Privacy Policy

1. Introduction & Scope

This Privacy Policy (“Policy”) describes how Al Rawabi Group of Companies WLL (“we”, “us”, “our”, or “Al Rawabi Group”), established in 1985 and operating across Qatar and the GCC, collects, uses, discloses, and protects your personal information when you:

• Visit our websites (including www.alrawabigroup.com and subsidiary sites)
• Use our retail, wholesale, distribution, food manufacturing, electronics, or hospitality services
• Shop at our hypermarkets, convenience stores, cash & carry outlets, or restaurants
• Participate in promotions, loyalty programmes, or campaigns (e.g. Win One Million, Rawabi Mini Marathon)
• Apply for careers or communicate with us via contact forms, email, or phone
• Interact with our subsidiaries (including Rawabi Hypermarket, Wholesale Plus, Five Group, Tasty Restaurant, and others listed on our website)

We process personal data in line with applicable laws, including the Qatar Personal Data Protection Law (where applicable), GCC data protection practices, and other regulations that may apply to our operations. By using our services or providing your data, you acknowledge that you have read and understood this Policy.

2. Data Controller

The data controller responsible for your personal data is:

Where a specific subsidiary (e.g. Rawabi Hypermarket, Wholesale Plus) collects data in its own name, that entity may act as a separate or joint controller as indicated at the point of collection.

3. Information We Collect

We may collect and process the following categories of personal data.

3.1 Information You Provide

• Identity data: name, title, date of birth, national ID or similar identification where legally required or voluntarily provided.
• Contact data: email address, telephone number, postal address.
• Account and transaction data: purchase history, loyalty programme membership, payment details (e.g. card last four digits, transaction references) where relevant for our services.
• Career and recruitment data: CV, qualifications, work history, and other information you submit when applying for jobs.
• Communications: content of enquiries, complaints, or feedback you send to us.
• Marketing preferences: your choices regarding newsletters, offers, and promotional communications.

3.2 Information Collected Automatically

• Technical data: IP address, browser type and version, time zone, device type, operating system.
• Usage data: pages visited, links clicked, time spent on our websites, referring URLs.
• Location data: general geographic location derived from IP or (where you consent) precise location for relevant services.

3.3 Information from Third Parties

We may receive information from business partners, payment processors, delivery and logistics providers, and from publicly available sources where lawful and relevant to our relationship with you.

4. Legal Basis for Processing

We process your personal data only where we have a valid legal basis, including:

• Contract: to perform our contract with you (e.g. sales, delivery, loyalty programme terms).
• Legitimate interests: to operate and improve our business, ensure security, prevent fraud, and conduct analytics, where our interests do not override your rights.
• Consent: where you have given clear consent (e.g. marketing, non-essential cookies, optional surveys).
• Legal obligation: to comply with laws (e.g. tax, anti-money laundering, consumer protection).

Where consent is the basis, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

5. How We Use Your Information

We use your data to:

• Provide and manage our retail, wholesale, distribution, and hospitality services.
• Process orders, payments, and deliveries across our outlets and online channels.
• Run promotions, campaigns, and loyalty programmes (e.g. Win One Million, events such as Rawabi Mini Marathon).
• Manage careers applications and recruitment processes.
• Respond to enquiries, complaints, and feedback.
• Send service-related and, where you have agreed, marketing communications.
• Improve our websites, products, and services through analysis and research.
• Ensure security, prevent fraud, and comply with legal and regulatory requirements.
• Share information within the Al Rawabi Group and with trusted partners as set out in this Policy.

We do not use your personal data for fully automated decision-making that significantly affects you unless we are required by law or have implemented suitable safeguards and informed you.

6. Sharing & Third Parties

We may share your personal data with:

• Group companies: subsidiaries and affiliates within Al Rawabi Group (e.g. Rawabi Hypermarket, Wholesale Plus, Five Group, restaurant brands) for operational, analytical, and group-wide services.
• Service providers: payment processors, IT and hosting providers, logistics and delivery partners, marketing and analytics providers, professional advisers, acting under contract and only for the purposes we specify.
• Regulators and authorities: when required by law or to protect our rights and safety.
• Business transfers: in connection with a merger, sale of assets, or restructuring, subject to the same privacy commitments where possible.

We do not sell your personal data to third parties for their marketing. We require processors to protect your data and use it only in accordance with our instructions and applicable law.

7. International Transfers

Your data may be processed in Qatar, other GCC countries where we operate, and in countries where our service providers are located. Where we transfer data outside the jurisdiction in which it was collected, we implement appropriate safeguards (such as standard contractual clauses, adequacy decisions, or other mechanisms recognised by applicable law) to ensure your data remains protected.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes set out in this Policy, including:

• To satisfy legal, regulatory, tax, or accounting requirements.
• To resolve disputes and enforce our agreements.
• For legitimate business purposes (e.g. analytics in anonymised form where possible).

Retention periods may vary by type of data and purpose (e.g. transaction records for a set number of years, recruitment data for the duration of the process plus any legal hold, marketing consent until withdrawal). When data is no longer needed, we securely delete or anonymise it.

9. Security

We implement technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including:

• Access controls and authentication.
• Encryption of data in transit and, where appropriate, at rest.
• Regular assessments of our systems and processes.
• Training of staff on data protection and confidentiality.

While we strive to protect your data, no method of transmission or storage is completely secure. We encourage you to use strong passwords and to keep your account and contact details up to date.

10. Your Rights

Depending on your location and applicable law, you may have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your data in certain circumstances.
• Restriction: request that we limit how we use your data in certain cases.
• Portability: request a copy of your data in a structured, machine-readable format where technically feasible.
• Object: object to processing based on legitimate interests or for direct marketing.
• Withdraw consent: where processing is based on consent, withdraw it at any time.
• Complain: lodge a complaint with a supervisory authority in your country.

To exercise these rights, please contact us using the details in the Contact & Data Protection section. We will respond within the timeframe required by applicable law. We may need to verify your identity before processing your request.

11. Children's Privacy

Our services are not directed at children under the age specified by local law (e.g. 16 in some jurisdictions). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will take steps to delete such information promptly.

12. Cookies & Tracking

Our websites use cookies and similar technologies to:

• Strictly necessary: enable core functionality (e.g. security, load balancing, session management). These do not require consent where they are essential.
• Performance and analytics: understand how visitors use our sites (e.g. page views, navigation paths) to improve performance and content.
• Functionality: remember your preferences (e.g. language, region) and enhance your experience.
• Marketing (where applicable): deliver relevant ads and measure campaign effectiveness, only where we have your consent where required by law.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our websites. For more detail on specific cookies we use, their purposes, and retention, please refer to our Cookie Notice or contact us. We may also use pixels, tags, and similar technologies in emails or on partner sites where disclosed.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or services. We will post the updated version on our website and indicate the “Last updated” date. For material changes, we may notify you by email, prominent notice on our website, or other appropriate means before the change takes effect. We encourage you to review this Policy periodically.

14. Contact & Data Protection

For any questions about this Privacy Policy, to exercise your rights, or to report a concern, please contact us:

We are committed to resolving any privacy concern and will respond in accordance with applicable data protection law.