Privacy and policy

We're Bundl Markets, the first marketplace in the Middle East focused on Arabic design assets. Your privacy is important to us, and we're committed to protecting your data under Saudi Arabia's data protection laws.

We may collect: your name, email, country, payment details, platform usage, and any files or preferences you submit. We don't collect more than we need, and we never sell your data.

We use your data to manage your account, process payments, personalize your experience, send updates (if you opt in), and ensure platform security.

We process your data based on your consent, to fulfill our contract with you, to meet legal obligations, or for legitimate interests where your rights are not harmed.

You can request to access, edit, delete, or download your data, object to its use, or withdraw consent. We respond within 30 days. Email: info@bundlmarkets.com

We use cookies to improve site performance. You can disable them in your browser settings.

We use secure systems and only allow access to authorized personnel or partners.

We only share your data with trusted partners, authorities (if legally required), or outside Saudi Arabia with legal safeguards.

We retain your data only as long as needed or required by law. It will be deleted when no longer necessary.

If a breach occurs, we will notify the authorities within 72 hours and users as needed.

We collect contributor info to manage shops and process payouts. You can update or delete your account anytime.

Our services are not intended for children under 16. We do not knowingly collect data from minors.

We'll post updates here and notify you if major changes are made.

If you have any questions, email us at info@bundlmarkets.com

We have appointed a Data Protection Officer (DPO) to ensure compliance with data protection regulations and handle any concerns about your personal data. If you have questions, requests, or complaints regarding your privacy, please contact: Email: info@bundlmarkets.com

We aim to respond to all data-related requests within 30 days. In certain complex cases, we may extend this by another 30 days, as permitted under Saudi data law.

This policy follows the Personal Data Protection Law (PDPL) of Saudi Arabia and the guidance issued by the Saudi Data and Artificial Intelligence Authority (SDAIA).