Privacy Policy

Who we are

ATSUM KSA operates a dropshipping and third-party logistics platform in Saudi Arabia, and is the controller of the personal data described here. For any privacy question, or to exercise any right in this policy, contact theatsum@gmail.com or +966 59 114 8144.

What we collect

From you, when you register and use the portal:

• Account details — your name, email address, mobile number and WhatsApp number. Passwords are stored only as a one-way hash; nobody at ATSUM can read yours.
• Business details — store or legal name, country, region, city and address, and for Saudi partners an Iqama/Akama number where one is provided.
• Trading profile — for sellers, your dropshipping experience and expected monthly order volume, used to size support and stock.
• Banking details — bank name, account title and IBAN, held solely to pay you.
• Support and correspondence — the tickets you raise, the messages on them, and the contact you make by email or WhatsApp.
• Technical data — sign-in sessions, the language and theme you chose, your cart, and server logs of requests and errors.

Your customers' data

When you place an order you give us your customer's name, phone number, delivery address, any delivery instructions, and the COD amount. We process that data only to fulfil, deliver and account for the order, and we pass it to the courier carrying the parcel because delivery is impossible without it.

We do not market to your customers, do not sell their data, and do not use it to contact them about anything other than the delivery in progress. You are responsible for having collected it lawfully in the first place.

Why we use it

Each piece of data is held for a stated purpose and no other:

• To verify an application before opening the catalog, since prices and stock are commercially sensitive.
• To pick, pack, dispatch, deliver and track orders.
• To calculate profit, issue purchase invoices and settle payouts to your bank account.
• To provide support and answer tickets.
• To detect and prevent fraud, abuse and misuse of the platform.
• To meet Saudi tax, invoicing and record-keeping obligations.

Who we share it with

We share personal data only with the parties needed to run the service, and only with what each of them needs:

• Courier and logistics partners — the recipient's name, phone, address and COD amount for the parcel they are carrying.
• Our bank and payment providers — the account details required to make a transfer to you.
• Infrastructure providers — hosting, the managed database that stores the platform's records, our transactional email provider, and the media service that stores product images.
• Shopify — only if you connect a Shopify store, and only the product data you choose to push to it. Disconnecting the store makes ATSUM discard the access token.
• Authorities and regulators — where Saudi law requires disclosure.

What we never do

We do not sell personal data, we do not rent contact lists, and we do not share your customer list with other partners on the platform. There are no advertising or third-party tracking cookies on this site, and no analytics profile is built about you.

Cookies

This site sets a small number of first-party cookies, all functional: your sign-in session, your chosen language, your chosen light or dark theme, and your shopping cart. None of them track you across other websites and none are used for advertising, so there is nothing to opt out of — clearing them simply signs you out and resets those choices.

How long we keep it

Account and business data is kept while your account is open and for as long afterwards as is needed to close out any open orders, payouts or disputes.

Purchase invoices, payout statements and the order records behind them are kept for the period Saudi tax and commercial law requires us to retain accounting records. That obligation survives account closure, so deleting an account does not delete an issued invoice.

Keeping it safe

Traffic to and from the platform is encrypted in transit. Passwords are stored hashed, never in plain text or in a reversible form. Access is role-based: a seller sees only their own orders, invoices, payouts and customers, and cannot see another partner's.

Bank details are visible to you and to ATSUM administrators, and are snapshotted onto a payout statement at the moment of payment so the record of where money went cannot be altered afterwards.

Your rights

You can see and correct most of what we hold about you directly on your Settings screen — your name, contact details, bank details and password. For anything else, contact us and we will act on it.

• Access — ask for a copy of the personal data we hold about you.
• Correction — have inaccurate details fixed.
• Deletion — ask us to close your account and delete your data, subject to the invoice and payout records we are legally required to keep.
• Objection — ask us to stop a particular use, where we are not obliged to continue it.

Changes to this policy

We update this policy when the platform or the law changes, and the date at the top is always the version in force. Material changes are announced to partners by email before they take effect.