Vendix operates this website and its related digital platforms, including all content, features, tools, and services (collectively, the “Services”). We are committed to protecting your personal data in accordance with the Saudi Personal Data Protection Law (PDPL), its Implementing Regulations, and applicable electronic communications and cybersecurity laws in the Kingdom of Saudi Arabia.

This Privacy Policy explains how Vendix collects, processes, uses, and protects personal data. Vendix is a trademark owned by Falak Software Establishment, a legal entity registered in the Kingdom of Saudi Arabia under unified number (7040130366). Vendix operates its website and related digital platforms, including all content, features, tools, functionalities, and services (collectively, the “Services”). Vendix is fully committed to complying with the Saudi Personal Data Protection Law (PDPL), its Implementing Regulations, and applicable cybersecurity and electronic communications laws. By accessing or using the Services, you acknowledge that you have reviewed, understood, and agreed to this Privacy Policy.

Beta Services

Certain Vendix services are currently offered as part of a beta launch phase for the purpose of testing features, improving performance, and enhancing user experience. During this phase, updates or improvements may be introduced to certain features or functionalities. Vendix takes reasonable measures to ensure service stability and continuity in accordance with applicable laws.

Personal Data We Collect or Process

Vendix may collect and process various categories of personal data necessary to operate and provide the Services, including contact information, account and platform usage data, transaction and service request data, communications and support data, device and technical data, and usage and interaction logs. Vendix does not collect or process sensitive personal data except as permitted by law or based on explicit consent and in accordance with applicable regulations.

• Contact information such as full name, email address, phone number, company name, and business address.
• Account information including login credentials, account preferences, and profile settings.
• Transaction and service information such as inquiries, service requests, proposals, subscriptions, billing records, and service history.
• Communication data including messages, emails, feedback, support requests, or other information voluntarily provided.
• Device and technical data such as IP address, browser type, device identifiers, operating system, and network information.
• Usage data including pages visited, time spent, interactions with features, and navigation behavior.

Salon End Customers Data

Vendix processes personal data relating to salon end customers on behalf of salons using the platform. In this context, the salon acts as the Data Controller with respect to its customers’ personal data, while Vendix acts solely as a Data Processor. Vendix processes such data strictly in accordance with the salon’s instructions and solely for the purpose of providing the Services and does not use such data for its own marketing purposes.

Salon Responsibilities

The salon bears full responsibility for informing its customers of applicable privacy policies, obtaining all legally required consents for the processing of personal data, and complying with the requirements of the Saudi Personal Data Protection Law. Vendix shall not be liable for any failure by the salon to comply with such obligations.

Data Processing Agreement (DPA)

The processing of salon end customers’ personal data is subject to a separate Data Processing Agreement (DPA) entered between Vendix and the salon, either as part of the Terms of Service or under a separate contractual agreement, in accordance with the Saudi Personal Data Protection Law.

Limitation of Liability

Vendix shall not be responsible for the accuracy, legality, or content of services, pricing, offers, or information provided by salons to their customers through the platform. Such responsibility shall remain solely with the salon.

Individuals Rights

Individuals have the right, subject to the Saudi Personal Data Protection Law, to know how their personal data is collected and used, to access their personal data, to request correction or deletion of such data, and to withdraw consent where processing is based on consent, without prejudice to any statutory obligations or lawful exceptions.

International Data Transfers

Where personal data is transferred outside the Kingdom of Saudi Arabia, Vendix ensures that:

Sources of Personal Data

We collect personal data from the following lawful sources:

• Directly from you, when you fill out forms, request services, create an account, contact us, or communicate with us.
• Automatically, through cookies and similar technologies when you interact with our website.
• Service providers, acting on our behalf under binding contractual obligations.

How We Use Your Personal Data

We use personal data only for legitimate, specific, and lawful purposes, including:

Providing and Managing Services

(Legal basis: Performance of Contract, Legitimate Interests)

To respond to inquiries, deliver services, manage accounts, process transactions, provide technical support, and maintain service quality.

Improving Website and User Experience

(Legal basis: Legitimate Interests)

To analyze usage trends, improve functionality, enhance security, and optimize performance.

Marketing and Business Communications

(Legal basis: Consent or Legitimate Interests where permitted)

To send service updates, promotional messages, newsletters, or offers. You may opt out at any time.

Security, Fraud Prevention, and Compliance

(Legal basis: Legal Obligation, Legitimate Interests)

To protect systems, prevent unauthorized access, detect fraud, and comply with regulatory and cybersecurity obligations.

Legal and Regulatory Requirements

(Legal basis: Legal Obligation)

To comply with Saudi laws, court orders, governmental requests, or regulatory requirements.

Vendix does not use personal data for automated decision-making that produces legal or similarly significant effects without consent.

Disclosure of Personal Data

We normally don’t disclose personal data, but where it is necessary and lawful, we provide it under confidentiality and data-protection obligations. The possible limited data exposure may include :

• To service providers and vendors (e.g., hosting, IT support, analytics, payment or communication platforms).
• Within Vendix’s internal teams on a need-to-know basis in the event of business restructuring, merger, or acquisition, with appropriate safeguards.
• To government authorities or regulators, where required by law.

All disclosures comply with Saudi PDPL requirements.

Cookies and Tracking Technologies

We use cookies and similar technologies to improve functionality, analyze usage, and enhance user experience. You may manage or disable cookies through your browser settings. Non-essential cookies are used only where legally permitted.

Third-Party Links

Our Services are designed to be used entirely within the Vendix website, and we do not direct you to third-party websites or external platforms as part of your normal use of the Services. If we ever introduce links to external websites in the future, we will do so transparently. In such cases, those websites will operate independently from Vendix, and we encourage you to review their policies before sharing any personal information.

Children’s Personal Data

Vendix’s Services may be used by individuals under the age of 18. We respect the privacy of younger users and collect personal data only when it is voluntarily provided and with appropriate consent, where required by applicable law. We do not intentionally collect more personal data than necessary. If we become aware that personal data has been collected without valid consent or in a manner that does not comply with legal requirements, we will take prompt steps to delete or restrict the use of such data.

Data Security

We implement appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, misuse, or disclosure. We retain personal data only for as long as necessary:

• Service and transaction records: retained as required by Saudi commercial and regulatory laws.
• Account data: retained while active and deleted or anonymized after inactivity unless legally required.
• Marketing data: retained until consent is withdrawn.
• Technical and usage data: retained for limited periods for analytics and security purposes.

Your Rights Under Saudi PDPL

You have the following rights, subject to applicable law:

• Right to know how your personal data is collected and used
• Right to access your personal data
• Right to request correction of inaccurate or incomplete data
• Right to request deletion where legally permissible
• Right to withdraw consent, where processing is based on consent

Requests will be handled within reasonable timeframes as required by Saudi law.

International Data Transfers

Where personal data is transferred outside the Kingdom of Saudi Arabia, Vendix ensures that:

• Transfers comply with Saudi PDPL cross-border transfer requirements.
• Appropriate contractual, technical, and organizational safeguards are in place.
• Transfers occur only to jurisdictions providing adequate data protection or under approved mechanisms.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect legal, technical, or operational changes. Any updates will be posted on this page with a revised “Last Updated” date. Continued use of the Services constitutes acceptance of the updated policy.

Contact

If you have any questions about this Privacy Policy, wish to exercise your personal data rights, or need further information about how we process your personal data, you may contact us using the details below:

Email: care@vendix.com.sa

Website: vendix.com.sa

Address: Kingdom of Saudi Arabia

Vendix acts as the data controller for personal data processed through its Services in accordance with the Saudi Personal Data Protection Law (PDPL) and applicable regulations.

OVERVIEW

Welcome to Vendix. We operate this website and related digital platforms to provide professional digital, technology, and business services (the “Services”).

These Terms of Service, together with our Privacy Policy and any other referenced policies, govern your access to and use of the Services. By accessing or using the Services, you agree to be bound by these Terms. If you do not agree, you must not use or access the Services.

SECTION 1 – ACCESS AND ACCOUNT

By using the Services, you confirm that you and comply with the laws and regulations in the Kingdom of Saudi Arabia and that all information you provide is accurate, current, and complete. You are responsible for maintaining the confidentiality of your account credentials and for all activities conducted under your account. You must not share, transfer, or assign your account to any third party without our written consent.

SECTION 2 – SERVICES

Vendix provides digital, technology, consulting, and related professional services. Service descriptions, scopes, timelines, and deliverables may vary depending on the engagement and are subject to change without notice. Nothing on the website constitutes a legally binding offer unless expressly stated in a written agreement or proposal accepted by Vendix.

SECTION 3 – ORDERS, REQUESTS, AND ENGAGEMENTS

When you submit a service request, inquiry, or order, you are making a non-binding request subject to Vendix’s review and acceptance.

We reserve the right to refuse, cancel, or modify any request where information is incomplete, inaccurate, suspected to be fraudulent, or outside our service scope. Acceptance of any engagement may be confirmed via email, proposal, invoice, or written agreement.

