Privacy policy

Last updated: 26 August 2026

Java Café, operated by Healthy Food Company (“we”, “us”, “our”), is committed to protecting your privacy. This policy explains what personal data we collect through javacafe.world, why we collect it, how we use it, and the rights you have over it.

This policy is issued in accordance with the Personal Data Protection Law of the Kingdom of Saudi Arabia (PDPL) and its Implementing Regulations.

1. Who we are

Data controller: Healthy Food Company (Java Café) Location: Kingdom of Saudi Arabia Email: info@javacafe.world Phone: +966 920005282

If you have any question about this policy or about how your personal data is handled, contact us using the details above.

2. What personal data we collect

2.1 Information you give us directly

Our website links to online forms. When you complete one of these forms, you provide personal data directly. The forms are:

If you contact us by email or telephone, we collect the information contained in your message, along with your email address or phone number.

2.2 Information collected through messaging

Our website includes a messaging contact button. If you use it, you are transferred to an external messaging application, and your phone number and message content become visible to us. Your use of that application is also subject to its own privacy policy, which we do not control.

2.3 Information collected automatically

When you visit our website, certain technical information is collected automatically:

• IP address and approximate location
• Browser type, device type, and operating system
• Pages viewed, time spent, and referring website
• Language preference

This information is collected through website analytics tools and cookies. It is used in aggregate to understand how the website is used and to improve it.

2.4 Embedded third-party content

Our website embeds or links to external content such as maps and social media feeds. These services may collect information about your visit, including your IP address, and may set their own cookies. We do not control this collection and recommend reviewing the privacy policies of those services.

3. How we use your personal data

We use personal data for the following purposes:

• Recruitment. To assess job applications, contact candidates, and manage hiring.
• Business enquiries. To evaluate franchise enquiries, supplier registrations, and location recommendations, and to respond to them.
• Customer service. To respond to questions, feedback, and complaints.
• Website improvement. To understand how visitors use the site and improve its content and performance.
• Legal compliance. To meet our obligations under Saudi law, including tax, employment, and commercial record-keeping requirements.

We do not sell personal data, and we do not use personal data for automated decision-making that produces legal or similarly significant effects.

4. Legal basis for processing

We process personal data on the following bases under the PDPL:

• Consent. Where you voluntarily submit a form or contact us.
• Contractual necessity. Where processing is required to take steps at your request before entering into a contract, such as evaluating a supplier or franchise application.
• Legitimate interest. For website analytics and security, where our interest does not override your rights.
• Legal obligation. Where retention or disclosure is required by Saudi law.

5. Who we share personal data with

We share personal data only where necessary, and only with:

• Service providers. Including form hosting, website hosting, and analytics providers. These parties process data on our instructions and are not permitted to use it for their own purposes.
• Group companies. Other entities within Healthy Food Company, where relevant to the purpose for which the data was collected.
• Professional advisers. Legal, accounting, or audit advisers, where required.
• Government authorities. Where disclosure is required by Saudi law or by a lawful order.

We do not share personal data with advertisers or data brokers.

6. Transfers outside Saudi Arabia

Some of our service providers store or process data outside the Kingdom of Saudi Arabia. Where personal data is transferred outside the Kingdom, we take steps to ensure the transfer complies with the PDPL and that the data receives an appropriate level of protection.

7. Social media accounts and API access

Java Café operates official accounts on Instagram, Facebook, TikTok, X, Snapchat, and YouTube.

We access performance data relating to our own accounts through the official application programming interfaces (APIs) provided by these platforms. This access is read-only and is used solely for internal reporting on the performance of our own published content — for example, follower counts, post reach, and engagement totals.

We do not use these interfaces to collect personal data about individual users, to access private messages for marketing purposes, or to obtain data about accounts we do not own. Data retrieved is stored securely and used only for internal management reporting.

If you interact with our social media accounts by following, commenting, or sending a message, that interaction is governed primarily by the privacy policy of the platform concerned. We may see and respond to your public comments or direct messages in the ordinary course of managing our accounts.

8. Cookies

Our website uses cookies and similar technologies to enable core functionality, remember your language preference, and collect anonymous usage statistics.

You can control or delete cookies through your browser settings. Disabling cookies may affect how parts of the website function.

9. How long we keep personal data

We retain personal data only for as long as necessary for the purpose it was collected, and for any period required by Saudi law:

• Unsuccessful job applications: up to 12 months, unless you ask us to delete them sooner
• Supplier and franchise records: for the duration of the relationship and any statutory retention period afterwards
• General enquiries: up to 24 months
• Website analytics: in aggregated, non-identifying form

10. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include access controls, encryption in transit, and restricting access to personal data to staff who need it for their role.

No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

11. Your rights

Under the PDPL, you have the right to:

• Be informed about how your personal data is collected and used
• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data, where there is no lawful reason to retain it
• Withdraw consent at any time, where processing is based on consent
• Object to certain processing
• Lodge a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA)

To exercise any of these rights, email info@javacafe.world. We will respond within the period required by law. We may need to verify your identity before acting on a request.

12. Children’s privacy

Our website is not directed at children under the age of 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Material changes will be communicated through a notice on our website.

14. Contact

Healthy Food Company (Java Café) Kingdom of Saudi Arabia Email: info@javacafe.world Phone: +966 920005282