Legal

Privacy Policy

Effective date: May 2026 · Prepared in compliance with the Saudi Personal Data Protection Law (PDPL)

1. Introduction

Ygii.ai ("Ygii", "we", "our", or "us") is a corporate gifting platform operating in the Kingdom of Saudi Arabia. We are committed to protecting the privacy and personal data of all individuals who interact with our platform, in full compliance with the Saudi Personal Data Protection Law (PDPL) issued pursuant to Royal Decree No. M/19 (2021), as amended by Royal Decree No. M/148 (2023).

This Privacy Policy explains how we collect, use, store, disclose, and protect your Personal Data when you visit ygii.ai, use our services, or interact with our internal tools.

2. Definitions

The following terms are used in accordance with Article 1 of the PDPL:

Personal Data: Any data that directly or indirectly identifies a natural person, including name, contact information, identification numbers, and digital identifiers.
Sensitive Data: Data revealing racial or ethnic origin, religious or political beliefs, health data, biometric data, genetic data, or criminal records.
Processing: Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, or destruction.
Controller: Ygii.ai, which determines the purpose and manner of processing Personal Data.
Data Subject: The individual whose Personal Data is being processed.

3. Data We Collect

We collect the following categories of Personal Data:

Identity and contact information: name, email address, phone number, and job title.
Business information: company name, CR number, and industry.
Usage data: pages visited, interactions with our platform, browser type, and IP address.
Order and transaction data: product selections, order history, and billing details.
Communications: messages sent through our WhatsApp ordering system or contact forms.

We do not collect Sensitive Data as defined under Article 1 of the PDPL unless strictly necessary and with your explicit consent.

4. Legal Basis for Processing

In accordance with Articles 5 and 6 of the PDPL, we process your Personal Data on the following legal bases:

Your consent, which you may withdraw at any time.
Performance of a contract to which you are a party, or pre-contractual steps taken at your request.
Compliance with a legal obligation applicable to Ygii.ai under Saudi law.
Legitimate interests pursued by Ygii.ai, provided these do not override your rights and interests, and no Sensitive Data is involved.

5. Purpose of Data Collection

In accordance with Articles 10 and 11 of the PDPL, we collect Personal Data only for specific, clear, and lawful purposes, including:

Processing and fulfilling product orders and quotations.
Communicating with you about your orders, account, or inquiries.
Improving our platform, products, and services.
Sending relevant marketing communications (with your prior consent, as required by Article 26 of the PDPL).
Complying with legal and regulatory obligations.

6. Your Rights as a Data Subject

Under Article 4 of the PDPL, you have the following rights:

Right to be informed: You have the right to know the legal basis and purpose for which your Personal Data is collected.
Right of access: You may request access to your Personal Data held by us.
Right to obtain a copy: You may request a readable copy of your Personal Data.
Right to correction: You may request that inaccurate or incomplete data be corrected or updated.
Right to erasure: You may request that your Personal Data be destroyed when it is no longer needed for its original purpose.

To exercise any of these rights, please contact us at: privacy@ygii.ai. We will respond within the timeframes prescribed by the PDPL Regulations.

7. Data Retention

In accordance with Articles 11 and 18 of the PDPL, we retain Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Once the data is no longer needed, we will destroy it in a manner that renders it unreadable and irrecoverable.

8. Data Disclosure

We will not disclose your Personal Data to third parties except in the circumstances permitted under Article 15 of the PDPL, including:

With your consent.
To service providers acting as processors on our behalf, under strict confidentiality obligations.
When required by a Public Entity for security, judicial, or public interest purposes.
When necessary to protect public health or safety.

We do not sell your Personal Data to third parties.

9. Cross-Border Data Transfers

Any transfer of Personal Data outside the Kingdom of Saudi Arabia will be conducted in compliance with Article 29 of the PDPL. Such transfers will only occur where the transfer serves a legitimate purpose recognised by law, the receiving country provides an adequate level of data protection equivalent to that guaranteed by the PDPL, and the transfer is limited to the minimum amount of data necessary.

10. Data Security

In accordance with Article 19 of the PDPL, we implement appropriate organisational, administrative, and technical measures to protect your Personal Data from unauthorised access, disclosure, alteration, or destruction. In the event of a data breach that may harm you, we will notify both the Competent Authority and you as required under Article 20 of the PDPL.

11. Marketing Communications

In accordance with Articles 25 and 26 of the PDPL, we will only send you marketing communications with your prior consent. Each communication will include a clear and accessible mechanism for you to opt out at any time.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify you through our platform or by email. Continued use of our services after such notice constitutes your acceptance of the updated policy.

13. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your Personal Data, please contact our Data Protection Officer:

Email: hello@ygii.ai
Address: Riyadh, Kingdom of Saudi Arabia
Website: www.ygii.ai