Privacy Policy
On KSA Website Privacy Notice
1. Details of the Data Controller
Darb Al Wasl, a branch of Al Waqt Al Abyad Trading (Single Person Company) incorporated under the laws of the Kingdom of Saudi Arabia, with unified number 700378854 and registered office at JCAA2091 (collectively referred to as “AWAA”, “Company”, “we”, “us” or “our”) provides this privacy notice regarding ON products sold in stores and websites operated by the Company. We are committed to responsibly handling your personal information. This privacy notice (the "Privacy Notice") explains how we collect, use, disclose, retain, and protect your personal information, and certain rights you may have relating to such use. If you have a privacy or data use concern that we have not addressed satisfactorily, please feel free to reach out to our Data Privacy Office using the details set forth at the end of this Privacy Notice. We reserve the right to change or modify this Privacy Notice at any time and at our sole discretion. To the extent permitted by law, any changes or modification will be effective immediately upon publishing the revisions without further notice.
Last revised: April 2026.
2. The types of Personal Information we collect
Personal information is data that can be used to identify you or that we can otherwise link to you ("Personal Information"). The Personal Information we collect includes your name, postal address, e-mail address, phone number, payment information, language preference, and other information described in this Privacy Notice. We may collect Personal Information about you from the following sources:
2.1 Information we receive from you
We collect certain Personal Information that you provide to us when you:
· communicate with us via email or other channels,
· sign up for or ask us to send you newsletters or other materials,
· sign up for an event,
· buy On products from us or otherwise use one of our services.
2.2 Information we collect through the use of cookies and other technologies as described in this Privacy Notice.
2.3 Information we collect from other sources such as publicly available information and through the use of CCTV in our stores.
3. How we use your Personal Information
We use your Personal Information for the following purposes:
- To offer you products.
- To provide you with and improve our services.
- For communication purposes, including sending you newsletters, invitations to events, and promotions.
- To maintain our list of contacts.
- To manage your inquiries, complaints, and requests.
- To manage this website and ensure it is functioning properly.
When you request our products or submit enquiries or complaints, it is necessary for us to collect and process your personal information to fulfill your requests and respond appropriately to your enquiries or complaints. You may elect to receive emails from us by signing up for this service. To offer this service, we collect and store the information you provide, including your email address. You may opt out of receiving emails by unsubscribing using the link in the emails you receive from us.
4. Our basis for using your Personal Information
When processing your Personal Information for the purposes described herein, we rely on the following lawful basis:
- Your consent for sending marketing and similar promotional communications.
- Our legitimate interests in maintaining business relationships, our relationship with you, and enhancing customer experience.
- Performance of our contract with you regarding the provision of products and services.
- Compliance with applicable laws and regulations including verification and execution of financial transactions, financial accounting and record keeping, performing other obligations imposed by law or government authorities
- Protection of public health, safety, and interests such as reporting incidents to the Police or other government authorities and supporting investigations.
- Establishment, exercise, or defense of legal claims.
5. How might we share your Personal Information
We may disclose your Personal Information to the following parties for the following purposes:
5.1 Affiliates of the Company, which may use it to:
· provide joint content and services (e.g., customer support);
· detect, investigate, mitigate and prevent potentially fraudulent and illegal acts or violations of our contracts and data security breaches;
· provide you with personalized advertising;
· improve products, sites, applications, services, tools and marketing communications; and
· send you marketing communications if you have consented to receive such communications or if otherwise permitted by the law.
5.2 On AG, Zurich, Switzerland ("On AG"):
· to effectively manage our business operations with regards to On products;
· to fulfill our contractual obligations to On AG.
5.3 Service providers:
We engage third party service providers to support with providing our services and managing this website. These services providers may have access to Personal Information depending on the scope of the services they provide to us. The services they provide include:
· Website hosting and maintenance
· Payment processing services
· IT infrastructure and maintenance
· Advertising and promotions
· Prevention, detection, mitigation, and investigation of potentially illegal acts, violations of our contracts, fraud and/or security breaches
· Logistics and delivery services. We share delivery address, contact information, and shipment tracking information for the purpose of facilitating delivery of items purchased and other delivery related communication.
· Bill collection and other business operations.
· Third-party providers of websites, applications, services and tools that we cooperate with so that they advertise our products on their websites or in their applications, services and tools.
These service providers may be located anywhere in the world, including outside the Kingdom of Saudi Arabia. If you need more information, feel free to contact us using the details provided at the end of this Privacy Notice.
