Privacy policy

Last updated: 16 October 2026

This is an English translation for convenience. In case of any conflict between the English and Arabic versions, the Arabic version prevails.

“Alsouk Alkabir” is a platform provided by Voltenda Co (VOLTENDA CO, Unified National Number 7051833072) (“Voltenda”, “we”) through its brand “Tashfeer Agency” (“Tashfeer”) to merchants and business owners. It gives every merchant an order website in their own name and an app where they receive the requests their ads bring in. This policy explains what personal data we handle, why, who we share it with, how we protect it, and your rights over it, under the Saudi Personal Data Protection Law and its regulations.

1. Who does this policy cover?

• Merchants subscribed to the platform, and the team members they add.
• Visitors to this page (alsoukalkabir.com) and anyone who sends a request through “Get your platform”.
• Merchants' customers who send requests from merchant websites hosted on the platform. Here the merchant is responsible for its customers' data (the controller), and Tashfeer processes it on the merchant's behalf and only on its instructions (the processor). Every merchant website has its own short privacy page.

2. What data do we collect?

a) Merchant data

• Business name, owner's name, mobile number (for login by WhatsApp code), city and field.
• Your Google account email if you choose to sign in with Google as a backup (Google gives us only your email after your consent, never your password).
• The website content you add yourself: logo, photos, services, reviews and order form questions.
• Usage logs: login times, IP address and important actions (such as changing a customer's status), for security.

b) Data from anyone who sends a request through “Get your platform”

Business name, mobile number, city, field, your answers to the form questions, and how you reached the page (such as the name of an ad campaign).

c) Merchants' customer data (on the merchant's behalf)

Name, mobile number, the service requested, answers to the merchant's questions, the ad source (platform and campaign), request date, and the merchant's notes and request status.

d) Technical data

IP address and browser type, used to stop automated requests and fraud and to protect the service. If you turn on mobile notifications, we keep the subscription ID your browser gives us, only to send the notification.

3. Why do we use it? (purposes and legal basis)

We do not use data for automated decisions that affect you, and we do not send you marketing messages without your consent.

4. Cookies

We use only necessary cookies: the login session cookie in the merchant app (encrypted and readable only by the server), and a temporary ten-minute cookie while signing in with Google to protect you from fraud. Cloudflare Turnstile uses limited technical data to check that the sender is a human, not a bot.

On this page (alsoukalkabir.com) we use ad measurement tools from the platforms we advertise on, such as Meta (Facebook and Instagram), Snapchat, TikTok and Google. These tools store cookies in your browser that tell the platform your visit or request came from an ad, so we know which of our ads are useful. We never send them your name, mobile number or answers — only that a request was made. We also use Microsoft Clarity to understand how the page is used (where visitors tap and how far down they get), and what you type in the request form is hidden and never reaches it. We do not use these tools inside the merchant app. You can block these cookies in your browser settings, or in the ad settings of your account on the platform itself.

5. Who do we share it with?

We do not sell or rent data. We share it only with service providers that work on our behalf, and only as much as needed:

• Google Cloud: hosting the servers, database and backups.
• Cloudflare: delivering and protecting the websites (Turnstile), and storing images.
• Meta (WhatsApp Business): sending login codes and weekly reports to the merchant.
• Google: only when you choose to sign in with Google.
• Ad platforms and Microsoft Clarity: for visitors to this page only, as in section 4.
• Your browser's notification service (such as Google or Apple): to deliver the new-request notification to your phone; the content is end-to-end encrypted.

We may disclose data if a competent official authority requests it under the applicable laws.

6. Where is the data stored?

The database is stored on Google Cloud servers in the Gulf region (Doha), with a plan to move it to the Dammam region inside Saudi Arabia. Website traffic passes through Cloudflare's global network. Whenever data is transferred outside the Kingdom, we follow the controls set out in the law and its regulations, and require the provider to maintain an adequate level of protection.

7. How do we protect it?

• All connections are encrypted (HTTPS), and the database and backups are encrypted at rest.
• Each merchant's data is isolated in the database itself, so no merchant can reach another's data.
• No passwords: you sign in with a temporary code that expires within 5 minutes, or with Google, and login codes are stored hashed and cannot be recovered.
• The Tashfeer team looks at a merchant's customer data only when needed for technical support, read-only, and every access is logged.
• Continuous monitoring of the service, and daily backups.

If a data breach affects your data, we notify the competent authority and you, as the law requires.

8. How long do we keep it?

• Merchant and customer data: for the length of the subscription, then deleted within 90 days of its end, unless the merchant asks to export it first.
• “Get your platform” requests that did not become a subscription: deleted within 12 months.
• Security logs: up to 12 months. Temporary login codes expire within minutes and cannot be used afterwards.
• Backups are replaced on a rolling basis within 7 days.

9. Your rights

Under the Personal Data Protection Law, you have the right to:

• Be informed of how and why your data is collected (which is what this page is for).
• Access your data and get a copy of it.
• Correct any inaccurate or incomplete data.
• Have your data destroyed when it is no longer needed.
• Withdraw your consent at any time, for example by unlinking your Google account in “My page”.
• File a complaint with the competent authority (the Saudi Data and AI Authority, “SDAIA”).

If you are a customer of one of the merchants, contact the merchant first (their details are on their website); if they don't respond, we will help. We reply to requests within no more than 30 days.

10. Children

The platform is meant for business owners, and we do not knowingly collect data from anyone under 18.

11. Changes to this policy

We may update this policy and show the date of the last update at the top of the page. If a change is significant, we tell merchants through the app or WhatsApp before it takes effect.

12. Contact us

For any question or request about your data, send us a message from the contact form on the home page and we will contact you on your mobile. Responsible party: Voltenda Co (VOLTENDA CO), Unified National Number 7051833072, Kingdom of Saudi Arabia, which provides the platform through its brand “Tashfeer Agency”. Email: info@tshfeer.net.