SECTION 4 – PRICING AND PAYMENTS

Prices, fees, and payment terms are communicated prior to confirmation and may vary by service. Unless stated otherwise, prices exclude applicable taxes, government fees, or third-party charges.

You agree to provide accurate billing information and confirm that you are authorised to use the payment method provided. Failure to complete payment may result in suspension or termination of Services.

SECTION 5 – DELIVERY AND TIMELINES

Service delivery timelines are estimates only and may vary due to complexity, third-party dependencies, client responsiveness, or events beyond our control.

Vendix is not responsible for delays caused by force majeure events, regulatory requirements, client-side delays, or third-party service providers.

SECTION 6 – INTELLECTUAL PROPERTY

All content on the Services, including text, graphics, logos, software, designs, and documentation, is owned by Vendix or licensed to us and protected under Saudi intellectual property laws.

You may not copy, reproduce, distribute, modify, or exploit any content without prior written consent, except where explicitly permitted under a written agreement.

SECTION 7 – OPTIONAL TOOLS AND THIRD-PARTY SERVICES

We may provide access to third-party tools or services that we do not control or monitor. These are provided “as is” and “as available.”

Your use of such tools is at your own risk and subject to the applicable third-party terms and policies.

SECTION 8 – THIRD-PARTY LINKS

The Services may include links to third-party websites or platforms. Vendix is not responsible for their content, accuracy, availability, or privacy practices. Accessing third-party sites is at your own risk.

SECTION 9 – PRIVACY AND DATA PROTECTION

Your personal data is processed in accordance with our Privacy Policy and the Saudi Personal Data Protection Law (PDPL).

By using the Services, you consent to the collection, use, and processing of your personal data as described in the Privacy Policy.

SECTION 10 – FEEDBACK

If you submit feedback, suggestions, or ideas, you grant Vendix a non-exclusive, perpetual, royalty-free, worldwide licence to use, modify, and implement such feedback without compensation or obligation.

SECTION 11 – ERRORS AND INACCURACIES

The Services may occasionally contain errors, inaccuracies, or omissions relating to descriptions, pricing, or availability. Vendix reserves the right to correct such errors at any time without liability.

SECTION 12 – PROHIBITED USES

You must not use the Services for:

• Illegal, fraudulent, or unauthorised purposes
• Violating Saudi laws or regulations
• Uploading malicious code, hacking, scraping, or interfering with system security
• Infringing intellectual property rights
• Harassment, abuse, or misrepresentation
• Circumventing security or access controls

Vendix reserves the right to suspend or terminate access for prohibited use.

SECTION 13 – TERMINATION

We may suspend or terminate your access to the Services at any time if you breach these Terms, violate applicable laws, or misuse the Services.

Termination does not affect accrued rights or obligations prior to termination.

SECTION 14 – DISCLAIMER OF WARRANTIES

The Services are provided “as is” and “as available”, without warranties of any kind except where required by applicable Saudi law.

Vendix does not guarantee uninterrupted, error-free, or defect-free Services.

SECTION 15 – LIMITATION OF LIABILITY

To the maximum extent permitted by Saudi law, Vendix shall not be liable for indirect, incidental, special, or consequential damages arising from your use of the Services. Nothing in these Terms limits liability for fraud, gross negligence, or liabilities that cannot be excluded under Saudi law.

SECTION 16 – INDEMNIFICATION

You agree to indemnify and hold Vendix harmless from claims, damages, or losses arising from your misuse of the Services or breach of these Terms.

SECTION 17 – SEVERABILITY

If any provision of these Terms is found to be invalid or unenforceable, the remaining provisions shall remain in full force and effect.

SECTION 18 – WAIVER; ENTIRE AGREEMENT

Failure to enforce any provision does not constitute a waiver. These Terms, together with our policies, constitute the entire agreement between you and Vendix.

SECTION 19 – ASSIGNMENT

You may not assign your rights under these Terms without prior written consent. Vendix may assign its rights and obligations where legally permissible.

SECTION 20 – GOVERNING LAW AND JURISDICTION

These Terms are governed by and interpreted in accordance with the laws of the Kingdom of Saudi Arabia. Any disputes shall be subject to the exclusive jurisdiction of the competent Saudi courts.

SECTION 21 – HEADINGS

Headings are for convenience only and do not affect interpretation.

SECTION 22 – CHANGES TO TERMS

We may update these Terms from time to time. Updated Terms will be effective once posted on the website. Continued use of the Services constitutes acceptance of the revised Terms.

SECTION 23 – CONTACT INFORMATION

If you have questions about these Terms, please contact us at: