Privacy Policy
Last Updated: January 6, 2026
1. Introduction and Scope
This Privacy Policy (the “Policy”) describes how [Company Name] (the “Company,” “we,” “us,” or “our”), the operator of the electronic menu platform (the “Platform”), collects, uses, discloses, and protects the personal data of its users, including restaurant patrons and restaurant staff (collectively, “Data Subjects” or “you”).
We are committed to protecting your privacy and personal data in compliance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia, its Implementing Regulations, and the directives of the Saudi Data and Artificial Intelligence Authority (SDAIA).
2. Data Controller Information
The Data Controller responsible for the processing of your personal data is:
| Detail | Information |
|---|---|
| Company Name | Mta3em Platform |
| Name In Arabic | منصة مطاعم للطلب عبر المنيو الرقمي |
| Address | KSA, Riyadh |
| Contact Email | plus@mta3em.com |
| Contact Phone | +966-598404030 |
3. Personal Data Collected
We collect the following categories of personal data:
| Category | Examples of Data Collected | Purpose of Collection |
|---|---|---|
| Identification Data | Name, phone number, email address (if provided for ordering or account creation). | To process orders, communicate status, and manage user accounts. |
| Transaction Data | Order details (items, quantity, special requests), payment method details (tokenized data only), and transaction history. | To fulfill your order and process payments. |
| Technical Data | IP address, device type, operating system, browser type, and usage data (e.g., pages viewed, time spent). | To ensure the security and functionality of the Platform and for analytical purposes. |
| Location Data | Precise or approximate location (if permission is granted). | To identify the restaurant location for order placement and service delivery. |
4. Legal Basis and Purpose of Processing
We process your personal data based on the following legal grounds as stipulated by the PDPL:
- Consent: We will obtain your explicit consent for specific processing activities, such as sending marketing communications. You have the right to withdraw your consent at any time.
- Contractual Necessity: Processing is necessary for the performance of a contract to which you are a party (e.g., fulfilling your food order).
- Legal Obligation: Processing is necessary for compliance with a legal obligation to which the Company is subject (e.g., tax, accounting, or regulatory requirements).
The purposes for which we process your data include:
- Order Fulfillment: Processing and transmitting your order to the selected restaurant.
- Service Improvement: Analyzing usage data to enhance the Platform’s features and user experience.
- Security: Protecting the Platform from fraud and unauthorized access.
- Compliance: Adhering to all applicable Saudi Arabian laws and regulations.
5. Disclosure and Sharing of Personal Data
Your personal data may be disclosed to the following parties:
- Restaurants: The specific restaurant you place an order with will receive your order details and, if necessary, your contact information to fulfill the order.
- Service Providers: Third-party vendors who perform services on our behalf, such as payment processors, cloud hosting providers, and analytics services. These parties are contractually obligated to protect your data and comply with the PDPL.
- Legal Authorities: We may disclose your data if required by law, court order, or governmental regulation in the Kingdom of Saudi Arabia.
6. Data Subject Rights (PDPL)
In accordance with the PDPL, you have the following rights regarding your personal data:
- Right to Know: The right to be informed about the collection and processing of your personal data.
- Right to Access: The right to request a copy of your personal data held by us.
- Right to Correction: The right to request the correction of inaccurate or incomplete personal data.
- Right to Destruction: The right to request the destruction of your personal data in certain circumstances (e.g., if the data is no longer necessary for the purpose for which it was collected).
- Right to Withdraw Consent: The right to withdraw your consent to the processing of your personal data at any time, where consent is the legal basis for processing.
To exercise any of these rights, please contact us using the details provided in Section 2.
7. Data Security and Retention
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include encryption, access controls, and regular security assessments.
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by Saudi Arabian law. Once the retention period expires, we will securely destroy or anonymize your data.
8. Changes to this Policy
We reserve the right to update this Policy from time to time. We will notify you of any material changes by posting the new Policy on the Platform and updating the “Last Updated” date. Your continued use of the Platform after any changes constitutes your acceptance of the revised Policy.
9. Contact Us
If you have any questions or concerns about this Privacy Policy or our data processing practices, please contact us at the email address provided in Section 2.