Where we transfer Personal Information to third party service providers, this will be based on an agreement limiting the use by the third-party provider of such Personal Information to processing necessary to fulfil their contract with us and obligating the third-party provider to take security measures regarding such data. Third-party providers are not permitted to sell or lease the Personal Information to third parties.
5.4 Law enforcement, legal proceedings and as authorized by law:
· to comply with our legal obligations, enforce our contracts, respond to claims that a listing or other content violates the rights of others, or protect an individual's rights, property or safety;
· to law enforcement, government agencies, or authorized third parties in response to a verified request or legal process. We will only disclose information we deem relevant to the investigation or inquiry;
· to third parties involved in a legal proceeding, if they provide us with a subpoena, court order or substantially similar legal basis, or we otherwise believe in good faith that the disclosure of information is necessary to prevent imminent physical harm, financial loss, or to report suspected illegal activity
· if a transaction fails, is put on hold, or is later invalidated, we may also provide the other user with details of the unsuccessful transaction.
5.5 We may disclose your Personal Information to our financial and payment services providers:
· to prevent, detect, mitigate, and investigate potentially illegal acts, fraud and/or security breaches, and to assess and manage risk, including to alert you if fraudulent activities have been detected on your On account
· to provide customer services, including to help service your account or resolve disputes (e.g., billing or transactional disputes).
· to facilitate the processing of payment cards when you pay for our services with a payment card.
5.6 Future business or merger partners:
We may also disclose your Personal Information to provide information, on a need-to-know basis, to future purchasers or merger partners of all or a portion of AWAA or any of our affiliate companies.
6. How long we keep your Personal Information
We store your Personal Information only for as long as necessary for the purposes described above. How long we retain Personal Information can vary significantly based on context of the services we provide and our legal obligations.
7. Communication Tools
We may scan messages automatically and check for spam, viruses, phishing and other malicious activity, illegal or prohibited content or violations of this Privacy Notice or any other applicable policies.
Newsletter
Subscription:
If you register to receive newsletters from us, we will keep you updated on our products, surveys, offers, and other promotional materials on a regular basis.
When registering for our newsletter, you give us your consent to receive the newsletter on a regular basis and that we collect and store the following information: the e-mail address used when registering for the newsletter.
Unsubscribe:
If you wish to unsubscribe from our newsletter, you can do so at any time by clicking on the “unsubscribe” link at the bottom of any newsletter that you receive. If you decide not to receive our newsletters, we may still send you service-related communications (such as updates regarding your order).
Newsletter tracking:
The newsletters contain so-called “web beacons”, which are retrieved from an external server when the email is opened. This call will initially collect technical information, such as details about your browser and operating system, as well as your IP address and the time of retrieval. In addition, depending on your cookie settings, we can track whether and when you opened a newsletter, and which links were clicked. The analysis of this information helps us to identify the reading habits of our users and to adapt our content to you or to send out different content based on the interests of our users.
8. Third Party Social Media Platforms
We are present on various social media platforms such as Facebook, Instagram, X (formerly, Twitter). On our social media pages, we publish and share various content with regards to our newest products, product recommendations, or other marketing material ("On Social Media Pages"). When using third party social media platforms, kindly note that the operators of these social media platforms are considered as data controllers and as such their respective privacy policy applies.
You can always choose to communicate or interact with us directly via On Social Media Pages. In this case, we collect all information you provide to us directly, e.g. when you post or like something on On Social Media Pages or when you send us a direct message. In addition, we might access all information that is publicly available on your profile.
Operators of social media platforms use cookies and other tracking technologies to track the behaviour of their users and share the data regarding On Social Media Pages with us. Such data is shared only on an anonymized and statistical basis, meaning we have no access to personal data at all. We use such data to get a better understanding of the interests and the behaviour of On Social Media Page users and to improve user experience and provide user tailored content.
9. How we protect your Personal Information
The security of your personal information is an important concern to us. We maintain appropriate technical and organizational security measures, policies, and procedures to protect your personal information from accidental loss, unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on our secure servers behind a secure network. Examples of measures we take include:
· Imposing confidentiality obligations on our staff and service providers.
· Restriction of access to your personal information to employees and third parties strictly on a need-to-know basis, such as to respond to your enquiry or request.
· Using secure communication channels for transmitting personal information; and
· Employing adequate administrative and technical controls to secure personal information.
