Privacy Policy
Last Updated: June 14, 2026
Store Name: Ho Store / H O
Official Websites:
Support and Privacy Email: [email protected]
Technical Support via Discord: https://hostore.cc/discord
Mobile Number: 0554619415
1. Introduction
At Ho Store, we care about the privacy of our customers and users of our online store and our Discord bot, and we process your personal data in accordance with the Personal Data Protection Law issued by Royal Decree No. (M/19), as amended by Royal Decree No. (M/148), its Implementing Regulations, and all other applicable laws in the Kingdom of Saudi Arabia.
This policy explains the types of data we collect when you use our official websites (ho.sa, store.ho.sa, hostore.cc) or our Discord bot, the legal basis for each processing activity, how we use, protect, share, transfer, and retain this data, your rights related to it, and the mechanism for exercising them.
This policy is available before your data is collected and is considered part of our contractual relationship with you. As for explicit consent, we only request it for purposes that actually require it (such as marketing messages and linking a Discord account), while the processing necessary to fulfill your request is based on performance of the contract, not your consent (see Clause 5).
2. Scope of the Privacy Policy
This policy applies to:
- Your use of the official Ho Store websites.
- Creating an account or logging in to the store.
- Purchasing products, services, or digital licenses.
- Activating licenses or linking them to your server.
- Using the store’s Discord bot.
- Linking a Discord account to your store account.
- Requesting technical support or contacting us through the official channels.
3. Data We Collect
We collect the data necessary to provide the service and manage orders, licenses, and technical support, including:
3.1 Account Information
- Username.
- Email address.
- Mobile number, if provided.
- Login data and verification methods used in the store.
- Account status and the orders associated with it.
3.2 Discord Data
When you link your Discord account to your account with us, we may collect or use:
- Your Discord identifier (Discord User ID).
- Your username or display name on Discord, when needed.
- Server data associated with our services, when needed.
- Roles associated with your account inside our Discord server.
This data is used to enable the Discord bot to grant you the appropriate roles for your purchases and synchronize them automatically.
3.3 Purchase and License Data
Purchased products, order number, purchase date, payment status, license status, activation codes or license keys, license data change log, activation/deactivation/suspension status, and the data necessary to verify ownership of the product or license.
3.4 Server Data and License Activation
Some products may require linking the license to the customer’s server for activation and protection, so we may collect or store: the server IP address, technical data related to the operating environment, license verification data, activation or operation attempt logs, and IP change data when requested by the customer.
Some of this data is collected automatically through the activation mechanism and is used to protect products from copying or unauthorized use (see Clause 6 regarding automated processing).
3.5 Technical Support Data
When requesting support, we may collect what you voluntarily provide: description of the issue, images or screenshots, technical files or logs, operating environment information, contact data, and conversation or ticket history. Support is mainly provided through Discord (https://hostore.cc/discord), and may be through email [email protected] or the mobile number.
3.6 Payment Data
Payments are processed through an approved external payment provider. We may retain non-sensitive data related to the transaction (order number, payment status, amount, date, payment method in general, reference number).
We do not store full bank card details, passwords, or verification codes, and they are processed entirely by the approved payment provider.
3.7 Usage Data and Technical Logs
The IP address used to access, browser and device type, access time and date, store pages used, error logs, and abnormal login or activation attempts — for protection purposes, performance improvement, prevention of misuse, and troubleshooting.
4. Data We Do Not Collect
In compliance with the data minimization principle:
- We do not read the content of your private messages on Discord.
- We do not read the content of your messages in Discord servers except within the bot permissions necessary for a specific and declared function.
- We do not track your status or personal activity on Discord (Presence / Activity) except for a specific and declared technical need.
- We do not sell your personal data.
- We do not share your data with third parties for independent marketing purposes.
- We do not use your data to train artificial intelligence or machine learning models.
- We do not collect more data than we need to provide the service, protect the products, or comply with legal requirements.
5. How We Use Data and the Legal Basis for Each Purpose
We process your data for the following purposes, and the table shows the legal basis relied upon for each purpose in accordance with Articles (5) and (6) of the Personal Data Protection Law:
| Purpose of Processing | Legal Basis |
|---|---|
| Creating and managing the account, completing purchases, issuing orders and invoices, activating and delivering licenses, linking the license to the server | Performance of the contract (Article 6) |
| Protecting products from copying and unauthorized use, preventing circumvention and license sharing and attempts to bypass protection, license security and security logs | Legitimate interest (Article 6), provided that your rights are not harmed and that it does not include sensitive data |
| Accounting and tax obligations and issuing tax invoices | Legal obligation |
| Linking the Discord account and granting and synchronizing roles | Performance of the contract / explicit consent when the linking is optional |
| Sending direct marketing messages | Prior separate explicit consent (see Clause 12) |
You may at any time learn the legal justification for processing any category of your data by contacting us.
