Privacy Policy

1. Introduction

At Milh ("we", "our", or "us"), a company registered in the Kingdom of Saudi Arabia, we are committed to protecting your privacy in accordance with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our restaurant management platform and related services.

2. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide, including:

• Name and contact information (email, phone number, address)
• Business information (restaurant name, location, Commercial Registration number)
• Account credentials (username, password)
• Payment information (processed securely through Saudi-licensed payment providers)
• Employee information for staff management features

Usage Information

We automatically collect certain information when you use our services:

• Device information (type, operating system, browser)
• IP address and location data
• Usage patterns and feature interactions
• Transaction and order data

3. How We Use Your Information

We use the collected information to:

• Provide and maintain our services
• Process transactions and send related information
• Send administrative information and updates
• Respond to inquiries and provide customer support
• Improve our products and services
• Analyze usage patterns and trends
• Protect against fraudulent or illegal activity
• Comply with Saudi laws and regulations, including PDPL requirements

4. Information Sharing

We may share your information with:

• Service providers who assist in our operations within or outside the Kingdom, with adequate data protection safeguards
• Payment processors licensed in Saudi Arabia for transaction handling
• Analytics providers to improve our services
• Saudi regulatory authorities or law enforcement when required by applicable law
• Business partners with your explicit consent

We do not sell your personal information to third parties. Any cross-border data transfer complies with PDPL requirements.

5. Data Security

We implement appropriate technical and organizational measures to protect your information in compliance with Saudi cybersecurity standards, including encryption, access controls, and regular security assessments. Your data is hosted on secure servers within the Kingdom of Saudi Arabia or in jurisdictions with adequate data protection standards as recognized by Saudi authorities.

6. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy, in accordance with PDPL retention requirements. When you close your account, we will delete or anonymize your data within 90 days, unless retention is required by Saudi law or regulatory obligations.

7. Your Rights Under PDPL

Under the Saudi Personal Data Protection Law, you have the right to:

• Be informed about the collection and purpose of your personal data
• Access your personal information held by us
• Request correction of inaccurate or incomplete data
• Request deletion of your data when it is no longer needed
• Withdraw your consent for data processing at any time
• File a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA)

To exercise these rights, please contact us at privacy@milh.app.

8. Cookies and Tracking

We use cookies and similar technologies to enhance your experience, analyze usage, and assist in our marketing efforts. You can manage your cookie preferences through your browser settings. We obtain your consent before placing non-essential cookies in accordance with applicable regulations.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable Saudi regulations. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at: