cookies on Speedi’s Website and Apps to enhance your online shopping experience, maintain the functionality of our website, and improve our services:

Types of Cookies Used:

  • Analytical Cookies:
    These cookies help us understand how visitors interact with our platform by tracking user activity and site performance. These cookies provide insights into site traffic, user behaviour, and the effectiveness of our marketing campaigns. They allow us to improve the overall functionality and user experience by analysing navigation paths, page views, and session durations.

Data Collected Through Cookies:

  • Browsing Data: Pages visited, session duration, and navigation paths.
  • Device Data: IP address, browser type, operating system, and device information.
  • Interaction Data: Data about how you interact with the website (e.g., links clicked, forms submitted).

Managing Cookie Preferences

You can manage your cookie preferences through your browser settings at any time. Here’s how you can control or opt out of cookies:

  • Consent Management: On your first visit to our website, you will be prompted to accept or reject non-essential cookies. You can change your preferences at any time by accessing the cookie settings available on our website.
  • Browser Settings: Most browsers allow you to refuse cookies or delete cookies through their settings preferences. However, disabling cookies may affect the functionality and services offered on our websites.

What are your Rights regarding the processing of your Personal Data?

At Speedi we respect your privacy and provide you with the ability to exercise them according to the Kingdom of Saudi Arabia's Personal Data Protection Law (KSA PDPL). You are entitled to the following rights under this law:

Right to be Informed

You have the right to be informed about how we collect your personal data, the legal basis for collection and processing, how such data is processed, stored, destroyed, and to whom it will be disclosed. You can access all these details through our Privacy Policy or contact us for further information.

Right to Access to Your Personal Data

You have the right to access your personal data that we hold through means provided by us that allow for automatic access without needing to make a formal request.

Right to Request Access to Your Personal Data

You can request to obtain your personal data held by Speedi at any time and obtain a copy of this data in a clear and readable format.

Right to Correct Personal Data

If you find that any of the personal data that we hold about you is inaccurate, incomplete, or outdated, you have the right to request its correction or update.

Right to Request Destruction of Personal Data

You may request the destruction of your personal data when it is no longer needed for the purposes for which it was collected. We will review such requests and take appropriate action, adhering to legal and regulatory requirements.

Right to Withdraw Consent

You may withdraw your consent for the processing of your personal data at any time, unless there is a legal basis that requires otherwise. This withdrawal will not affect the lawfulness of processing based on your consent before its withdrawal.

Right to File a Complaint

If you believe that Speedi has not complied with the Personal Data Protection Law, you have the right to file a complaint with us. If you are not satisfied with the outcome, you may escalate your complaint to the Saudi Data & Artificial Intelligence Authority (SDAIA).

How Can You Exercise Your Rights?

To exercise any of these rights, please contact us via info@speedi.sa. We may request specific information from you to help us confirm your identity and facilitate your right to access your personal data (or to exercise any of your other rights).

You will not be required to pay any fees in return for exercising your rights. In case of submitting a request for exercising your rights, you will receive a response within 30 days from the date of receipt of your request.

What if you have questions or want further information?

For further details regarding the processing of your Personal Data and how to exercise your rights, you can contact the Personal Data Protection Officer at Speedi using the below mentioned contact details.

Personal Data Protection Officer

  • Name: Zaina Alsuwaylih
  • البريد الإلكتروني: dataprotection@othaimmarkets.com
  • Email: dataprotection@othaimmarkets.com.
  • Phone: 00966112547000 EXT 3969
  • Complaint or Objection Filing Method If you have any concerns, or if we do not comply with the Personal Data Protection Law, you can file a complaint with our IT Department using the following channel:
    Email: info@speedi.sa
  • SDAIA Address: Kingdom of Saudi Arabia, Riyadh
    SDAIA Website:
    Saudi Data & AI Authority (sdaia.gov.sa)
    National Data Governance Platform “DGP” (dgp.sdaia.gov.sa)

Changes in Privacy Notice

Speedi reserves the right to update or modify this Privacy Notice at any time to reflect changes in our data processing practices, changes in law, or adjustments in our business operations.