Matjar website visitors
This privacy notice ("Notice") applies to all Matjar website visitors at matjar.kaust.edu.sa (“Site”). Matjar is a store owned by King Abdullah University of Science and Technology ("KAUST", "we", "us", "our"). The purpose of this Notice is to inform you of how we process your Personal Data. This Notice does not form part of any contract or agreement.
For the purpose of applicable data protection legislation, the entity which is responsible for your Personal Data is King Abdullah University of Science and Technology, Thuwal 23955-6900, Kingdom of Saudi Arabia.
This Notice replaces and supersedes any previous notices addressing the same or similar issues, whether formal or informal. KAUST reserves the right to alter, amend, or replace this Notice in whole or in part. The latest version of this Notice can be found here. You should always check that you are referring to the latest version of this Notice if you have previously downloaded hard copies of this Notice. For a copy of a previous version of this Notice, please contact DPO@KAUST.edu.sa.
Please also refer to KAUST’s Cookie Notice for more information about cookies collected on KAUST websites, and to KAUST’s Privacy Notice main page for more information about your rights regarding your personal data and how to exercise them.
1. What Personal Data do we process about you?
When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. See the list below for more information about what Personal Data we collect and why.
- Device information, version of web browser, IP address
- Time zone, country logged in from
- Website activity, including what sites or products you view, search terms, and how you interact with the Site
- Customer registration information, including first and last name, contact information, billing address, and shipping address
- Shopping cart items, current and past order information, including name, billing address, shipping address, payment status (paid / not paid / pending), email address, and phone number
- Feedback on orders
Please note that credit card information is not shared with KAUST; payment details are collected by Shopify for processing payment.
2. What Sensitive Personal Data is being collected?
No sensitive Personal Data is collected in this process.
3. Where Do We Get Your Personal Data?
Personal Data collected via cookies is collected automatically by Shopify and shared with us when you access our Site via cookies, log files, web beacons, tags, or pixels.
a. Cookies Necessary for the Functioning of the Store
| Name | Function |
|---|---|
| ab | Used in connection with access to admin. |
| secure_session_id | Used in connection with navigation through a storefront. |
| Cart | Used in connection with shopping cart. |
| cart_sig | Used in connection with checkout. |
| cart_ts | Used in connection with checkout. |
| checkout_token | Used in connection with checkout. |
| Secret | Used in connection with checkout. |
| secure_customer_sig | Used in connection with customer login. |
| storefront_digest | Used in connection with customer login. |
| shopify_u | Used to facilitate updating customer account information. |
b. Reporting and Analytics
| Name | Function |
|---|---|
| tracking_consent | Tracking preferences. |
| landing_page | Track landing pages. |
| orig_referrer | Track landing pages. |
| _s | Shopify analytics. |
| _shopify_fs | Shopify analytics. |
| _shopify_s | Shopify analytics. |
| _shopify_sa_p | Shopify analytics relating to marketing & referrals. |
| _shopify_sa_t | Shopify analytics relating to marketing & referrals. |
| _shopify_y | Shopify analytics. |
| _y | Shopify analytics. |
Personal Data related to your shopping and orders you place is collected from your site activity, for example when you place an item in a shopping cart, and place an order. We also receive Personal Data directly from you when you register for an account; this information includes your first and last name, email, billing address, and the shipping address that you provide. If you interact directly with us via chat, email, phone, or in person regarding your orders, we will also receive Personal Data you share. Payment status information is received from Shopify and Amazon Payment Services, the local payment gateway provider used to process your payments. Information related to delivery fulfillment may also be provided by our delivery service provider.
4. Do I need to provide all the information requested?
Our cookie banner allows you to restrict collection of Personal Data that is not strictly necessary for the website to function with security at a basic level, including page navigation. Without these strictly necessary cookies, the website would not be able to work properly.
You can control and manage cookies in various ways. Please refer to the KAUST Cookie Notice for how to block and manage cookies from your browser or via other tools. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.
5. Why do we collect and process your Personal Data?
Personal Data collected via cookies is used to load the Site accurately for you; to perform analytics on Site usage to improve performance of the website; to ensure repeat visits are efficient, relevant, and optimized for your experience; and for information security purposes, to protect against illegitimate users accessing the site. Your Personal Data will be used to enable you to browse our website and view products for sale.
Order information is collected to provide products and delivery services to you to fulfill our contract, to process your payment information, arrange for shipping and fulfillment of your order, and provide you with invoices and/or order confirmations, communicate with you, screen our orders for potential risk or fraud, and when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
6. Why are we able to process your Personal Data?
KAUST may process Personal Data collected by strictly essential cookies based on KAUST’s legitimate interest in providing a secure e-commerce website for its Matjar store.
KAUST may process Personal Data collected by non-essential cookies only with your consent.
When you place an order, KAUST may process your Personal Data to implement our contract with you regarding that order.
7. Is there automated decision-making or profiling involved?
No, KAUST does not rely on any automated decision-making or profiling in this process.
8. Who do we share your Personal Data with?
KAUST does not disclose to third parties your personal information, including information about your use of the website, except as set forth below:
- KAUST may disclose such information to companies and individuals KAUST works with in carrying out its functions, including hosting services, e-commerce services, analytics, and our delivery service provider. KAUST uses Shopify to support the Matjar e-commerce store. You can read more about how Shopify uses your Personal Data here: https://www.shopify.com/legal/privacy.
- Invoices or payments subject to audit or government regulations will be shared with Zakat, Tax, and Customs Authority and stored in ZATCA servers for VAT purposes.
- KAUST may share aggregated information about visits to the website with partners and other third parties.
- KAUST may share your Personal Data to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
- KAUST may disclose personal information if legally required to do so, for public safety reasons, or to protect life or health.
9. How do we protect your Personal Data?
KAUST takes appropriate technical and organizational controls to secure your Personal Data. We implement a variety of security measures to prevent your Personal Data from being accidentally lost, used, or accessed in an unauthorized way. We limit access to your Personal Data to those who have a genuine business need to know it. Individuals with access must process your Personal Data in an authorized manner for authorized purposes. We enter into data protection agreements with software platforms processing your Personal Data for the purposes outlined in this Privacy Notice. For more information about the technical measures KAUST applies to protect your Personal Data, please see KAUST’s Data Classification Procedure.
10. How long do we keep your Personal Data?
The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and three years from the date they are downloaded to your device. Persistent cookies may be deleted at any time by clearing cookies on your browser. KAUST retains financial transaction records for a minimum of 10 years.