English
English العربية

Privacy Policy

Welcome to Spada!

At Spada, We place a high value on privacy and hold it in the utmost regard. Our philosophy entails being transparent and forthcoming about Our privacy policies, which encompass the manner in which We handle Your personal data when You visit Our website (“Website”), and any application or technology We make available (collectively referred to as the “Platform”).

This online privacy policy (“Privacy Policy”) together with the Spada Terms and Conditions (“Terms”) shall constitute an agreement (“Agreement”) between You (“You, Your, Yourself”), and Spada along with its affiliates, successors, and assigns (Spada, We, Us, or Our).

By using the Platform, you acknowledge that You have read and understood this Privacy Policy. Where Your consent is required for the Processing of Your Personal Data, specifically for Direct Marketing, Sensitive Data, or Payment Data, we will obtain Your Explicit Consent.

If You do not agree with this Privacy Policy, please do not access Our Platform. You should read this Privacy Policy carefully before starting to use the Platform.

We collect, share, use, and protect information when You visit and use Our Platforms through the following URL for the Website.

At Spada, we take privacy very seriously and are committed to complying with all applicable data protection laws and regulations, including the Personal Data Protection Law in the Kingdom of Saudi Arabia (KSA) (Royal Decree No. (M/19) dated 1443/2/9 AH and its Implementing Regulations. We are committed to complying with all applicable data protection laws and regulations in KSA and will take reasonable steps to ensure that we are in compliance with such laws. We reserve the right to modify Our Privacy Policy at any time to ensure that we remain in compliance with applicable laws and regulations.

This Privacy Policy should be read in conjunction with Spada’s Terms and Conditions. All defined terms used in this Privacy Policy shall have the same meaning ascribed to them in the Terms unless expressly otherwise provided for.

We reserve the right to revise this Privacy Policy at any time and without prior notice. Any changes will be effective immediately upon posting the revised Privacy Policy on Our Website, with the updated date displayed at the top. Your continued use of Our Services after any changes to this Privacy Policy signifies Your acceptance of the updated Terms. We recommend that You periodically review this Privacy Policy to stay informed about Our data handling practices.

This Privacy Policy applies only to Spada’s Platforms and Services. The privacy policies of third-party properties or applications that may be accessed through Spada’s Platforms or Services will govern the information obtained from You by these third parties in those contexts. We encourage You to review the privacy policies of these third-party websites and applications before providing any personal data. We are not responsible for the privacy practices or content of third-party websites or applications.

1. Type of Personal Data We Collect.

1.1 When Data is Collected

We process Personal Data based on (i) Your consent where required, and/or (ii) other legal bases permitted under the PDPL (including where processing is necessary to perform a contract to which You are a party, or to comply with applicable law).

When You use Our Platforms, We may collect personal data from or about You. In particular, We collect information You provide when You:

  1. fill in any forms, including contact forms, registration forms, or payment forms;
  2. open an account and register to use the Platforms, including the Personal Data (as defined below);
  3. make a purchase from Us;
  4. speak with a member of Our customer support team (either on the phone or through the Platforms), including call recordings and transcripts;
  5. access any websites from Our Platform;
  6. search about any service or product on the Platform;
  7. click on listings or advertisements banners, and when You interact with such advertisements or listings; and
  8. Contact Us for any other reason, including correspondence and feedback.

1.2 Type of Data Collected

We may collect Your personal information that You have left with Us by (i) using Our Platforms, (ii) subscribing to Our Platform, (iii) attending an event prepared by Us, or (iv) any other medium linked to Us (“Personal Data”). Likewise, You may choose to link Your bank account to pay for purchases (or receive payment in the case of Service Provider) through a third-party service available through the Platform.

For the collection and Processing of Your Payment Data, including payment card details, We shall obtain Your explicit consent at the point of collection, ensuring such data is processed only to the extent necessary to complete Your transactions. We do not copy or retain official identification documents where individuals are identifiable unless required by applicable law or requested by a competent public authority, and we will limit any such processing to the minimum necessary.

We also receive information from Our Service Providers about You. This information can include (i) customer service interactions, (ii) payment information, and (iii) shipping information.

Your Personal Data may include but is not limited to, the following: first and last name, phone number, email address, address details, and credit/debit card details on the checkout page as set out in these Terms.

Moreover, in order to improve Your online experience at Spada, We have implemented impression reporting. While You view Our Services and navigate our Platform, We gather Global Unique Identifier (GUI), HTTP request data like, user agent, IP, host, URL, country/continent from which the request is made, browser info, device/operating system/operating system version.

We collect transaction information related to the use of our services, including the order details, delivery information, date and time the service was provided, amount charged, distance traveled, and payment method. We collect data about how users interact with our services. This includes data such as access dates and times, app features or pages viewed, app crashes and other system activity, type of browser, and third-party sites or services used before interacting with our services. In some cases, we collect this data through cookies, pixels, tags, and similar tracking technologies that create and maintain unique identifiers.

2. Cookies and Similar Technologies.

  1. A browser cookie (“Cookies”) is a small piece of data that is stored on Your device to help websites remember things about You. Other technologies, including web storage and identifiers associated with Your device, may be used for similar purposes. In this Privacy Policy, We use Cookies to refer to all of these technologies.
  2. Like most online services and websites, We may use Cookies and other technologies, such as web beacons, web storage, and unique advertising identifiers, to collect information about Your activity, browser, and device.
  3. We may also use these Cookies to collect information when You interact with the services We offer through Our partners, such as advertising and commerce features. Most web browsers are set to accept Cookies by default. You can choose to remove or reject browser Cookies through the settings on Your browser or device. Keep in mind, though, that removing or rejecting Cookies could affect the availability and functionality of Our Platforms.
  4. Like most providers of online services, Spada uses Cookies for a number of reasons, such as protecting Your data, helping Us see which features are most popular, counting visitors to a page, improving Our users’ experience, keeping Our Platforms secure, and generally providing You with a better, more intuitive and satisfying experience. The Cookies We use generally fall into one of the following categories:
    1. preferences: We use these Cookies to remember Your settings and preferences (For example: language);
    2. security: We use these Cookies to help identify and prevent security risks (For example: to store Your session information to prevent others from changing Your password without Your username and password);
    3. performance: We use these Cookies to collect information about how You interact with Our Platforms and to help Us improve them (For example: to determine if You have interacted with a certain page);
    4. analytics: We use these Cookies to help Us improve Our Platforms (For example: to learn more about which features are the most popular with Our Users and which ones might need some tweaks); and,
    5. advertising: We use these Cookies to deliver advertisements, to make them more relevant and meaningful to consumers, and to track the efficiency of Our advertising campaigns on Our Platforms.
  5. We use a cookie banner to obtain your consent for non-essential cookies where required, and to allow you to withdraw or modify your choices at any time
  6. Cookies collected by third parties for analytics and targeted third-party advertising on Our Platform are subject to separate own privacy policies.

3. Use of Personal Data.

We will only use Your Personal Data when the law allows Us to. We process Your Personal Data based on the following legal grounds:

  • Processing is necessary to perform Our obligations under the Terms and Conditions to which You are a party.
  • Processing is necessary for Our legitimate interest in ensuring the security of Our Platforms and the integrity of User accounts, provided such interests do not override Your fundamental rights.
  • Processing is required to comply with the laws of the Kingdom of Saudi Arabia or orders from competent judicial or regulatory authorities.
  • We rely on Your freely given, specific, and clear consent. You have the right to withdraw this consent at any time.

Most commonly, We will use Your Personal Data for the following purposes:

  1. processing applications and transactions;
  2. accessing Our Platform and receiving Services;
  3. verifying Your identity (such as when You access Your account information);
  4. preventing fraud and enhancing the security of Your account or Our Platforms;
  5. responding to Your requests and communicating with You;
  6. managing Your preferences;
  7. performing analytics concerning Your use of Our Platforms, including Your responses to Our emails and the pages and advertisements You view;
  8. providing You with tailored content and marketing messages;
  9. operating, evaluating, and improving Our business (including developing new products and Services; improving existing products and Services; performing data analytics; and performing accounting, auditing, and other internal functions);
  10. sending You information about Our Platforms, or promotional marketing communication;
  11. administering Your account, servicing Your account, or contacting You when necessary;
  12. complying with and enforcing applicable legal requirements, relevant industry standards, contractual obligations, and Our policies; and
  13. to provide customer care and support
  14. to monitor Your usage of Our Platforms
  15. to perform internal operations necessary to provide Our services, including troubleshooting software bugs and operational problems; conducting data analysis, testing, and research; and monitoring and analyzing usage and activity trends.
  16. We may use the personal data we collect to investigate or address claims or disputes relating to use of Our Platforms, or as otherwise allowed by applicable law, or as requested by regulators, government entities, and official inquiries.
  17. for any other purposes that We may specifically disclose at the time You provide or We collect Your information.

We may also use data that We collect on an aggregate or anonymous basis (such that it does not identify any individual user) for various business purposes, where permissible under applicable laws and regulations.

Where we request Personal Data, we will indicate which fields are mandatory to provide the service and which are optional. If You do not provide mandatory Personal Data, we may be unable to (i) create/maintain Your account, (ii) process orders, or (iii) provide support, as applicable.

If You no longer wish to receive any communications from Spada, You can opt-out by following the instructions contained in the e-mails You receive or by contacting Us at info@spadadrinks.com

4. Sharing of Your Data.

We are committed to protecting Your privacy and will not disclose Your Personal Data to any third-party, unless required by law or as explicitly stated in this Privacy Policy. We will not rent, sell, or otherwise share Your information with any unauthorized third-party without Your explicit consent.

Parties with whom We may share Your Data:

  1. Our corporate entities. We may share Your information with Our corporate entities including any holding company, group company, and subsidiary (“Group Company”);
  2. Third parties. We may share Your information with the following with:
    1. with third parties we use to help deliver Services to You,
    2. other third parties we use to help us run our business ( for example, marketing agencies or website hosts), and
    3. third parties approved by you (for example, social media sites you choose to link your account to or third-party payment providers).
      We engage service providers to support Platform operations. We contractually require them to process Personal Data only on our documented instructions, implement appropriate security measures, and not use the Personal Data for their own purposes.
  3. Where required, we will enter into data processing agreements with such parties and implement appropriate contractual and technical safeguards, including confidentiality, access controls, and restrictions on onward transfers.
  4. Law enforcement authorities, regulators, and others. We may share information about You if We reasonably believe that disclosing the information is needed to:
    1. comply with any valid legal that includes court orders and legal matters such as subpoenas and search warrants, governmental requests, or applicable law, rule, or regulation ;
    2. investigate, remedy, or enforce potential violations of the Terms and Conditions;
    3. protect the rights, property, and safety of Us, You, or others;
    4. detect and resolve any fraud or security concerns.
  5. Third parties as part of a merger or acquisition. If Spada gets involved in a merger, asset sale, financing, liquidation or bankruptcy, or acquisition of all or some portion of Our business to another company, we may share Your information with that company before and after the transaction closes.
  6. Publicly available information. Please be aware that any personal information You publicly disclose on Our Platform, if any, may be visible to other Users and could potentially be shared with third parties. While We make reasonable efforts to ensure the privacy and security of Your personal information, We cannot guarantee the actions of other Users. We recommend that You exercise caution when disclosing personal information and consider the potential risks of doing so.
  7. Advertising and analytics providers. In order to improve Our Services, We will sometimes share Your non-identifiable information with analytics providers that help Us analyze how users are using Our Platform. We share Your information with them in a non-identifiable form for monitoring and reporting the effectiveness of the campaign delivery to Our business partners and for internal business analysis.
  8. with Spada. We may share Your information
    1. in order to enhance and optimize Our Services on the Platform by collecting analytics and metrics to better understand Your behavior, Your preferences, and interests. This includes tracking Your activity on the Platform, such as the amount of time You spend on the Platform and how You use it. By analyzing this information, We are able to make suggestions and recommendations about Services that may be of interest to You. Rest assured that any data collected is handled in accordance with Our Privacy Policy and applicable laws and regulations,
    2. with regard to all credit/debit cards details and personally identifiable information, this information will not be stored, sold, shared, rented, or leased to any third parties. Services Providers will not have access to any debit/credit card details. Spada follows the industry’s standards to protect Your details during transmission and once received, but You should be aware that no method of electronic transmission or storage is 100% secure. We can therefore not be held responsible for the unlikely circumstances where information is accessed without authorization. Spada is connected to a payment gateway as per the Terms posted on Our Platforms; and
    3. for the purpose of enhancing Your experience on Our Platform, such as displaying advertisements relevant to Your location. We strive to personalize Our Services using this information, as well as collect anonymous and aggregated statistics about the characteristics and behavior of Our Platform. Additionally, We monitor Your interaction with third-party ad banners placed on Our Platform to evaluate and improve their effectiveness.

5. Storage and Processing.

We will retain Your information in accordance with Our internal records retention and management policies and procedures, including as necessary to provide You with the Platforms or administer Your Spada account, or as long as necessary to comply with Our legal obligations, resolve disputes, reserve Our legal rights, and enforce Our agreements. We maintain a record of processing Activities as required by applicable law, which documents the purposes, categories, recipients, and safeguards related to our processing of Personal Data.

We are committed to using Your Personal Data only for the specific purposes We collected it unless We determine that We have a legitimate reason for using it for a different purpose that is compatible with the original purpose. If We need to use Your Personal Data for an unrelated purpose, We will notify You and explain the legal basis for doing so. In some cases, We may process Your Personal Data without Your knowledge or consent if it is required or permitted by law, but We will always do so in compliance with applicable laws and regulations. If You have any questions or concerns about Our use of Your Personal Data, please don’t hesitate to contact Us

We aim to collect only what We need, keep it up-to-date, and remove it when We no longer need it.

We take reasonable steps to ensure that the personal information We process is (i) limited to what We require in connection with the purposes set out in this Privacy Policy, (ii) accurate, (iii) where necessary, kept up to date; and (iv) is erased or rectified without delay if it is inaccurate. From time to time, We may ask You to confirm the accuracy of Your Personal Data.

We may transfer Personal Data outside the Kingdom or disclose it to a party outside the Kingdom only where permitted under the PDPL and applicable implementing regulations, including where necessary to perform obligations to which You are a party or for other permitted purposes, and subject to: (i) no prejudice to national security or vital interests of the Kingdom; (ii) ensuring an adequate level of protection equivalent to PDPL standards; and (iii) limiting the transfer/disclosure to the minimum necessary.

We use commercially reasonable safeguards to help keep the information collected through the Platforms secure and take reasonable steps (such as requesting a unique password to verify Your identity before granting You access to Your account). However, We cannot ensure the security of any information You transmit to Us or otherwise guarantee that information on the Platforms may not be accessed, disclosed, altered, or destroyed.

We retain Personal Data only for the period necessary to achieve the purposes described in this Privacy Policy, unless a longer period is required by applicable law. Retention periods are determined based on the category of data, the purpose of processing, statutory retention obligations, and limitation periods for claims.

You are responsible for maintaining the secrecy of Your unique password and account information, and for controlling access to emails between You and Spada, at all times.

6. Your Rights

As a data subject, You are entitled to exercise the following rights, at any time:

  • Right to be Informed. You have the right to be informed about how Your Personal Data is collected and processed and, its purposes.
  • Right of Access and to Request a Copy: At Spada, We understand the importance of transparency and Your right to access Your Personal Data. You have the right to access certain Personal Data associated with Your account by visiting Your account privacy settings. Additionally, You can request a copy of Your Personal Data in an easily accessible format, as well as information explaining how that data is used. We are committed to providing You with the necessary tools to manage and understand Your Personal Data.
  • Right to Correction: We want to ensure that Your Personal Data is accurate and up-to-date. If You believe that We hold inaccurate information about You, You have the right to request that We rectify it. You can correct and change certain Personal Data associated with Your account by visiting Your account settings. We strive to maintain the accuracy of Your Personal Data and are committed to promptly addressing any inaccuracies that You may identify.
  • Right to Restrict Processing: At Spada, We understand that You may want to limit the ways in which We process Your Personal Data. In certain cases, You have the right to: restrict or limit the ways in which We use Your Personal Data. We are committed to respecting Your privacy rights and will work with You to ensure that Your Personal Data is processed in accordance with Your preferences and applicable laws and regulations.
  • Right to withdraw Your consent to processing (for Marketing and Profiling): Where Your consent serves as the legal basis for processing – this will not affect the lawfulness of the processing carried out prior to Your withdrawal
  • Right to Destruction To request the destruction of Your Personal Data when it is no longer needed for the purposes of collection.

We strive to ensure that the personal information You provide on Our platform is accurate and up to date. You may access and update Your personal information, including Your user profile, at any time. We encourage You to review Your Personal Data regularly and make any necessary updates to ensure its accuracy and completeness.

We will respond to rights requests within 30 days from receipt, and we may extend once by an additional 30 days where necessary, in which case we will notify You with reasons

7. Data Deletion

We respect Your right to privacy and are committed to ensuring that Your Personal Data is processed lawfully, fairly, and transparently. If You wish to delete Your Personal Data, please send an email to info@spadadrinks.com. While We will make every effort to comply with such requests, please note that there may be circumstances where We cannot delete Your Personal Data due to legal, regulatory, or compliance requirements. If we cannot comply with a deletion request due to legal/regulatory requirements, we will inform You of the reason and the applicable retention period, unless we are legally prohibited from doing so. Where applicable, we will take reasonable steps to notify recipients to whom Personal Data has been disclosed and request its destruction, and we will destroy copies in our systems (including backups) in accordance with applicable regulatory requirements.

To ensure that We delete the correct Personal Data, We may require proof of Your identity before deleting any information. We reserve the right to refuse the deletion of Your identity cannot be established or if We have a legitimate reason for retaining the data. We will notify you if we cannot comply with Your request to delete Your Personal Data, explaining the reasons why.

We will retain Your Personal Data for the duration of Your relationship with Us. Following the termination of Your account, We will retain data only as required to comply with statutory retention periods or until the purpose of collection is satisfied, after which the data will be destroyed or anonymized. If We cannot delete Your Personal Data due to legal, regulatory, or compliance requirements, We will inform You of the reasons why We must retain the data, and for how long.

Please note that deleting Your Personal Data may affect Your ability to use Our Services or Platform, and We will not be liable for any loss or damage arising from the deletion of Your Personal Data.

8. Your Responsibilities

If You are a Service Provider, selling or delivering Our Services, You may receive and be responsible for certain Personal Data.

9. Mobile Push Notifications/Alerts:

We respect Your right to control how We communicate with You and will only send push notifications or alerts to Your mobile device with Your explicit consent. You can deactivate these messages at any time by changing the notification settings on Your mobile device.

We take Your privacy seriously and will only use Your Personal Data to provide You with the Services You have requested. We will not share Your personal data with third parties for marketing purposes without your explicit consent, except as otherwise mentioned in this Privacy Policy.

10. Email Marketing

We offer electronic newsletters to which You may voluntarily subscribe at any time. We are committed to keeping Your e-mail address confidential and will not disclose Your email address to any third parties except as allowed in the storage and processing or for the purposes of utilizing a third-party provider to send such emails. We will maintain the information sent via e-mail in accordance with applicable laws and regulations.

We will only send marketing communications to You using Your personal means of communication (including email) where we have obtained Your prior consent, and each message will include a clear opt-out mechanism. You may withdraw consent at any time as set out in this Privacy Policy, and we will implement withdrawal without undue delay.

All e-mails sent from Us will clearly state who the e-mail is from and provide clear information on how to contact the sender. You may choose to stop receiving Our newsletter or marketing emails by following the unsubscribe instructions included in these emails or by contacting Us. However, You will continue to receive essential transactional emails.

To stay informed, We strongly recommend You keep Your Email notifications activated. You can choose to stop being sent an email notification but please be aware that if You have placed an order or are expecting a response to a message You have sent, You will need to actively check Your account for messages.

11. Security Measures

We have implemented and will maintain appropriate technical and organizational measures to safeguard the Personal Data that We control from unauthorized or unlawful processing, accidental loss, destruction, damage, alteration, or disclosure. We will promptly notify You and any applicable supervisory authority of any data security breach in compliance with Our legal obligations.

You are solely responsible for maintaining the confidentiality of Your account details, including Your password. If You have any concerns about the security of Your account, You must inform Us immediately. We reserve the right to deactivate or suspend Your account at any time, without notice, if We suspect any unauthorized use of Your account or a breach of Our Terms.

