Customer Policy

Privacy Policy

This policy explains what personal information Leffah collects when you use our website or mobile app, why we collect it, who we share it with, and what control you have over it.

Last updated: 17 August 2026

Information We Collect

How We Use Your Information

Sharing & Disclosure

Service providers

We share only what is necessary with the partners who help us run the service: restaurants and stores fulfilling your order, delivery couriers, payment processors, SMS and email providers, hosting and analytics providers. They may use your data only for the task we've given them.

We do not sell your data

We do not sell or rent your personal information to third parties for their own marketing.

Legal and safety disclosures

We may disclose information when required by law, a court order, or a request from a competent authority, or where it is necessary to protect our rights, our staff, or the safety of others.

Business transfers

If our business is sold, merged, or restructured, customer data may transfer to the new owner under the same protections described here.

Data Security & Retention

We protect your information with encrypted connections (HTTPS), restricted staff access on a need-to-know basis, secured databases, and payment handling through a certified provider so card details never sit on our servers.

No system is completely secure, so we cannot promise absolute protection — but if a breach affects your data, we will notify you and the relevant authority as required by law.

We keep your data only as long as we need it: account and order records for as long as your account is active and for the period tax and commercial regulations require afterwards, and marketing consents until you withdraw them.

Cookies & Tracking

We use cookies and similar technologies for three purposes:

You choose. Analytics and marketing cookies are set only if you accept them in the cookie banner, and you can change your choice at any time. Your browser settings can also block or delete cookies, though blocking essential ones will stop parts of the site working.

Your Rights & Choices

Under the Personal Data Protection Law of the Kingdom of Saudi Arabia — and, where they apply to you, laws such as the GDPR — you have the right to:

To exercise any of these, email us at [email protected] from the address on your account, or contact us on the number below. We respond within 30 days. If you're not satisfied with our response, you may raise a complaint with the competent data protection authority.

Children's Privacy

Our service is intended for adults. We do not knowingly collect personal information from children without the consent of a parent or guardian. If you believe a child has given us their information, contact us and we will delete it.

Changes to This Policy

We may update this policy as our service or the law changes. The date at the top of this page always shows the current version, and we recommend checking it from time to time. If a change materially affects how we use your data, we will tell you through the app, by email, or with a notice on the site.

Contact Us

Questions about your privacy, or want to exercise one of your rights? Reach us directly: