Last updated: 27 July 2026

This Privacy Policy explains how The Light Step, operated by Jazirah Al Ahdhiyah For Trading, collects, uses, stores, shares, and protects personal information when you visit thelightstep.com, place an order, create an account, contact us, or otherwise use our services.

We respect your privacy and process personal information in accordance with applicable laws and regulations in the Kingdom of Saudi Arabia, including the Saudi Personal Data Protection Law and applicable e-commerce requirements. The Saudi Personal Data Protection Law establishes rights for individuals and obligations for organisations that process personal data.

By using our website or providing personal information to us, you acknowledge that you have read this Privacy Policy.

1. Business Information

The Light Step is operated by:

Legal company name: Jazirah Al Ahdhiyah For Trading
Trading name: The Light Step
Commercial Registration number: 4030201099
VAT registration number: 311333372400003
Registered business address: 3406, Jeddah, Makkah Province 22236, Saudi Arabia
Website: thelightstep.com
Email: support@thelightstep.com
WhatsApp: +966 54 214 0973
Telegram: +966 54 214 0973
Instagram: @thelightstep_official
TikTok: @thelightstep_official

For privacy-related questions or requests, email is our preferred contact method because it provides the clearest and most straightforward record of your request.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through:

• The Light Step website;
• Customer accounts;
• Online checkout;
• Order and delivery processes;
• Returns, exchanges, and refunds;
• Email communications;
• WhatsApp and Telegram;
• Instagram and TikTok communications;
• Customer-support enquiries;
• Reviews, surveys, and feedback;
• Advertising and marketing activities; and
• Related services provided by or on behalf of The Light Step.

Third-party websites, payment providers, delivery companies, social-media platforms, or applications may have their own privacy policies. We encourage you to review their policies when using their services.

3. What Is Personal Information?

Personal information is information that identifies you or could reasonably be used to identify you, either directly or indirectly.

Depending on how you interact with us, personal information may include your name, contact details, delivery address, account information, order history, payment-related information, device information, and communications with us.

4. Personal Information We Collect

Information you provide directly

We may collect information you provide when you place an order, create an account, request support, submit a return, or communicate with us.

This may include:

• Full name;
• Email address;
• Mobile number;
• Billing address;
• Delivery address;
• City, district, street, building, and postal information;
• Order number;
• Products ordered;
• Product size, colour, and quantity;
• Account login information;
• Preferred language;
• Return or exchange details;
• Refund information;
• Customer-service messages;
• Product reviews;
• Photographs or videos submitted in connection with a complaint, damage claim, or return;
• Social-media username;
• Marketing preferences; and
• Any other information you voluntarily provide.

Order and transaction information

When you place an order, we may collect:

• Products purchased;
• Order value;
• Discount codes;
• Delivery charges;
• Cash-on-delivery charges;
• Payment status;
• Payment method;
• Transaction reference;
• Order date;
• Delivery status;
• Return and refund history; and
• Fraud-prevention or order-verification information.

Payment information

Payments may be processed by Shopify, payment gateways, banks, card networks, digital-wallet providers, or buy-now-pay-later providers.

We generally do not directly receive or store your complete card number, security code, or full digital-wallet credentials when payment is handled by an authorised third-party payment provider.

We may receive limited payment information, such as:

• Payment method;
• Payment status;
• Transaction reference;
• Card type;
• Last digits of a payment card where provided by the processor; and
• Information required to issue or verify a refund.

Information collected automatically

When you visit our website, certain information may be collected automatically through cookies, pixels, log files, and similar technologies.

This may include:

• Internet Protocol address;
• Browser type;
• Device type;
• Operating system;
• Language settings;
• Approximate location based on your IP address;
• Pages viewed;
• Products viewed;
• Search activity;
• Items added to the cart;
• Checkout activity;
• Referring website;
• Date and time of access;
• Session information;
• Advertising identifiers; and
• Website interaction and performance information.

Information from third parties

We may receive information from third parties involved in providing our services, including:

• Shopify;
• Payment providers;
• Delivery and courier companies;
• Fraud-prevention providers;
• Analytics providers;
• Advertising platforms;
• Social-media platforms;
• Customer-support applications;
• Returns-management providers; and
• Other applications connected to our online store.

