Who is responsible
Rosa Blue Furniture is responsible for your personal data. Commercial Registration —, Riyadh, Saudi Arabia. For any privacy question, contact rosabluefurniture@gmail.com.
What we collect and why
- Your name, mobile and (if you give it) email: to reply, send your private project link on WhatsApp and keep you updated.
- Your city, and your exact location only if you choose to share it: to check we work in your area and to plan visits.
- About your child: first name (optional), age range and gender, given by you as the parent, to design a room that suits them.
- Room photos, plans, measurements, wishes, colours and budget: to design and price your room.
- Bank transfer receipts: to confirm your payments and keep tax records.
- Your replies on mood boards and your contract approval: to record what you approved.
- Basic technical data (a code that remembers this phone, the type of phone and browser, your language, and a scrambled form of your internet address): to limit your private link to your family's phones and to block spam.
We don't collect data directly from children. Please don't include children in room photos. We use no advertising, no tracking cookies and no AI on your data. We never sell your data.
Saved on your phone first
While you fill in the request form, your answers and photos are saved only on your phone. They reach us when you tap Send. If you leave without sending, nothing reaches us.
Who receives it
- Our team: only the people working on your project.
- Service providers who run the app for us and may not use your data for anything else: Supabase (database, files and sign-in), Vercel (website hosting) and Resend (emails). Some of them are outside Saudi Arabia, so your data may be stored or processed abroad, with the protections the Personal Data Protection Law requires.
- Makers and delivery: only what they need, such as measurements and the delivery contact.
- Authorities, when the law requires it.
How long we keep it
- Requests we don't take on, and waiting-list emails: 12 months, then deleted.
- Projects: until 2 years after completion, then deleted, apart from what tax law requires us to keep.
- Invoices and payment records: for as long as tax law requires.
Your rights
You can ask to see your data, get a copy, correct it or delete it, and withdraw any consent you gave (for example, for portfolio photos). Email us and we'll reply within 30 days. Some records, such as invoices, must be kept by law. You can also complain to the Saudi Data & AI Authority (SDAIA).
Security
Data is encrypted while it travels. Files are private and open only through short-lived links. Only our team can see projects, and families see only their own project. If a breach puts your data at risk, we report it to SDAIA within 72 hours, and we tell you if it could seriously affect you.
Changes
We post any update here with its date, and email you about important changes.