A privacy policy for your online store: a ready template on what the law asks
The ArabyBot teamOfficial Meta partner · written from our own platform dataThe short answer
Pick your country, the customer data you collect, who you share it with and whether you send offers, and your store's privacy policy is written at once with the points Saudi Arabia's Personal Data Protection Law (Articles 12 and 13) and Egypt's Personal Data Protection Law (Articles 2 and 3) ask for: what you collect and why, who you share it with, how long you keep it, and the customer's rights and how to use them. Copy it into your store's privacy page. Free, with no sign-up.
Also asked as: «نموذج سياسة الخصوصية للمتجر» · «سياسة الخصوصية لمتجر إلكتروني» · «نموذج سياسة الخصوصية سدايا» · «سياسة الخصوصية للمتاجر الإلكترونية» · «كيفية كتابة سياسة الخصوصية»
The policy is written in your browser and nothing is sent to us. It is a template on what the law asks, not legal advice.
What the law asks in each country
| Point | Saudi Arabia | Egypt |
|---|---|---|
| The privacy policy | Mandatory and available to data subjects: the purpose, what is collected, how it is collected, stored, processed and destroyed, and the rights and how to use them (Art. 12) | Collection for lawful, specified, disclosed purposes; data secured and not kept longer than needed (Art. 3) |
| What the customer is told at collection | The legal basis, the purpose and what is mandatory or optional, the collector's identity and address, who receives the data and whether it is processed outside the Kingdom, the effect of not giving it, and their rights (Art. 13) | The purpose, disclosed before collection (Art. 3) |
| The customer's rights | To be informed, access, a copy in a readable and clear format, correction, completion and updating, and destruction once no longer needed (Art. 4) | To know and access, withdraw consent, correct, erase and update, limit processing, be told of a breach, and object (Art. 2) |
| Marketing messages | With the recipient's consent and a clear way to stop them (Arts. 25 and 26) | Consent, the sender's identity and address, saying it is marketing, and an easy way to refuse (Art. 17) |
Sources: Saudi Arabia's Personal Data Protection Law on SDAIA's site (Articles 4, 12, 13, 25 and 26), and Egypt's Personal Data Protection Law No. 151 of 2020 (Articles 2, 3 and 17). Read in October 2026.
The privacy page comes with a template in your store's name that you edit or replace with what you wrote here, alongside the shipping and returns pages, linked at the bottom of every page. The order form has a WhatsApp-offers consent box whose wording you write, so offers reach only those who agreed, and whoever opted out of your messages gets none.
The return and exchange policy template · The terms and conditions template
Frequently asked questions
Is a privacy policy mandatory for an online store in Saudi Arabia?
Yes. Article 12 of the Personal Data Protection Law requires a controller, which includes a store that collects its customers' data, to adopt a privacy policy available to data subjects, stating the purpose of collection, what is collected, how it is collected, stored, processed and destroyed, and the data subject's rights and how to exercise them. The competent authority is the Saudi Data and AI Authority (SDAIA).
And what does Egyptian law require?
Personal Data Protection Law No. 151 of 2020 requires data to be collected for lawful, specified purposes disclosed to the data subject, to be secured, and not to be kept longer than needed (Article 3), and gives the data subject rights including knowing about it, withdrawing consent, correcting and erasing it, and being told of any breach (Article 2). Its executive regulations were issued in late 2025 with a period to comply.
Do I need the customer's consent to send offers on WhatsApp?
Yes, in both. In Saudi Arabia promotional material may not be sent over personal contact channels without the recipient's consent and a clear way to stop it (Article 25). In Egypt direct electronic marketing needs the person's consent, the sender's identity and address, a statement that the message is marketing, and an easy way to refuse (Article 17). Meta itself requires consent for marketing messages on WhatsApp.
Is this template legal advice?
No. It is a template on what the cited articles ask, as we read them in October 2026, and your trade may have further rules, such as health data, children's data or transfers abroad. Check what applies to it before you publish.
Your store and the bot that sells from it — in one account
One account for the store and the bot, with a trial before you pay.