6. Use of Discord Data, the Bot, and Automated Processing
When you link your Discord account to your account at Ho Store, we use its data only for service-related purposes, including:
- Verifying the Discord account linked to the customer.
- Granting the appropriate roles inside the server according to the purchased products or licenses.
- Synchronizing roles when purchasing, when a feature ends, or when the license status changes.
- Reading the member and role list in real time when needed to apply the correct roles.
- Not storing the member list outside Discord except for a limited and necessary technical need.
Automated processing: Granting/synchronizing roles, activating/deactivating licenses, and detecting abnormal activation attempts are carried out automatically based on the status of your purchases and licenses, and this may result in an action that affects you (such as suspending a role or license). You have the right to request human review of any automated action that affects you by contacting us through the official channels.
The bot does not use Discord data for external marketing purposes, and does not sell or share it with third parties.
7. Sharing Data with Other Parties
We share data only to the extent necessary to provide the service or comply with laws, with parties acting as a processor on our behalf, and they are bound by data processing agreements that restrict them to processing data according to our instructions only, applying protection measures equivalent to what the law requires, and assisting us in fulfilling data subject rights and reporting any breach. We remain responsible for their compliance.
| Party | Capacity and Purpose | Location |
|---|---|---|
| Discord Platform (Discord Inc) | Processor for applying and synchronizing roles | Outside the Kingdom (United States) |
| Payment Provider payment service providers | Processing payments and verifying their status | Inside the Kingdom |
| Hosting, database, email, and ticketing system providers | Operating the store and providing the service | May be outside the Kingdom |
| Competent authorities | Upon official legal request | Inside the Kingdom |
(For more about transfer outside the Kingdom and its safeguards, see Clause 8.)
8. Transfer of Data Outside the Kingdom
Due to our use of the Discord platform, payment provider, and hosting providers, some of your personal data may be processed, stored, or disclosed to entities outside the Kingdom of Saudi Arabia.
This transfer is carried out in accordance with Article (29) of the Personal Data Protection Law and the Regulation on Personal Data Transfer outside the Kingdom, as follows:
- Legal basis for transfer: Performing an obligation to which the customer is a party (performance of the contract entered into when purchasing and linking services).
- Minimum data limit: The transfer is limited to the minimum data necessary to provide the service.
- Approved safeguards: We adopt one of the appropriate safeguards prescribed by law for transferring data outside the Kingdom, such as the Standard Contractual Clauses (SCCs) issued by the Saudi Data and Artificial Intelligence Authority (SDAIA), or a certification with the provider.
- Not compromising the national security or vital interests of the Kingdom.
9. What We Do Not Do with Your Data
- We do not sell your personal data.
- We do not rent your data to any party.
- We do not share your data with external advertisers for marketing purposes.
- We do not use your data to train artificial intelligence models.
- We do not use Discord data to track your personal activity outside the scope of the service.
- We do not request data from you that is not necessary to provide the service or fulfill the order.
10. Data Retention and Destruction
We retain your data for the period necessary to achieve the purpose for which it was collected, then destroy it without undue delay in accordance with Article (18) of the law, unless the law requires retaining it, or it is related to ongoing judicial proceedings, or anonymization is sufficient.
The approximate retention periods include:
| Type of Data | Retention Period |
|---|---|
| Invoices and tax and accounting records | At least 6 years (tax legal obligation) |
| Account data and active orders | Throughout the activity of the account and the existence of licenses associated with it |
| Account data after closure | Deleted or anonymized within a specified period after closure unless retention is legally required |
| Technical support records | A specified period according to the nature of the request and dispute settlement |
| Violation and misuse records | The period necessary to protect rights and handle disputes |
We stop collecting data as soon as the need for it no longer exists.
11. User Rights and the Mechanism for Exercising Them
In accordance with Article (4) of the Personal Data Protection Law, you have the following rights:
- The right to know the legal justification for collecting your data and its purpose.
- The right of access to your personal data held by the store.
- The right to obtain a copy of your data in a readable and clear format and free of charge.
- The right to correct your incorrect, incomplete, or outdated data.
- The right to request destruction of your data that is no longer necessary.
- The right to withdraw consent at any time (where the processing is based on your consent) — and you can do so through your account settings, or unlinking the Discord account (Unlink), or emailing us at [email protected].