We only seek to collect personal information that is relevant and reasonably necessary for the stated purpose. Saudi data-protection guidance emphasises that collected data should be appropriate, relevant, and limited to the minimum amount needed for the processing purpose.

5. How We Use Personal Information

We may use personal information for the following purposes:

Processing orders

We use your information to:

• Receive and confirm orders;
• Verify customer and order information;
• Process payments;
• Prevent unauthorised or fraudulent transactions;
• Prepare products for dispatch;
• Generate invoices;
• Arrange delivery;
• Send order-status updates; and
• Complete refunds or exchanges.

Providing customer support

We use your information to:

• Answer product and sizing questions;
• Respond to order enquiries;
• Investigate delivery issues;
• Handle complaints;
• Process returns and exchanges;
• Review damaged, defective, or incorrect-product claims;
• Communicate decisions regarding refunds; and
• Maintain a record of customer-service correspondence.

Operating and improving the website

We may use information to:

• Maintain website functionality;
• Remember shopping-cart contents;
• Improve navigation and performance;
• Identify technical problems;
• Analyse customer use of the website;
• Improve product selection;
• Improve website content;
• Personalise the shopping experience; and
• Develop new services and features.

Security and fraud prevention

We may use information to:

• Verify orders;
• Detect suspicious transactions;
• Prevent payment fraud;
• Prevent account misuse;
• Protect our website and systems;
• Investigate unauthorised activity;
• Enforce our Terms and Conditions; and
• Protect customers, staff, and the business.

Legal and regulatory compliance

We may use or retain information to:

• Maintain accounting and tax records;
• Issue VAT invoices;
• Respond to lawful requests;
• Handle legal claims;
• Comply with regulatory requirements;
• Protect legal rights;
• Resolve disputes; and
• Cooperate with competent authorities where legally required.

Marketing and advertising

Where permitted, we may use your contact information and website activity to:

• Send promotional emails or messages;
• Inform you about new products;
• Notify you about offers and discounts;
• Recommend products;
• Measure advertising performance;
• Display advertisements on third-party platforms; and
• Create audiences for advertising campaigns.

You may unsubscribe from marketing communications at any time. Service-related messages concerning orders, payments, deliveries, returns, security, or accounts are not considered promotional communications.

6. Legal Grounds for Processing

Depending on the circumstances and applicable law, we may process personal information based on:

• Your consent;
• The need to process an order or fulfil a contract with you;
• Compliance with a legal or regulatory obligation;
• Protection of legitimate interests, provided that your rights and interests are appropriately considered;
• Protection of vital interests where applicable; or
• Another lawful basis permitted under Saudi law.

Where processing is based on your consent, you may withdraw that consent subject to applicable law. Withdrawal does not affect processing that was lawfully completed before the consent was withdrawn.

7. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, and similar technologies.

Cookies are small files stored on your browser or device. They help websites operate, remember preferences, measure usage, and provide relevant advertising.

Essential cookies

Essential cookies support important website functions such as:

• Website security;
• Shopping-cart operation;
• Checkout;
• Login sessions;
• Payment processing;
• Fraud prevention; and
• Saving privacy preferences.

The website may not operate correctly without these cookies.

Functional cookies

Functional cookies may remember:

• Language preferences;
• Location or market preferences;
• Account settings;
• Recently viewed products; and
• Other shopping preferences.

Analytics cookies

Analytics cookies help us understand:

• How visitors reach the website;
• Which pages are visited;
• Which products are viewed;
• How visitors navigate the store;
• Whether errors occur; and
• How website performance can be improved.

Advertising cookies and pixels

Where enabled, advertising technologies may be used by platforms such as Meta, Instagram, TikTok, Google, or other advertising partners to:

• Measure campaign performance;
• Understand whether advertisements result in visits or purchases;
• Show more relevant advertisements;
• Limit repeated advertisements; and
• Create advertising audiences.

You can manage cookies through the cookie settings available on our website, where provided, or through your browser settings.

Disabling certain cookies may affect website functionality, checkout, saved preferences, or the relevance of advertisements.

8. Marketing Communications

We may send marketing communications where you have requested them, consented to them, or where otherwise permitted by applicable law.

Marketing communications may include:

• New-product announcements;
• Promotional offers;
• Discount codes;
• Back-in-stock notifications;
• Seasonal campaigns; and
• Product recommendations.

You may unsubscribe by:

• Selecting the unsubscribe link in a marketing email;
• Replying to a marketing message where that option is available;
• Updating your account preferences; or
• Contacting support@thelightstep.com.

Unsubscribing from marketing will not stop essential communications regarding existing orders, payments, deliveries, returns, refunds, security, or account administration.

9. When We Share Personal Information

We do not sell customers’ personal information.

We may share personal information with service providers where reasonably necessary to operate our business and provide our services.

Shopify and website-service providers

Our online store is hosted and operated using Shopify and may use Shopify applications or integrations.

These providers may process personal information to operate the website, checkout, customer accounts, analytics, security, and related services.

Payment providers

We may share information with payment gateways, banks, card networks, digital wallets, and buy-now-pay-later providers to:

• Process payments;
• Verify transactions;
• Prevent fraud;
• Handle chargebacks; and
• Issue refunds.

Delivery and logistics providers

We may provide delivery companies with information needed to deliver your order, including:

• Name;
• Mobile number;
• Delivery address;
• Order or shipment reference;
• Cash-on-delivery amount where applicable; and
• Delivery instructions.

Technology and support providers

We may share information with providers that assist with:

• Website hosting;
• Cloud storage;
• Customer support;
• Email delivery;
• SMS or messaging;
• Analytics;
• Fraud detection;
• Cybersecurity;
• Returns management;
• Accounting;
• Inventory management; and
• Business operations.

Advertising and social-media providers

Where cookies, pixels, or advertising tools are enabled, limited information may be shared with advertising or social-media platforms to measure campaigns and provide relevant advertising.

Professional advisers

Information may be shared with accountants, auditors, legal advisers, insurers, consultants, or other professional advisers where reasonably necessary.

Government and competent authorities

We may disclose personal information where required by law, court order, regulatory request, or lawful instruction from a competent authority.

Business transactions

If all or part of our business is sold, reorganised, merged, transferred, or acquired, personal information may be transferred as part of that transaction, subject to applicable legal protections.

Service providers are expected to process personal information only for authorised purposes and to protect it appropriately.

10. International Transfer of Personal Information

Some service providers, including website, cloud, payment, analytics, advertising, and technology providers, may process or store personal information outside Saudi Arabia.

Where personal information is transferred outside the Kingdom, we will seek to ensure that the transfer is carried out in accordance with applicable Saudi data-transfer requirements and that appropriate safeguards are used where required.

Saudi regulations contain specific requirements and safeguards governing transfers of personal data outside the Kingdom.

11. How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary to:

• Complete orders;
• Provide customer support;
• Manage returns, exchanges, and refunds;
• Maintain financial, tax, and accounting records;
• Prevent fraud;
• Resolve disputes;
• Enforce agreements;
• Meet legal and regulatory obligations; and
• Fulfil the purposes described in this Privacy Policy.

Different categories of information may be kept for different periods.

When personal information is no longer required, we will take reasonable steps to delete, destroy, anonymise, or securely restrict it, subject to any legal obligation requiring continued retention.

Saudi data-protection guidance states that personal data should be retained only for a clearly defined period necessary to fulfil its purpose and securely destroyed when no longer needed, subject to applicable legal requirements.

12. How We Protect Personal Information

We use reasonable administrative, organisational, technical, and physical safeguards designed to protect personal information from:

• Unauthorised access;
• Unlawful processing;
• Accidental loss;
• Misuse;
• Alteration;
• Disclosure;
• Destruction; and
• Cybersecurity threats.

Measures may include:

• Restricted access;
• Password controls;
• Secure platforms;
• Encryption where appropriate;
• Access monitoring;
• Staff procedures;
• Security reviews; and
• Service-provider controls.

No website, transmission method, or storage system can be guaranteed to be completely secure. Customers are responsible for protecting their account passwords and devices.

Please contact us immediately if you believe that your account or personal information has been compromised.

13. Personal-Data Breaches

If a personal-data breach occurs, we will investigate the incident and take reasonable measures to reduce potential harm.

Where required by applicable law, we may notify the competent authority and affected individuals.

Saudi e-commerce and data-protection requirements place obligations on businesses regarding the protection of consumer information and the handling of data-security incidents.

14. Your Personal-Data Rights

Subject to applicable law and any permitted exceptions, you may have the right to:

• Be informed about how and why your personal information is processed;
• Access your personal information;
• Request a readable copy of your personal information;
• Request correction of inaccurate information;
• Request completion or updating of incomplete or outdated information;
• Request destruction or deletion of personal information when legally permitted;
• Withdraw consent where processing is based on consent;
• Request restriction of certain processing where applicable; and
• Submit a complaint concerning the processing of your personal information.

These rights are recognised under the Saudi Personal Data Protection Law and its implementing regulations, subject to applicable conditions and exceptions.

15. How to Exercise Your Rights

To submit a privacy request, email:

support@thelightstep.com

Please use a subject such as:

Privacy Request – [Your Full Name]

Include:

• Your full name;
• Email address;
• Mobile number;
• Order number where relevant;
• A clear description of your request; and
• Any information reasonably needed to locate the relevant records.

We may request reasonable identity verification before releasing, correcting, or deleting personal information. This helps prevent information from being disclosed to an unauthorised person.

We will review and respond to valid requests in accordance with applicable legal requirements.

Some requests may be restricted or refused where retention or processing is required for legal, tax, accounting, fraud-prevention, dispute-resolution, or other lawful purposes. Where appropriate, we will explain the reason.

16. Accuracy of Personal Information

Customers should ensure that the personal information submitted to us is accurate and current.

You may update certain information through your customer account where that feature is available.

You may also contact us to request correction of your information.

We are not responsible for delivery delays or communication failures caused by inaccurate or outdated information supplied by the customer.

17. Children’s Privacy

Our website is intended for customers who are legally capable of placing an order or who use the website with the involvement of a parent or legal guardian.

We do not knowingly seek to collect personal information directly from children without appropriate involvement or authorisation from a parent or legal guardian.

Where we become aware that personal information has been collected from a child inappropriately, we will take reasonable steps to review and delete it where required.

18. Social Media and Messaging Platforms

When you contact us through WhatsApp, Telegram, Instagram, TikTok, or another external platform, that platform may independently collect and process information according to its own privacy policy.

Information you send to us through these channels may include:

• Your name or username;
• Profile information;
• Mobile number;
• Messages;
• Images;
• Videos; and
• Order information.

For privacy requests, returns, complaints, or detailed order matters, we recommend using support@thelightstep.com, as email provides a clearer and more straightforward record.

19. Product Reviews and Public Content

When you publish a product review, comment, image, or other public submission, the information you choose to publish may be visible to other website visitors.

Do not include sensitive personal information, payment details, full addresses, private contact details, or confidential information in a public review.

We may moderate or remove content that contains personal information, abusive material, spam, unlawful content, or content that violates our Terms and Conditions.

20. Third-Party Links

Our website may contain links to third-party websites, applications, or platforms.

We do not control the privacy practices of those third parties and are not responsible for how they collect or use information.

You should review the relevant third party’s privacy policy before providing personal information.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to our website;
• Changes to our services;
• New technology or service providers;
• Changes to our data practices; or
• Changes to applicable laws and regulations.

The updated version will be posted on this page with a revised “Last updated” date.

Where required, we may provide additional notice of material changes.

22. Complaints

We encourage you to contact us first so that we can investigate and attempt to resolve your concern.

Please email:

support@thelightstep.com

Use the subject:

Privacy Complaint – [Your Full Name]

You may also have the right to submit a complaint to the competent Saudi data-protection authority in accordance with applicable law. SDAIA is the competent authority overseeing Saudi personal-data protection requirements.

23. Contact Us

For questions, requests, or complaints concerning this Privacy Policy or your personal information, contact:

The Light Step
Operated by Jazirah Al Ahdhiyah For Trading

Commercial Registration number: 4030201099
VAT registration number: 311333372400003
Registered business address: 3406, Jeddah, Makkah Province 22236, Saudi Arabia
Website: thelightstep.com
Email: support@thelightstep.com
WhatsApp: +966 54 214 0973
Telegram: +966 54 214 0973
Instagram: @thelightstep_official
TikTok: @thelightstep_official

Email is our preferred contact method because it provides a clear and straightforward record of your request.

Customer-support hours

Saturday to Thursday: 9:00 AM–9:00 PM
Friday: Closed
Time zone: Saudi Arabia time

Messages received outside working hours will be reviewed during the next working period.