Privacy Policy

Rayanz Sandbox is a digital products brand operated by Rayan AlMalki, an independent freelancer based in the Kingdom of Saudi Arabia. Rayan AlMalki is the data controller responsible for the personal information described in this policy. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit our storefront at https://rynzsbx.com, contact us, or purchase our products.

Depending on how you interact with our store, we may collect:

Contact details: your name and email address.

Order details: products purchased, order references, purchase dates, and amounts paid.

Tax information: your billing country and location information (such as IP address) used to calculate applicable taxes.

Communications: information you provide when you contact us.

Technical data: IP address, browser and device information, and cookie data collected through our storefront and its service providers.

Payments are handled by third-party payment providers. We do not receive or store your full payment card details.

We use personal information to process orders and deliver purchased products, send purchase confirmations, provide customer support, and resolve order issues. Where applicable law recognizes this basis, these activities are necessary to perform our contract with you or take steps at your request before a purchase.

We also process information to meet applicable tax, accounting, and other legal obligations. Marketing communications and optional cookies rely on consent where required by applicable law.

Security, fraud prevention, responding to general inquiries, and improving our products may rely on legitimate interests only where permitted by the applicable law and after any required assessment of necessity, proportionality, and the impact on your rights. Otherwise, we rely on another lawful basis or do not carry out that processing. The applicable legal basis depends on the activity and the law that applies; no listed basis overrides mandatory consent requirements.

We send product updates or marketing emails only if you choose to receive them. You can unsubscribe at any time using the link in any email. Unsubscribing does not affect your access to products you have purchased.

Our storefront operates on Whop. Checkout, payment and digital delivery are handled by Whop and the payment providers available at checkout, as displayed during your purchase. Accessing a purchase requires a Whop account. This policy does not imply that any particular provider is enabled. Whop and these payment providers process certain personal information under their own privacy policies, which we encourage you to review.

Whop uses cookies and similar technologies to operate the storefront, checkout, and digital delivery, and to measure visits to the storefront. Additional technologies may be used by enabled integrations. The cookies actually used depend on the storefront configuration and the services you use.

The storefront itself saves your language choice in a cookie and in your browser’s local storage so it can remember it on your next visit. It also loads its fonts from Google Fonts, which means your browser contacts Google’s servers when a page loads.

Where applicable law requires consent for non-essential cookies or similar technologies, that consent must be obtained before those technologies are used. This policy and continued browsing do not constitute consent. We do not represent that a preference centre, reject button, or consent withdrawal control is available on this storefront. Browser settings may help you control cookies, but blocking some cookies can affect store functions and is not a substitute for legally required consent. For Whop’s practices, see https://whop.com/privacy.

We share personal information only where reasonably necessary with Whop for storefront operation, payments, refunds and digital delivery; payment providers for payments and refunds; email providers if you opt in to marketing; professional advisers where needed for legal or tax compliance; and public authorities where required by law. Each recipient receives information relevant to its role. We do not sell or rent your personal information.

We retain personal information only for as long as needed for the purposes described in this policy and any applicable legal requirements. Order and transaction records are retained for the period required by applicable Saudi tax and accounting rules and, where necessary, to establish, exercise, or defend legal claims.

Support communications are retained while a request remains open and afterward only as needed to document its resolution, handle related disputes, or meet legal duties. Technical and security records are retained only for as long as necessary to investigate incidents, prevent fraud, and protect the storefront.

Marketing contact details are used until you unsubscribe or the relevant purpose ends. A minimal suppression record may be retained to respect your opt-out, and consent records may be retained where needed to demonstrate compliance. When information is no longer needed, we delete or anonymize it, subject to lawful retention requirements.

We take reasonable technical and organizational measures to protect your information. However, no online service can guarantee absolute security.

We operate from Saudi Arabia, and our storefront and payment providers may process data in other countries. Your information may therefore be processed outside your country of residence. International transfers must comply with applicable data protection laws, including Saudi requirements where applicable. Depending on the transfer, this may require an adequacy basis, appropriate safeguards, an assessment, or another permitted legal route. This policy does not itself provide consent to a transfer or establish that a particular safeguard is in place.

Depending on your location, you may have the right to:

Be informed about how your information is processed.

Access and obtain a copy of your personal information.

Request correction of inaccurate or incomplete information.

Request deletion of your information.

Withdraw consent at any time, where processing is based on consent.

Object to or restrict certain processing, and request data portability, where applicable law provides these rights.

To make a request, contact us using the details below. We respond within the period required by applicable law, generally within 30 days where that deadline applies. Any permitted extension will be communicated as required by law. We may need to verify your identity, and some information may need to be retained to meet legal obligations. You also have the right to lodge a complaint with the Saudi Data & AI Authority (SDAIA) or with another competent data protection authority where applicable law provides that right.

Rayanz Sandbox does not itself use automated decision-making or profiling that produces legal or similarly significant effects on you. Whop and payment providers may independently use automated security or fraud checks under their own policies; this statement does not describe their separate processing.

Our storefront is not directed at children under 16, and we do not knowingly collect personal information directly from them. Some products, such as activity books, are intended to be purchased by a parent or guardian for a child’s use. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps, including deletion where required and permitted by applicable law, subject to any lawful retention duties.

We may update this Privacy Policy from time to time. The latest version will always be available on this page with its revision date.

For privacy questions or to exercise your privacy rights, email support@rynzsbx.com or use the Contact page on our storefront: https://rynzsbx.com.

Please identify your request clearly and provide only the information needed for us to respond. Do not send payment card numbers, passwords, or other sensitive credentials. The data controller is Rayan AlMalki, operating Rayanz Sandbox in the Kingdom of Saudi Arabia.