Privacy Policy

Last Updated: October 12, 2026

1. Who We Are

Area 13 is an online store for construction and building materials serving the Kingdom of Saudi Arabia. It is operated by AREA 13 DEVELOPMENT Company For Trading (شركة آريا 13 ديفيلوبمينت للتجارة), a single-person limited liability company registered in the Kingdom of Saudi Arabia — Commercial Registration No. 7055365667 — with its registered address at Building 4176, Al Sulmaniyah 57 St, Al Salmaniyah Dist., Additional No. 6631, Ad Diriyah 13717, Kingdom of Saudi Arabia ("Area 13", "we", "us").

Area 13 is the controller of your personal data under the Personal Data Protection Law (PDPL) and its Implementing Regulations. This policy explains what personal data we collect, why, who receives it, how long we keep it, and the rights you have.

For any privacy question or request, contact us at privacy@areathirteen.com.

2. Personal Data We Collect

Data you give us

• Account details: your name, email address, phone number, and password (stored only in hashed form).
• Addresses: the delivery and billing addresses you save or enter at checkout, including national address details and site notes for the courier.
• Business details: if you buy for a business, its legal name, Commercial Registration number, VAT number, and national address, so we can issue tax invoices in its name.
• Orders and quotes: what you buy or request a quote for, quantities, specifications, prices, and your order history.
• Payments: card payments are handled by our payment processor; we never see or store your full card number. For bank transfers we keep the transfer reference, the receipt you upload, and, for a refund by transfer, the bank account you give us.
• Messages: what you send us through the contact form, support conversations, quote conversations with suppliers, order and return messages, reviews, and the support assistant (Buildo).
• Supplier applications: if you apply to supply goods to Area 13, the company, ownership, and contact information, identity and company documents, bank details, and signatures you submit. See Section 6.

Signing in with Google

If you choose Continue with Google, Google shares with us only your Google account ID, your email address and whether Google has verified it, and your first and last name. We request no other Google permissions and have no access to your Google password, contacts, files, or any other Google data. We use this information only to create your Area 13 account, sign you in, and contact you about your orders. We do not sell it, use it for advertising, or use it to train AI models, and we share it only as described in Section 4. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect Area 13 at any time from your Google Account at myaccount.google.com/connections, and you can ask us to delete your account as described in Section 9.

Data collected automatically

• Technical data: IP address, browser and device type, and the pages you request — needed to run and secure the Platform.
• Preferences: choices such as your language and display currency.
• Server error reports: when a request fails on our servers, we record the technical details of the error — which part of our code failed, the page address without its query string, and the time — so we can fix it. These reports never include what you typed or submitted, your account details, or your cookies.
• Usage and browser diagnostics: which pages are visited, and errors and session replays recorded in your browser — only if you allow analytics cookies. See our Cookie Policy.

3. Why We Use It and On What Basis

We do not sell your personal data. We do not make decisions that produce legal effects for you based solely on automated processing.

4. Who Receives It

We share only what each recipient needs for the purpose stated.

• Suppliers receive the order details they need to prepare and dispatch the goods. Where a supplier or its courier delivers to you, it also receives your name, delivery address, and phone number. Suppliers act on Area 13's instructions, may use this data only to fulfil your order, and are bound to protect it.
• Couriers and freight carriers receive your name, delivery address, phone number, and the shipment details.
• Banks that process bank transfers receive the details needed to send or match a transfer.
• Companies of the Area 13 group that make a payment on Area 13's behalf — a refund by bank transfer or a payment to a supplier — such as its parent company, IWOOT LTD (United Kingdom), and their banks receive the payee's name, bank account details, and the amount, only to make that payment. Area 13 remains responsible for your data.
• Service providers that process data on our instructions:
  • Stripe — card payments
  • Twilio — SMS verification codes to numbers outside Saudi Arabia
  • Taqnyat (Saudi Arabia) — SMS verification codes to Saudi numbers, which receive your phone number and the code
  • Google — sign-in with Google (if you choose it), address validation, and (only with your consent) site analytics
  • Google (Perspective API) — automated moderation of the text of reviews and review replies you post
  • Sentry — error diagnostics: errors on our servers (technical details only, never what you submitted) and, only with your consent, errors and session replays in your browser
  • Anthropic — the Buildo support assistant, which receives the conversation you have with it. We will update this policy before the assistant uses any other provider.
• Government authorities, including the Zakat, Tax and Customs Authority (e-invoicing, VAT, and customs), and other authorities when Saudi law requires us to disclose information.

