Effective date: upon publication of the approved version | Last updated: 11 September 2026

1. Who we are

Psh Global Shopping and Shipping Company operates PSH — Personal Shopper Hub through psh-app.net, its applications and related services. PSH connects customers with independent personal shoppers and provides tools for requests, offers, communication, payment workflows, tracking, protection and disputes.

Data controller: Psh Global Shopping and Shipping Company, National Number 7051707243, registered address: Building 3757, Enabah Ibn Marqad Street, Wadi Mudhanib District, Secondary No. 7311, Madinah 42364, Kingdom of Saudi Arabia, privacy contact psh@psh-app.net, Privacy requests currently use the contact above until a dedicated officer is appointed where required.

2. Scope

This Policy applies to website visitors, app users, customers, personal shoppers, travelers, creators and support requesters. Payment, shipping, identity-verification and external sign-in providers may apply their own privacy policies.

3. Information we collect

Account and identity data, including contact details, location, profile details, date of birth, photographs and verification documents when required.

Order and transaction data, including requests, offers, products, prices, shopper fees, tax, shipping, payment status, refunds, protection, disputes and evidence.

Payment data. PSH is not designed to store full card numbers or security codes. A licensed payment provider processes payment credentials; PSH may receive references, status, limited card descriptors and reconciliation or fraud-prevention data.

Shipping and location data, including pickup and delivery addresses, recipients, selected location, tracking, proof of delivery, dimensions, weight and customs information.

Content and communications, including messages, posts, comments, ratings, stories, live content, reports and support records. Call metadata may include participants, timestamps, duration and status; content is not recorded unless disclosed and lawfully authorized.

Technical data, including IP address, device, operating system, identifiers, security logs, cookies, performance, crashes and login attempts.

4. Purposes and legal bases

We process data to create accounts, perform contracts, match requests and offers, enable communication, payments and shipping, operate Golden Protection, resolve disputes, prevent fraud, keep users safe, provide support, improve performance and comply with law.

Depending on the context and applicable law, processing relies on contract, consent, legal obligation or legitimate interests that do not override individual rights. Consent may be withdrawn prospectively.

5. Sharing and disclosures

We share the minimum necessary information with transaction counterparties, payment, shipping, verification, hosting, analytics, support and communication providers, advisers, and authorities where a lawful basis applies.

We do not sell personal data for money. Material changes to sharing practices will be disclosed with any choices required by law.

6. International transfers

As a global service, information may be processed outside the user's country. We apply applicable cross-border transfer requirements and appropriate safeguards, including necessity and risk assessments where required.

7. Retention and deletion

We retain data only as necessary for the stated purpose, contract performance, settlement, disputes, fraud prevention, accounting and legal duties. We then delete or de-identify it unless retention remains required or permitted.

8. Your rights

Depending on applicable law, you may request information, access, a copy, correction, deletion, withdrawal of consent, objection or restriction, and may lodge a complaint. We verify identity before acting and respond within legally required periods. Saudi requests are generally handled within 30 days, subject to a permitted extension and notice.

Privacy requests: psh@psh-app.net.

9. Security

We apply proportionate technical and organizational controls, including encryption in transit, access control, administrator MFA, security logging, backups, secret management, monitoring and testing. No electronic system can be guaranteed completely secure.

10. Cookies

We may use strictly necessary session and security cookies and, once enabled, preference and analytics tools. We will provide notices and consent choices where required, with a launch-ready cookie schedule listing purposes, providers and durations.

11. Children

Transaction services are intended for people aged 18 or the age of contractual capacity in their country. Minors may only use transactional features through a parent or guardian where lawful. We will delete a child's information collected without an appropriate basis when identified.

12. Changes and contact

We may update this Policy as the service or law changes. We will state the revision date and give additional notice for material changes. Contact: Building 3757, Enabah Ibn Marqad Street, Wadi Mudhanib District, Secondary No. 7311, Madinah 42364, Kingdom of Saudi Arabia, psh@psh-app.net, psh@psh-app.net.