Last updated: August 10, 2026
At بيت الكانفاس (“Bait Al Canvas,” “we,” “us,” or “our”), we respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, disclose, and protect your personal data when you visit or use our website, place an order, contact us, upload images for customized canvas products, or otherwise interact with our services (collectively, the “Services”).
Bait Al Canvas operates in the Kingdom of Saudi Arabia, and this Privacy Policy is intended to explain our privacy practices in accordance with applicable laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL) and its Implementing Regulations, where applicable.
By using our website or providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy.
1. About Bait Al Canvas
Bait Al Canvas is an online store offering canvas wall art, customized canvas prints, and related products.
For the purposes of applicable data-protection laws, Bait Al Canvas may act as the Controller of personal data collected through our website and services.
Business Name: بيت الكانفاس
Country: Kingdom of Saudi Arabia
Email: info@baitalcanvas.com
Phone / WhatsApp: 0555268608
2. Personal Data We Collect
We collect only the personal data that is reasonably necessary for the purposes described in this Privacy Policy.
Depending on how you interact with our website, we may collect the following information:
2.1 Personal and Contact Information
This may include:
- Full name
- Email address
- Phone number
- WhatsApp number, where provided
- Billing address
- Delivery address
- City and postal information
- Other information you provide when contacting us
2.2 Order and Transaction Information
When you purchase a product, we may collect information related to your order, including:
- Products purchased
- Order number
- Product specifications
- Canvas size and customization details
- Delivery information
- Payment status
- Transaction-related information
Payment-card details may be processed directly by our third-party payment service providers. We do not intend to store complete payment-card information on our own systems unless specifically required and lawfully permitted.
2.3 Images and Files Uploaded for Custom Orders
If you order a customized canvas print, you may upload photographs, artwork, or other digital files.
These files may contain personal information or images of identifiable individuals.
We process these files only as reasonably necessary to:
- Prepare your customized product.
- Print your selected image.
- Fulfill your order.
- Provide customer support.
- Resolve issues relating to your order.
You should only upload images or files that you have the legal right or permission to use.
2.4 Website Usage Information
When you visit our website, certain information may be collected automatically, including:
- IP address
- Browser type and version
- Device type
- Operating system
- Pages visited
- Date and time of visits
- Time spent on pages
- Referring website
- General website interaction information
- Diagnostic and technical information
This information may be used to maintain website security, improve performance, understand website usage, and improve our services.
3. How We Collect Personal Data
We may collect personal data through:
- Website forms
- Checkout and order forms
- Account registration, where available
- Custom-order forms
- Image-upload forms
- Contact forms
- Email communications
- WhatsApp or other customer-support communications
- Cookies and similar technologies
- Information you voluntarily provide to us
We aim to collect only the personal data necessary for the relevant purpose.
Saudi data-protection guidance emphasizes collecting the minimum personal data necessary for the stated purpose.
4. How We Use Your Personal Data
We may use your personal data for the following purposes:
4.1 Processing and Fulfilling Orders
We use your information to:
- Process your orders.
- Confirm your purchases.
- Produce customized products.
- Arrange delivery.
- Provide order updates.
- Process refunds or replacements.
- Provide customer support.
4.2 Customer Service
We may use your information to respond to:
- Questions
- Complaints
- Requests
- Refund inquiries
- Delivery inquiries
- Product inquiries
- Customization requests
4.3 Website Operation
We may use technical and usage information to:
- Operate our website.
- Maintain website security.
- Detect fraudulent or unauthorized activity.
- Troubleshoot technical problems.
- Improve website performance.
- Analyze website usage.
4.4 Marketing and Promotions
Where legally permitted and where appropriate consent or another lawful basis is required, we may use your contact information to send:
- Promotional offers
- New product announcements
- Discounts
- Collection launches
- Newsletters
- Other marketing communications
You may opt out of marketing communications at any time by following the unsubscribe instructions in the communication or contacting us.
4.5 Legal and Regulatory Compliance
We may process personal data when necessary to:
- Comply with applicable laws and regulations.
- Respond to lawful requests from competent authorities.
- Protect our legal rights.
- Prevent fraud or misuse.
- Resolve disputes.
- Enforce our Terms & Conditions.
5. Legal Basis for Processing
Depending on the circumstances, we may process personal data on one or more lawful bases permitted under applicable Saudi data-protection laws.
These may include:
- Your consent.
- Processing necessary to fulfill or perform a contract with you, such as fulfilling an order.
- Compliance with a legal obligation.
- Legitimate purposes permitted under applicable law.
- Other lawful bases recognized by applicable regulations.
Where processing is based on consent, you may withdraw your consent where permitted by applicable law. Withdrawal of consent does not necessarily affect the lawfulness of processing that occurred before the withdrawal.
The Saudi PDPL establishes requirements concerning the lawful processing of personal data and the rights of data subjects.
6. Sharing Your Personal Data
We do not sell your personal data.
We may disclose or share personal data with third parties when reasonably necessary for the purposes described in this Privacy Policy.
These parties may include:
Payment Providers
Payment service providers may process payment and transaction information to complete your purchase securely.
Delivery and Logistics Providers
We may provide delivery companies with information such as:
- Customer name
- Phone number
- Delivery address
- Order information
This enables them to deliver your order.
Printing and Production Partners
Where third parties assist us with producing or fulfilling your order, we may provide them with information and customer-uploaded files necessary to complete the order.
Such parties should only process the information for the relevant service and subject to appropriate contractual or legal requirements.
Technology and Service Providers
We may use third-party providers for services such as:
- Website hosting
- Website security
- Analytics
- Customer support
- Cloud storage
- Website functionality
- Marketing tools
Government and Legal Authorities
We may disclose personal data when required or permitted by applicable law, regulation, court order, or request from a competent authority.
7. Customer-Uploaded Images
Customized canvas printing is an important part of our services.
When you upload an image, photograph, or artwork, we may temporarily store and process the file to fulfill your order.
You remain responsible for ensuring that you have the necessary rights or permissions to use the uploaded content.
We do not claim ownership of your original photographs or artwork.
We will not use your personal photographs or uploaded images for public advertising, social media, portfolio displays, or promotional purposes without appropriate permission.
We may retain uploaded files for a limited period where reasonably necessary to fulfill the order, provide customer support, handle complaints, or comply with legal obligations.
8. Cookies and Similar Technologies
Our website may use cookies and similar technologies to improve your browsing experience and operate essential website functions.
Cookies may be used for purposes including:
- Maintaining shopping-cart functionality.
- Remembering preferences.
- Supporting website security.
- Understanding website usage.
- Improving website performance.
- Measuring marketing effectiveness, where applicable.
Cookies may include:
Essential Cookies
These cookies may be necessary for the website and shopping functionality to operate correctly.
Functionality Cookies
These cookies may remember preferences such as language or other website settings.
Analytics Cookies
Where used, analytics cookies may help us understand how visitors use our website so that we can improve our services.
Marketing Cookies
Where used and legally permitted, marketing cookies may help us measure advertising performance or provide relevant promotional content.
You can manage or disable cookies through your browser settings. However, disabling certain cookies may affect some website functionality.
9. Third-Party Websites and Services
Our website may contain links to third-party websites, payment providers, social-media platforms, delivery providers, or other external services.
When you access a third-party website or service, that provider’s own privacy policy and terms may apply.
Bait Al Canvas does not control the privacy practices of third-party websites and is not responsible for their privacy policies or practices.
We recommend reviewing the privacy policy of any third-party service you use.
10. Data Retention
We retain personal data only for as long as reasonably necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.
The retention period may depend on:
- The nature of the information.
- The purpose for which it was collected.
- Whether you have an active customer relationship with us.
- Legal and regulatory requirements.
- Accounting and tax requirements.
- Dispute-resolution requirements.
- Fraud prevention and security requirements.
