Privacy Policy
Cherry Wood Trading Est. ('we', 'us', 'our') operates cherrywood.com.sa. This page explains what data we collect, how we use it, and the choices you have. We've written it in plain language because we believe privacy notices should be readable.
1. Data controller
Cherry Wood Trading Est., Industrial Area Phase 4, Riyadh 14334, Kingdom of Saudi Arabia. For any privacy question, write to info@cherrywood.com.sa.
2. What data we collect
We collect the minimum data needed to run the business.
Contact form
When you submit our contact form, we receive your name, email, phone, country, and the message body. The form opens your email client — nothing is sent to our server until you press send in your mail app. We never see unsent drafts.
Quote (RFQ) form
When you submit a quote request, we receive company name, contact name, email, phone, country, city, the categories and SKUs you request, quantities, and your notes. Same mailto-based flow as the contact form.
Server logs
Our hosting provider records standard access logs: IP address, user-agent, requested URL, response code, and timestamp. These are retained for 30 days for security and traffic analysis, then deleted. We do not use third-party analytics (no Google Analytics, no Meta pixel, no Hotjar).
Cookies
We do not set any cookies or use any third-party trackers. See our cookie policy for the full breakdown.
3. How we use your data
We use the data you send us through the contact and quote forms only to respond to your enquiry and (if you become a customer) to fulfil orders. We do not sell, rent, or share your data with third parties for marketing purposes.
4. How long we keep it
Email enquiries are retained in our mailbox for as long as the business relationship lasts, plus 7 years for tax and accounting compliance. Server logs are retained for 30 days. We do not retain any other data on visitors.
5. Your rights
Under the Saudi Personal Data Protection Law (PDPL) and, where applicable, the EU GDPR, you have the right to: (a) request a copy of the data we hold about you; (b) request correction of inaccurate data; (c) request deletion of your data; (d) object to processing or request restriction; (e) lodge a complaint with the Saudi Data & AI Authority (SDAIA). To exercise any of these rights, write to info@cherrywood.com.sa. We respond within 30 days.
6. Data security
Data in transit between your browser and our hosting provider is encrypted with TLS 1.3. Email correspondence is stored on our business email provider (Google Workspace) with two-factor authentication enforced for all staff access.
7. International transfers
Server logs and email correspondence may be processed on infrastructure outside Saudi Arabia (our hosting provider and email provider use global data centres). By contacting us, you consent to this transfer. We have verified that both providers offer adequate data-protection safeguards.
8. Changes to this policy
We will post any changes on this page with an updated 'last revised' date. Material changes will be announced by a banner on the homepage for 30 days.
9. Contact
Cherry Wood Trading Est. — info@cherrywood.com.sa — +966 11 234 5678 — Industrial Area Phase 4, Riyadh 14334.