Privacy Policy
1. Introduction
Zohoor Al Madina Trading Co. ("City Flower," "we," "us," or "our"), CR/Unified National No. 7001882757, operates department stores and hypermarkets across the Kingdom of Saudi Arabia and Bahrain, together with the corporate website cityflowerksa.com and related digital channels (together, the "Site").
This Privacy Policy explains what personal data we collect through the Site, why we collect it, how we use and protect it, and the choices and rights available to you. It is intended to comply with the Kingdom of Saudi Arabia's Personal Data Protection Law (PDPL) and its Implementing Regulations, as issued by the Saudi Data & Artificial Intelligence Authority (SDAIA).
By using the Site, you acknowledge that you have read and understood this Policy. If you do not agree with it, please do not use the Site.
2. Scope of this site
cityflowerksa.com is our corporate website. It provides information about our stores, brands, group companies, promotions, and careers, and does not process online orders or payments.
3. Information we collect
3.1 Information you provide directly
- Careers applications — CV, cover letter, and information you choose to submit via our Careers page
- Any information you send us directly by email, phone, or social media
3.2 Information collected automatically
- Device and browser information, IP address, approximate location
- Pages viewed, time on site, links clicked, and referring website
- Cookies and similar technologies (see Section 5)
3.3 Information from third parties
- If you follow a link from this Site to our online store (cityflower.sa) or our storefront on noon.com, or interact with our ads on Meta/Facebook, that platform's own privacy policy applies to the information it collects there
4. How we use information
- To operate, maintain, and improve the Site
- To respond to enquiries and job applications submitted through the Site
- To measure and personalise advertising for City Flower on platforms such as Meta/Facebook
- To understand how visitors use the Site, for analytics and performance purposes
- To comply with legal, tax, and regulatory obligations in Saudi Arabia and Bahrain
7. Data retention
We retain personal data collected through this Site only for as long as necessary to fulfil the purposes described in this Policy. Careers applications are retained for a reasonable period to consider you for suitable roles, unless you ask us to delete them sooner.
8. Your rights
Subject to applicable law, you have the right to:
- Know what personal data we hold about you and how it is used
- Request access to, or a copy of, your personal data
- Request correction of inaccurate or incomplete data
- Request deletion of your personal data, where applicable
- Withdraw consent to marketing communications at any time
- Object to certain uses of your data, including for direct marketing
- Lodge a complaint with SDAIA as the competent authority in Saudi Arabia
To exercise any of these rights, please contact us using the details in Section 13.
9. Data security
We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Cross-border transfers
Some of our service providers (for example, cloud hosting or advertising platforms) may process data outside Saudi Arabia. Where this occurs, we take steps to ensure an appropriate level of protection consistent with the PDPL's requirements for cross-border data transfer.
11. Children's privacy
This Site is intended for general audiences and is not directed at children. We do not knowingly collect personal data from children without appropriate parental or guardian consent. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically.
13. Contact us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us: