Legal
Privacy Policy
Who we are
Zain Group (“Zain”, “we”, “us”) is a marketing agency group based in Riyadh, Saudi Arabia, operating through Zain Studio, Zain Growth and Zain Labs. The website and our Storelens software-as-a-service platform are operated by Zain Growth Company, a limited liability company registered in the Kingdom of Saudi Arabia (CR No. 7054424721), King Fahd Road, Al Olaya District, Riyadh 12212. This policy explains how we collect, use, share and protect personal data when you visit zain-studio.com, contact us, work with us, or use Storelens. We process personal data in line with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations.
What we collect
- Information you give us — your name, company, email, phone number, the service you are interested in and any details you include in our contact or application forms.
- Business information — details about your brand, marketing performance or store data you choose to share when applying to Zain Labs or engaging our services.
- Usage data — pages visited, device and browser type, approximate location and referring source, collected through cookies and analytics tools.
- Communications — emails, messages and meeting notes exchanged with our team.
How we use your data
- To respond to enquiries and send proposals you request.
- To deliver and manage services under an agreement with you.
- To evaluate Zain Labs partnership applications.
- To improve our website, content and services through aggregated analytics.
- To meet legal, tax and regulatory obligations in Saudi Arabia.
Legal basis
We process personal data on the basis of your consent (for example, when you submit a form), to take steps at your request before entering into a contract, to perform a contract with you, to comply with legal obligations, and for our legitimate interests in operating and improving our business — where those interests are not overridden by your rights.
Cookies and analytics
Our website uses essential cookies to function and analytics cookies (such as Google Analytics) to understand how visitors use the site. Analytics data is aggregated and is not used to identify you personally. You can block or delete cookies through your browser settings; some parts of the site may not work as intended if you do.
Who we share data with
We do not sell personal data. We share it only with service providers who help us operate — such as website hosting (Webflow), email, analytics and CRM providers — under contractual obligations to protect it, and with authorities where required by law. Some providers may store data outside Saudi Arabia; where this happens, we take the safeguards required under the PDPL for cross-border transfers.
Storelens (our SaaS platform)
When you subscribe to or use Storelens, we process:
- Account data: your name, business email, phone number, company, role and login details.
- Billing data: your plan, invoices, billing address and VAT number. Card details are handled by our payment provider; we do not store full card numbers.
- Customer Data: the store, product, order, marketing and analytics data you connect or upload, which may include personal data about your own customers.
- Usage and device data: log data, IP address, browser, and how features are used, for security, support and improving the platform.
- Support communications: messages you send to our team.
For account, billing and usage data, Zain Growth Company is the controller. For Customer Data, you are the controller and we process it on your behalf, only to provide, secure and support Storelens as set out in our Terms and Conditions. We do not sell Customer Data or use it for any other purpose. You are responsible for having a lawful basis under the PDPL for the personal data you bring into Storelens.
Storelens data is hosted in the Kingdom of Saudi Arabia on Google Cloud Platform. Where a service provider supporting the platform, such as payment processing or email delivery, handles data outside Saudi Arabia, we apply the safeguards the PDPL requires for cross-border transfers.
We keep account data and Customer Data for as long as your subscription is active, and delete them within 90 days after your account ends unless the law requires us to keep them longer. Invoices and billing records are kept for the period required by Saudi tax law. Cancellation is covered in our SaaS Cancellation and Refund Policy.
Form entries. When you fill in a form on this site, we save the details you enter (such as your name, email and phone number) as you type, even if you don't submit the form, so our team can follow up with you. You can ask us to delete them at any time at https://retrgtr.web.app/optout
How long we keep it
We keep enquiry data for up to 24 months after our last contact, client and contract records for as long as required by Saudi commercial and tax law, and analytics data according to the retention settings of the tools we use. When data is no longer needed, we delete or anonymise it.
How we protect it
We use access controls, encrypted connections (HTTPS) and reputable providers with recognised security standards. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the relevant authority of any breach where the law requires it.
Your rights
- Be informed about how your personal data is processed.
- Access and request a copy of your personal data.
- Request correction of inaccurate or incomplete data.
- Request deletion of data that is no longer needed.
- Withdraw consent at any time, without affecting processing already carried out.
Contact us
To exercise your rights or ask about this policy, email team@zain-studio.com. For Storelens and other legal or data-protection matters, email legal@zain-studio.com. We aim to respond within 30 days. If you are not satisfied with our response, you may contact the Saudi Data and AI Authority (SDAIA).
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.