Privacy Policy

Qweelvo is a Saudi platform that gives restaurants a direct ordering channel under their own name and brand. Qweelvo operates this website (qweelvo.com) and is the controller of the personal data collected through it.

In this policy "Qweelvo", "we" and "us" refer to it. For anything about your data, write to us at [email protected].

This policy covers the Qweelvo marketing website: the pages that present the platform and its prices, the demo request form and the contact form.

The platform itself, meaning the restaurant dashboard and the ordering pages used by restaurants’ customers, handles data under the subscription agreement signed with the restaurant and the platform’s own privacy policy. It is outside this policy.

We collect two kinds of data only. The first is what you give us when you request a demo or write to us:

• Your name.
• The restaurant’s name and its number of branches.
• Your mobile number.
• Your email address.
• Your city.
• The text of your message and anything you mention in it.
• Anything you send us directly by email or tell us in a phone call.

Some form fields are optional, and the form shows which are required. Please do not include sensitive data, or data about other people, in your message.

The second kind is technical data recorded automatically when any website is visited: the IP address, the date and time of the visit, the page requested, the browser and device type, and the page you came from. It is recorded by our servers and by the network protection provider the site passes through, and is used only to run and protect the site.

We collect no payment data through this website, and we do not buy data about you from anyone.

We use your data for these purposes only:

• Replying to your request or question.
• Contacting you to arrange and give the demo, and to work out what suits your restaurant.
• Following up your request until it is complete, and preparing a subscription offer if you ask for one.
• Running the site, protecting it from misuse and attacks, and diagnosing faults.
• Meeting what the laws in force in the Kingdom require.

The basis for processing what you send in a form is your consent, which you give when you submit the form after acknowledging this policy. The basis for processing technical data is our legitimate interest in running and protecting the site; it includes no sensitive data.

We do not send you marketing messages unrelated to your request without your separate consent, and you can stop them at any time. We do not sell your data to anyone.

This website uses no tracking or analytics cookies, and no advertising tools that follow your visit.

Your browser stores one local flag recording that you closed the privacy notice, so it is not shown again. The flag stays on your device and is not sent to us.

The network protection provider may set one strictly necessary security cookie to tell visitors apart from harmful automated programs. It is not used for tracking or advertising.

If we later decide to add analytics or tracking tools, we will ask for your consent first and update this policy before switching them on.

We use service providers that process data on our behalf and on our instructions:

• The hosting provider the website runs on.
• The network protection and content delivery provider that visits to the site pass through.
• The email and workplace tools provider we use to receive and answer your messages.

We require these providers to protect the data and to use it only for what we ask of them.

We do not share your data with anyone else unless a law in force or a request from a competent authority obliges us to, or you agree.

Data is kept on servers we rent from the providers above. Some of those servers may be outside the Kingdom of Saudi Arabia, and your visit may pass through the protection provider’s network in more than one country.

For any transfer of data outside the Kingdom we follow the controls set by the Personal Data Protection Law and its regulations, and limit it to the minimum data needed.

We keep what you send in forms and correspondence for no longer than 24 months after our last contact, then destroy it. If you become a Qweelvo customer, contract data is kept under the subscription agreement.

We keep technical logs for no longer than 90 days, after which they are deleted automatically.

We may keep some data longer where a law in force requires it, or where it is needed to establish a right or answer a claim.

The whole website runs over an encrypted connection (HTTPS). Access to the servers and the data is limited to those who need it for their work, and the servers are protected by firewalls and regular security updates.

No protection is complete. If a breach affects your data and is likely to harm you, we will notify the competent authority and you as the law requires.

The Personal Data Protection Law of the Kingdom of Saudi Arabia gives you rights over your data, including:

• The right to be informed: to know why we collect your data and on what basis.
• The right of access: to see the data we hold about you and to obtain a copy.
• The right to correction: to ask us to correct, complete or update your data.
• The right to destruction: to ask us to destroy data that is no longer needed.
• The right to withdraw consent: at any time, without affecting what was done before the withdrawal.

To use any of these rights, write to us at [email protected] and state your request. We may ask for proof that the data is yours before acting on it.

We answer within 30 days of receiving your request. If it needs longer, we will tell you so and why. Using these rights is free of charge.

If you have a concern about how we handle your data, please write to us first at [email protected] so we can resolve it.

This website is addressed to restaurant owners and their staff. It is not directed at children, and we do not knowingly collect data about them.

If you learn that a child has sent us their data, write to us at [email protected] and we will destroy it.

We may update this policy when the website or the legal requirements change. We publish the updated version on this page and change the effective date at the top.

If a change affects how we use data you have already sent, we will make that clear, and ask for your consent where the law requires it.

For any question about this policy or your data, write to us at [email protected].