When personal data is no longer required, we will take reasonable steps to securely delete, destroy, or anonymize it in accordance with applicable requirements.
11. Storage and Transfer of Personal Data
Personal data may be processed or stored using service providers located inside or outside the Kingdom of Saudi Arabia.
Where personal data is transferred outside the Kingdom, we will take appropriate measures required by applicable Saudi data-protection laws and regulations.
This may include assessing applicable requirements and implementing appropriate contractual, organizational, or technical safeguards where required.
Saudi regulations specifically address transfers of personal data outside the Kingdom.
12. Security of Personal Data
We take reasonable technical and organizational measures designed to protect personal data against:
- Unauthorized access.
- Unauthorized disclosure.
- Loss.
- Misuse.
- Alteration.
- Destruction.
- Other unlawful processing.
However, no method of transmission or electronic storage can be guaranteed to be completely secure.
For this reason, while we work to protect your personal data, we cannot guarantee absolute security.
13. Your Privacy Rights
Subject to applicable Saudi laws and regulations, you may have rights regarding your personal data, including rights to:
- Know how your personal data is collected and processed.
- Request access to your personal data.
- Request correction of inaccurate or incomplete personal data.
- Request deletion or destruction of personal data in applicable circumstances.
- Withdraw consent where processing is based on consent.
- Exercise other rights available under applicable data-protection laws.
The exact availability and scope of these rights may depend on the circumstances and applicable law.
SDAIA identifies rights including being informed, accessing personal data, correcting personal data, and requesting destruction in applicable circumstances.
14. How to Exercise Your Privacy Rights
If you would like to:
- Request access to your personal data.
- Correct your personal data.
- Request deletion where applicable.
- Withdraw consent.
- Ask questions about our processing of personal data.
- Submit a privacy-related complaint.
please contact us using the details below:
بيت الكانفاس
Email: [Privacy Email Address]
Phone / WhatsApp: [Phone Number]
Business Address: [Business Address, Saudi Arabia]
We may need to verify your identity before processing certain requests.
We will handle requests in accordance with applicable laws and regulations.
15. Children’s Privacy
Our website is intended for general consumers and is not specifically directed toward children.
We do not knowingly collect personal data from children where such collection is prohibited by applicable law.
If you believe that a child has provided personal data to us without appropriate authorization, please contact us so that we can review and take appropriate action.
16. Direct Marketing
Where permitted by applicable law, we may send promotional communications about our products, offers, collections, or services.
You can stop receiving marketing communications by:
- Using the unsubscribe option provided in marketing emails.
- Contacting us directly.
- Following the applicable opt-out instructions provided in the communication.
Please note that even if you opt out of marketing communications, we may still contact you regarding transactions, orders, account information, security matters, or other service-related communications.
17. Data Breaches and Security Incidents
If we become aware of a personal-data security incident that requires notification under applicable Saudi laws or regulations, we will take the required steps to investigate, contain, and address the incident and make any legally required notifications.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- Changes to our services.
- Changes in technology.
- Changes in our data-processing practices.
- Changes in applicable laws or regulations.
When we update this Privacy Policy, we will revise the “Last Updated” date at the top of this page.
Where required by applicable law, we may provide additional notice regarding material changes.
We encourage you to review this Privacy Policy periodically.
19. Governing Law
This Privacy Policy shall be interpreted in accordance with the applicable laws and regulations of the Kingdom of Saudi Arabia, including applicable personal-data protection and e-commerce requirements.
20. Contact Us
If you have questions, concerns, complaints, or requests regarding this Privacy Policy or the processing of your personal data, please contact us:
بيت الكانفاس
Email: [Your Email Address]
Privacy Email: [Privacy Email Address]
Phone / WhatsApp: [Your Phone Number]
Business Address: [Your Business Address, Saudi Arabia]
Commercial Registration: [CR Number]
VAT Number: [VAT Number, if applicable]
We value your privacy and are committed to handling your personal data responsibly and transparently.
Thank you for trusting Bait Al Canvas.