- The right to file a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA) as the supervisory authority.
We will comply with deleting your data when you withdraw your consent if it is the sole basis for processing, or when the purpose ceases to exist, or when the processing violates the law — except for what the law requires to be retained (such as purchase records, invoices, active license data, violation records, and data necessary to handle disputes).
To exercise your rights, contact us through the details in Clause 20, and we will respond within the period prescribed by law.
12. Messages, Notifications, and Direct Marketing
We distinguish between two types of messages:
A) Operational notifications (related to your order or account): order notifications, license activation messages, product or license status updates, support replies, security or important alerts. These are sent because they are necessary to perform the service.
B) Direct marketing messages: We do not send them except after your prior separate explicit consent separate from accepting this policy, and in accordance with Articles (25) and (26) of the law. Every marketing message includes a clear way to unsubscribe (Unsubscribe / Stop), and you can withdraw your consent at any time.
13. Cookies and Tracking Technologies
The store may use cookies or similar technologies to: maintain the login session, improve performance, protect accounts, remember preferences, and analyze general usage to improve the service.
You can disable cookies from the browser settings, but this may cause some store features not to work properly.
14. External Links and Services
The store or bot may contain links or integrations with external services (Discord, payment providers, support/ticketing platforms, hosting/email). Each of them has its own privacy policy, and we are not responsible for their practices, and it is recommended to review their policies.
15. Children’s and Minors’ Data
The store’s services are directed to persons legally qualified to contract and purchase, and we do not knowingly collect data from unqualified persons.
If the data of a person who is partially or fully legally incompetent is processed, the consent of the legal guardian is required, with appropriate means taken to verify the validity of guardianship, in accordance with Article (5) of the law and its Implementing Regulations. If it becomes clear to us that an account was created or used by an unqualified person without the consent of their guardian, we may suspend the account or delete the associated data as permitted by laws.
16. Data Protection
We take the necessary organizational, administrative, and technical measures to protect your data, including when transferring it, in accordance with Article (19) of the law and Article (23) of its Implementing Regulations, including as needed:
- Encrypting data during transmission (TLS) and at rest.
- Controlling access according to the principle of least privilege, and logging and reviewing access operations.
- Protecting licensing systems from unauthorized access.
- Detecting abnormal use attempts and managing vulnerabilities.
- Complying with the controls and standards issued by the National Cybersecurity Authority or recognized best practices.
Despite our due care, the user acknowledges that the transmission of data over the Internet cannot be guaranteed to be absolutely secure.
17. Reporting Data Breach Incidents
In the event of leakage, damage, or unlawful access to your personal data, we commit to the following in accordance with Article (20) of the law and Article (24) of its Implementing Regulations:
- Notifying the Saudi Data and Artificial Intelligence Authority (SDAIA) within a period not exceeding (72) hours from our awareness of the incident when there is a possibility of harm to the data, its owners, or their rights.
- Notifying affected customers without undue delay when there is a risk to their data or rights.
- This obligation includes breaches that occur with processors outside the Kingdom, and in compliance as well with any notification requirements of the competent authorities when applicable.
18. Data Controller and Supervisory Authority
Data Controller: Privacy matters can be addressed through [email protected].
The competent supervisory authority is the Saudi Data and Artificial Intelligence Authority (SDAIA), and you have the right to file a complaint with it regarding the processing of your data. (The necessity of appointing a Data Protection Officer and registering in the national register with SDAIA is assessed according to the nature and size of the activity, and this clause will be updated when applicable).
19. Changes to the Privacy Policy
We may update this policy from time to time. The updated version takes effect from the date it is published in the store.
As for material changes in processing purposes or adding new purposes, we will request new explicit consent for them, and your mere continued use of the store is not considered consent to those new material purposes. We recommend that you review this policy periodically.
20. Contact Us
For any inquiry about your privacy, or to request deletion or modification of your data, or to exercise your rights:
Email: [email protected]
Technical Support via Discord: https://hostore.cc/discord
Mobile Number: 0554619415
Official Websites: ho.sa — store.ho.sa — hostore.cc
We will review your request and respond to you within the period prescribed by law according to the nature of the request.
21. Approval of the Policy
Your data is processed according to the legal basis set out in Clause (5), and your explicit consent is requested only for the purposes that require it. By using the store or the Discord bot or completing any purchase, you acknowledge that you have read this policy and understood what is stated in it, in a manner that does not violate the laws and regulations applicable in the Kingdom of Saudi Arabia.