In the event of a Personal Data Breach, we will notify the competent authorities in KSA within 72 hours of becoming aware of it, and we will notify affected data subjects without undue delay where the breach is likely to cause harm, in each case as required by applicable law. Such notifications will include the information required by law (including breach description, likely impacts, mitigation measures, and contact point).

12. Your Opinion Matter to Us

We have appointed an officer to oversee Our data privacy and protection practice. If you’re not satisfied with the way we process your personal data, and if You have any questions or concerns about this policy or Our privacy practice, You may contact Us directly at: info@spadadrinks.com. You also have the right to lodge a complaint directly with the competent authorities. We will cooperate with the authorities in the resolution of any complaint.

13. Payments Details

In case of Services requiring payment, We accept credit/debit cards used solely for processing payments. Payments are processed by our third-party payment gateway(s). Spada does not store full payment card numbers on its systems; payment card data is handled by the payment gateway in accordance with applicable security standards. We retain only limited transaction metadata necessary for reconciliation, refunds, chargebacks, fraud prevention, and legal/compliance purposes.

Where necessary for processing future payments and subject to Your prior consent, Your financial information will be stored in encrypted form on secure servers of Our Payment Gateway service provider who is beholden to treating Your Personal Data in accordance with this Policy.

14. Children Privacy

Spada is fully committed to complying with all applicable laws and regulations related to the protection of minors. As such, we expressly state that We do not knowingly collect or solicit any information from anyone under the age of 18, nor do We allow such persons to register and use the Platforms. It is the sole responsibility of any individual under the age of 18 to obtain the express consent of their parents or legal guardians prior to accessing or using the Platforms. We strongly recommend that parents or legal guardians supervise minors while they access or use the Platforms. In the event that We discover that Personal Data has been collected from an individual under the age of 18 without parental or legal guardian consent, We will take immediate steps to remove the information from Our servers.

15. Other Websites and Services.

We are not responsible for the practices employed by any websites or services linked to or from Our Platforms, including the information or content contained within them. Please remember that when You use a link to go from Our Platforms to another website or service, Our Privacy Policy does not apply to those third-party websites or services. Your browsing and interaction on any third-party website or service, including those that have a link on Our Platforms, are subject to that third party’s own rules and policies.

In addition, You agree that We are not responsible and do not have control over any third-parties that You authorize to access Your Spada account. If You are using a third-party website or service and You allow them to access Your Spada account, You do so at Your own risk.

16. Amendments to the Privacy Policy

Spada has the right to amend the Privacy Policy at any time if necessary, and the date will be updated to the last amendment at the bottom of this page. In the event of material changes to the purposes of Processing or Your rights, We will provide You with prior notice through the Platform or via email before the changes take effect, ensuring Your Right to be Informed is upheld. We invite Our users to follow this page periodically to stay abreast of the latest changes and how we protect their personal data. Your continued use of the Platform after we publish updates means you have been notified of the updated Privacy Policy.

17. How to Contact Us.

If You have any questions or comments about this Privacy Policy or the Platforms, You may contact Us through the following email address info@spadadrinks.com or on the Platforms directly through the CONTACT US section.

Spada – Masafi Plant for Water Processing is the controller responsible for the Processing described in this Privacy Policy. Our registered address is Al Haer dist. Riyadh, Saudi Arabia and our national address is RMHD3897. You may contact us at info@spadadrinks.com for privacy enquiries.

Last Updated: 29th Jan 2026

1. Information Collection

  • Spada Drinks collects personal information such as name, email, address, and payment details when users make a purchase.
  • We do not store or share credit/debit card details with third parties.

2. Data Security

We implement security measures to protect user information. However, we cannot guarantee the absolute security of any information disclosed online.

3. Third-Party Links

Masafi Water Factory – Spada

CR: 1010611629

VAT: 3103028902

Riyadh Third Industrial City.: PO Box:15394 Al Hair Street,3rd Industrial City Riyadh, 14559 Saudi Arabia Sparki Factory Our website may contain links to third-party sites. Spada Drinks is not responsible for the privacy practices of these sites.

4. Advertisement Policy

Some advertisements on our site may be provided by third-party ad networks, which may collect user data. Users should refer to the privacy policies of these third-party advertisers.

Information

Company

Sparkling Water