Skip to content

Where should we deliver?

Choose the recipient’s city to see the earliest delivery and the fee.

العربية

Privacy policy

Nebula respects your privacy. This page explains what data we collect when you use our online store, why we collect it, who we share it with and how you control it. We follow the Personal Data Protection Law of Saudi Arabia.

What we collect

  • Order details: your name and mobile number, the recipient's name and mobile number, the city, district and address, the delivery time, the gift card text and link if you add one, and any notes you write.
  • Account: your mobile number when you sign in with the code we send by text message, and your order history.
  • Photos you upload: such as a design you would like or a photo you send to Jumana. They stay private: only the browser that uploaded them and the Nebula team can see them.
  • Your chat with Jumana: your messages to the store assistant and the page you write from.
  • Browsing data: the delivery city you choose, your cart, where your visit came from (such as an ad link) and technical data such as your IP address and browser type.

We never ask for or store your bank card details: you enter them directly in the payment provider's form.

Why we use it

  • To prepare and deliver your order, and to contact you or the recipient about it.
  • To sign you in and show your orders.
  • To answer your questions on WhatsApp or through Jumana.
  • To improve the site and measure ads, only if you agree in the cookie notice.
  • To meet legal obligations, such as keeping order and invoice records.

Cookies and your consent

On your first visit the "Your privacy, your choice" notice lets you accept all, reject all or choose each category:

  • Necessary: run the cart, checkout and sign-in, and remember your city and your privacy choice. Always on, because the store cannot work without them.
  • Analytics (Google Analytics): to understand how the site's pages are used. Only with your consent.
  • Marketing (Meta, TikTok and Snapchat, and the advertising features of Google's tools): to measure and improve ads. Only with your consent.

We keep your choice for 12 months. You can change it at any time from the "Privacy settings" link at the bottom of every page, or delete cookies in your browser settings.

Ad measurement and the purchase event

If you accept marketing, these platforms' measurement tools load in your browser, and our server sends them one "purchase" event after you complete an order. It carries the order value, products, city and delivery method, the ad identifiers the platform placed in your browser, your IP address and browser type. It never contains your name, mobile number or address. If you accept analytics, the purchase event also goes to Google Analytics. If you decline, none of this is sent.

Who we share data with

  • Payment providers: such as Moyasar for mada, cards and Apple Pay, and instalment companies such as Tamara or Tabby when available and chosen, only as needed to complete the payment.
  • Delivery: the recipient's name, mobile number, address and delivery time, only to whoever delivers your order.
  • Text messages: your mobile number, to the SMS provider that sends the sign-in code.
  • Jumana: your message and photo if you send one, with the delivery city, the product you are viewing and your cart, to OpenAI to write the reply, without your name or mobile number. Please do not write sensitive information in the chat.
  • Hosting: the site runs on Cloudflare's servers.
  • Ad and analytics platforms: as described above, only with your consent.
  • Authorities: when legally required.

We never sell your data.

Keeping and protecting data

We keep order data as long as needed to fulfil the order and serve you afterwards, and as long as the law requires. The connection to the site is encrypted, and access to order data is limited to the authorised Nebula team.

Your rights

You can ask for a copy of your data, its correction or its deletion, and withdraw your analytics and marketing consent at any time. We delete what can be deleted and keep only what the law requires. Message us from the contact page.

Updates to this policy

We may update this policy when our services or the law change, and we publish the update on this page.

Last updated: 9 November 2026