10. Where we transfer Personal Information
Personal information we collect may be transferred to, stored, and processed in the Kingdom of Saudi Arabia and United Arab Emirates where AWAA and its affiliate companies are located or maintain facilities. We carry out such transfers for the purposes described in this Privacy Notice. We may also transfer Personal Information to the location of other third parties described in section 5 of this Privacy Notice. Where we transfer personal data outside the Kingdom of Saudi Arabia, we take all steps that are reasonably necessary to ensure that your Personal Information is treated securely and in accordance with this Privacy Notice and applicable data protection laws, including, where relevant, entering standard contractual/data protection clauses (or equivalent measures). If you would like more information on transfer mechanisms, please contact us using the details provided at the end of this Privacy Notice.
11. Your Choices and Rights
We welcome your inquiries and comments. You have the right to know what Personal Information we process about you and may request a copy. You are also entitled to have incorrect or incomplete Personal Information about you corrected or completed and you may ask us to delete your Personal Information. You can also object to certain Personal Information about you being processed and request that processing be limited. Please note that the limitation or deletion of your Personal Information may mean that we will be unable to provide the services and information described above. You also have the right to receive your Personal Information in a machine-readable format and have the information transferred to another party responsible for data processing. You can make a request to exercise any of these rights in relation to your Personal Information by sending the request to privacy@awaa.sa.
You also have the right to lodge a complaint with the Saudi Data and Artificial Intelligence Authority via www.dgp.sdaia.gov.sa.
12. Use of CCTV
Please note that where CCTV is in operation in our stores, you may be captured on CCTV and your footage and image recorded and stored. All CCTV footage is captured purely for your security and for the safety of other visitors to our stores. If you would like to know more about this, please contact us using the details provided at the end of this Privacy Notice.
13. Third Party Privacy Practices
This Privacy Notice addresses only our use and handling of Personal Information, which we collect from you in connection with providing our services. If you disclose your Personal Information to a third party, or visit a third party website via a link from our services, their privacy notices and practices will apply to any Personal Information you provide to them or that they collect from you.
We cannot guarantee the privacy or security of your Personal Information once you provide it to a third party and we encourage you to evaluate the privacy and security policies of such third party before entering into a transaction and choosing to share your Personal Information.
14. Cookies
14.1 Cookies are small text files that are downloaded to your device when you visit the Website or open our marketing-related emails. A cookie will usually contain the name of the website from which the cookie has come from, the “lifetime” of the cookie (i.e., how long it will remain on your device) and a value, which is usually a randomly generated unique number. Cookies placed by the website you’re visiting are called “first party cookies,” while cookies placed by other companies are called “third party cookies.”
14.2 There are different categories of cookies, and each cookie serves one of four purposes:
a. Essential cookies: these are first party cookies that allow you use a feature on the Website such as, staying logged in, viewing a video, making purchases, creating an account.
b. Analytics cookies: these cookies track information about how the Website is being used so that we can make improvements and report our performance. We might also use analytics cookies to test new ads, pages, or features to see how users react to them. Analytics cookies may either be first party or third party cookies.
c. Preference cookies: these are first party cookies that store your Website preferences such as, language preference.
d. Ad targeting cookies: these cookies are placed by advertising platforms or networks in order to:
· Deliver ads and track ad performance
· Enable advertising networks deliver ads that may be relevant to you based on your activities (this is sometimes called ‘behavioral;’ or ‘targeted’ advertising).
For all non-essential cookies, we will request your consent before placing such cookies on your device.
14.3 Cookies (including third-party cookies such as tracking technologies provided by Google Analytics) are in particular used to ensure and improve the functionality of the Website or for general marketing purposes by providing information on interaction of unique browser-device pairs with the Website (such as number of sessions, pageviews, clicks and ecommerce interactions and time spent), statistical information on interaction with the Website (including referrals thereto, popularity of certain content, accessing users' categories, markets, regions, languages, demographics, browser and device types and similar information), or statistical information on interaction with our marketing emails (such as if they have been opened or forwarded or links have been clicked on). Cookies are also used to provide you with personalized advertising on third party websites and/or apps for your specific interests.
14.4 Third-party service providers such as Google may track your use of the Website, combine this information with information from other websites you have visited (and which they also track) and use such combined information for their own purposes. If you have registered with the respective service providers, they may be able to identify you. In these instances, their processing of your Personal Information will be governed by their privacy policies.
14.5 If you would like more information about cookies, we can recommend www.aboutcookies.org and www.allaboutcookies.org as helpful resources. Both websites also provide instructions on how to reject cookies if you would like to do so.
15. Contact Us
Should you have any questions or concerns relating to this Privacy Notice or the processing of Personal Information we hold about you, please contact us:
By email: privacy@awaa.sa.
This Privacy Notice is written in English and may be translated into other languages. In the event of any inconsistency between the English version and the translated version of this Notice, the English version shall prevail.