Stripe also acts as an independent controller for the fraud-prevention and anti-money-laundering checks it is legally required to run on card payments.

5. Transfers Outside Saudi Arabia

Several of the providers above are based outside the Kingdom (in the United States and the European Union), and a group company that makes a payment on Area 13's behalf may be in the United Kingdom, so some of your data is processed abroad. We transfer only the data each provider needs for the purpose listed, and we make these transfers in line with the PDPL and the Regulation on Personal Data Transfer outside the Kingdom: on the grounds that regulation permits (such as performing our contract with you) and with appropriate safeguards, such as contractual data-protection commitments, where they are required. Transfers are kept to the minimum needed and are reviewed when a provider changes.

6. Supplier Applicants and Suppliers

If you apply to supply goods to Area 13, or act for a company that does, we process the company's registration and tax details, the names, nationalities, dates of birth, and identity documents of its owners and authorised signatory, contact details, bank details, and the signatures on its supply agreement. We use them to assess the application, to verify identity and ownership, to screen the company and the people connected to it against applicable sanctions lists before approval and periodically afterwards, to pay the supplier (including through a group company that pays on Area 13's behalf, which then receives the payee and bank details it needs), and to meet our tax and anti-commercial-concealment obligations. The legal basis is taking steps to enter and perform the supply contract, compliance with legal obligations, and our legitimate interest in preventing fraud and financial crime. Documents are stored privately and shown only to authorised staff.

7. How Long We Keep It

When you ask us to delete your data, records we must keep by law are anonymised — your name and contact details are removed — rather than deleted.

8. How We Protect It

Your data travels over encrypted connections, passwords and verification codes are stored only as hashes, and uploaded identity and business documents are stored privately and shown only to authorised staff. Access is limited to staff who need it for their role. If a personal-data breach occurs, we notify the Saudi Data and Artificial Intelligence Authority (SDAIA) within 72 hours of becoming aware of it where the law requires, and we notify you without undue delay if it may harm you, with advice on steps you can take.

9. Your Rights

Under the PDPL you have the right to:

• Be informed about how your data is collected and used — which is what this policy does.
• Access your personal data and obtain a copy of it in a clear and readable format.
• Correct data that is inaccurate, incomplete, or out of date. Most account details can be edited directly in your account.
• Have your data destroyed when it is no longer needed, subject to the records the law requires us to keep.
• Withdraw your consent at any time — for cookies, through Privacy choices in the site footer; for marketing, through the link in any message. Withdrawal does not affect processing that took place before it.

You can make most requests yourself: after signing in, open My account → Profile → Your data & privacy to request a copy of your data or the deletion of your account, and follow the request there. You can also email privacy@areathirteen.com from the address on your account. We may need to confirm your identity before acting on a request. We respond within 30 days; if a request is complex and the regulations allow more time, we tell you why and when to expect our answer. If you are not satisfied with our answer, you may complain to the Saudi Data and Artificial Intelligence Authority (SDAIA).

10. Children

Area 13 is intended for adults. You must be at least 18 years old to create an account or place an order, and we do not knowingly collect data from children.

11. Changes to This Policy

When we change this policy we update the date at the top of this page. If a change materially affects how we use your data, we tell you before it takes effect, and ask for your consent again where the law requires it.

12. Contact Us

AREA 13 DEVELOPMENT Company For Trading, Building 4176, Al Sulmaniyah 57 St, Al Salmaniyah Dist., Additional No. 6631, Ad Diriyah 13717, Kingdom of Saudi Arabia

• Email: privacy@areathirteen.com
• Phone: +966 56 04 100 13