Scope and application
This Privacy Policy applies to personal data processed through Offry in connection with customer, merchant, operational, and support functions.
It applies when an individual creates an account, signs in, browses or redeems offers, completes a purchase, joins a merchant team, contacts Offry support through WhatsApp, submits a privacy-related request, or otherwise uses functionality made available through the service.
Personal data we collect
The personal data processed by Offry may include account and identity information such as name, email address, phone number, sign-in identifiers, profile settings, preferred language, and any additional information submitted directly by the user when creating or updating an account.
For customers, Offry may process service-use and transaction data such as offers saved or purchased, the amount, currency, and status of a purchase, issued coupons and their use or expiry status, and the branch associated with an offer or coupon use.
For merchants and their team members, Offry may process business and branch information, team memberships, permissions, and invitations, submitted offers and changes and their review outcomes, and the sales and coupon-use records required to operate the merchant account.
Offry may also process privacy requests and support communications, together with authentication, session, audit, and error records, request identifiers, and limited technical data needed to secure accounts, diagnose failures, prevent fraud or misuse, and demonstrate that operational actions were performed.
To improve service speed and reliability, Offry may use Vercel Speed Insights to collect anonymous technical performance measurements such as page route, device and browser type, operating system, network-speed class, country, and Web Vitals. Offry does not intentionally include account identifiers, contact details, payment references, coupon or invitation codes, or support content in these measurements.
When a user contacts Offry support through WhatsApp, Offry may receive the user's phone number, message content, and any images, documents, or other attachments the user sends. Users should not send passwords, payment-card information, verification codes, or sensitive information that is unnecessary to resolve the request.
Why we process personal data
Offry processes personal data for the purposes necessary to provide and operate the service, including account creation and security, sign-in, offer and purchase operations, merchant branch and team management, customer support, privacy request handling, and the investigation of fraud, abuse, incidents, or regulatory matters.
Processing is limited to the extent reasonably necessary for those purposes or to satisfy applicable financial, security, contractual, operational, or legal obligations.
Offry applies appropriate organizational and technical safeguards to support data it receives, restricts access to authorized personnel, and uses that data only to handle and communicate about the request. Offry retains it only for as long as necessary for that purpose or to meet a legal requirement, then securely deletes the copies under its administration.
Processing outside Saudi Arabia
Some service providers may process personal data outside Saudi Arabia depending on the location of their technical infrastructure and service operations. Where using a provider results in a transfer of personal data outside Saudi Arabia, Offry handles that transfer in accordance with applicable legal requirements and documents the provider, purpose, data categories, processing location, and relevant safeguards.
Offry does not use an international transfer to change the processing purposes described in this policy, and limits data shared with service providers to what is necessary for their approved functions.
Your rights and choices
Where available under applicable law and internal controls, a signed-in user may request access to personal data, correction of inaccurate information, export of account data, or account deletion through Offry's privacy tools.
Certain requests may remain subject to operational review before completion where security controls, payment disputes, fraud prevention measures, lawful retention duties, or additional verification requirements apply.
Account deletion and limited post-deletion retention
When account deletion is requested, the account enters a thirty-day pending deletion period. The active session is revoked immediately and ordinary account use is suspended. If the user signs in again before the end of that period, the deletion request is treated as cancelled and the account is reactivated.
If the request is not cancelled during that period, Offry completes an operational final deletion process that removes or anonymizes account data, while retaining limited records only where continued retention is required for legitimate financial, operational, security, or legal purposes.
Retention periods
Offry retains data for different periods depending on record type and purpose. The current operational windows are listed below and are reviewed periodically against business and legal requirements.
Privacy request records
Operational records are retained so the team can demonstrate how a request was handled.
Retention window: 12 months after closure
Privacy incident records
Closed privacy and breach-handling records are retained long enough to support investigation, response, and notification evidence.
Retention window: 24 months after closure
Self-service export files
Exports are generated on demand and returned directly. Any downloaded copy is controlled by the user, while the generation record follows the privacy-request retention period.
Retention window: Not retained by Offry
Approved deletion grace period
Deletion requests can be scheduled, then completed or swept automatically after the grace period.
Retention window: 30 days
Unused team invites
Expired or unused invites are deleted after a short buffer period unless they become part of an accepted team record.
Retention window: 30 days after expiry
General audit logs
Audit history is retained to support security, abuse prevention, and operational troubleshooting, then removed on a rolling basis.
Retention window: 12 months
Contact and policy updates
For privacy-related questions or follow-up regarding personal data requests, users may use the privacy tools available inside the account or contact Offry support through WhatsApp at +966 54 919 3309.
Registered address: Al Aqrabiyah District, Al Khobar 31952, Eastern Province, Saudi Arabia.
Offry may amend this Privacy Policy from time to time where required by changes to the service, processing practices, or legal requirements. The current version will remain available on this page and will take effect from the latest update date shown above.
Data rights management
If you hold an account, you may use Offry's in-app privacy tools to submit access, correction, export, or account deletion requests, subject to applicable controls and retention duties.
Offry is operated by مؤسسة امواج البحر الازرق لتقنية نظم المعلومات · Commercial Registration 7033013421 · Al Khobar, Saudi Arabia