Privacy Policy

Provin Privacy Policy

This privacy policy (“Privacy Policy”) is the policy of Provin Natural Company for Wholesale and Retail Trade W.L.L (“Provin”). Please read this Privacy Policy carefully. It is a legally binding document between you as a user (referred to herein as “you” or “user”) and Provin (“we”, “us”, or “our”).

This Privacy Policy sets out and explains how we collect, handle, store, use, share, transfer, and protect your personal information (“Processing”) when you engage with us, access, use, attend, and/or interact with our products, services, websites, events, platforms, software and applications, including our mobile application (“Platform”) (together, the “Service(s)”) and how you can contact us so we can respond to you if you have any of questions or concerns regarding the privacy of your information.

By providing us with your information or by using the Service, you consent to the collection, processing, usage, storage, and transfer of personal information and non-personal information by us as specified under this Privacy Policy and subject to its terms. We will not use or share your information with anyone except as described herein.

This Privacy Policy must be read together with our Terms and Conditions. By accessing or using the Service, you confirm that (i) you have read and understood this Privacy Policy in full, (ii) you consent and agree to be bound by its terms, and (iii) you acknowledge that this Privacy Policy operates in conjunction with our Terms and Conditions and any third-party terms governing services integrated with our Platform. If you do not agree, you should not access or use the Service.

About Us

The Services that we bring to you are provided by Provin, a limited liability company incorporated and existing under the laws of the State of Kuwait, holding commercial registration number 528734 and having its registered address at Commercial Office 8, Floor 16, Kuwait Finance House, Al Wazzan Street, Block 001, Mirqab, Kuwait. Provin acts solely as the supplier of products and as the operator of the Platform. The sale and distribution of products, as well as the provision of any licensed medical or health services, are carried out through Provin’s approved Service Providers who hold the necessary licenses and regulatory approvals. Provin’s role is limited to supplying products and operating the Platform.

If we have to contact you, we will do so by telephone or by writing to you at the email address you have provided to us upon registration for the Service.

Definitions

“Vendors” means licensed third-party clinics, pharmacies, laboratories, nutrition centers, or other professional entities that sell products and/or directly provide health or wellness services to users through the Platform and approved by the Ministry of Health in the State of Kuwait. Vendors are independent of Provin for such offerings and are solely responsible for compliance with medical/health regulations, product/service quality, and any professional advice or outcomes.

“Service Provider(s)” means third-party companies that support the operation of the Platform and Provin’s business (e.g., cloud hosting, IT, analytics, payments, delivery/logistics, marketing). Service Providers act on Provin’s instructions to process data for the purposes described in this Privacy Policy and do not directly sell products or provide medical/health services to users.

Information Collection and Use

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to: your full name, email address, phone number, delivery address, social login credentials (e.g., Google, Apple ID, Facebook), blood test results, results from laboratory home visits, health and dietary information, health goals, supplement preferences, usage history, device identifiers, IP address, mobile operating system, browser type, app usage data, crash logs, geolocation data (if permission is granted), information you supply to us via online or offline surveys, competitions or product registration, payment method details, transaction ID, and purchase history (“Personal Information”).

We will Process your Personal Information for the following purposes (“Purposes”):

(i) to perform a contract with you or to take steps at your request to enter into a contract, including to:

• provide you with products, and coordinate the provision of diagnostic services and nutritional consultations provided by licensed Vendors;

• process and fulfill orders;

• improve our product and service offerings;

• tailor supplement recommendations based on health information (where interpretation/advice is performed by Vendors or by professionals engaged by Vendors); and

• enable delivery coordination and customer support;

(ii) to comply with our legal and regulatory obligations, including those relating to recordkeeping and consumer protection;

(iii) to improve our website or Platform;

(iv) because you have given your explicit consent, for example, to receive marketing communications, analytical and statistical reasons or participate in health assessments; and

(v) any purpose required by law or regulation.

When you use our Service, you consent to our collection, storage, processing, and in some cases, transfer of your Personal Information, which is provided by you from time to time:

(i) through your interactions with our Service, including when you register, complete health quizzes, place an order, authorize us to share your Personal Information with licensed Vendors (and, where necessary, Service Providers) to perform the Services (such as laboratory testing or consultations), communicate with our support team, or request updates and offers (via email, push notifications, or otherwise);

(ii) through your system/device and use of our Service, whereby our servers, logs, and other technologies automatically collect certain technical and usage data to administer, secure, and improve the Service; and

(iii) through cookies and similar technologies included in the Service, which help personalize your experience and provide analytics. For more information on cookies and how to manage them, please refer to our cookies policy below.

We will retain your Personal Information only for as long as is reasonably necessary to fulfill the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements.

In determining the appropriate retention period, we consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your data, whether such purposes can be achieved through other means, and applicable legal requirements.

Third Party Service Providers

We may share your data and Personal Information with carefully selected third-party Service Providers who assist us in delivering our Services. These include laboratories, clinics, pharmacies, supplement and nutritional shops, logistic companies, cloud service providers, IT providers, website maintenance, advertising or marketing agencies, and payment processing companies. Separately, we may disclose Personal Information to Vendors where necessary to deliver the products/services you select; Vendors may act as independent data controllers for the information they process to provide their services.

Provin is not responsible for a Vendor’s independent compliance with medical/health regulations or its handling of Personal Information in its capacity as an independent controller.

Certain Service Providers are licensed vendors who independently provide medical or health-related services (such as laboratory testing or nutritional consultations). These Service Providers operate under their own regulatory approvals and are responsible for compliance with all applicable health regulations. Provin does not itself hold a medical license and does not provide medical consultations or diagnostic services. Provin’s role is limited to supplying the products and managing the Platform.

All such Service Providers are subject to confidentiality and data protection obligations and are only permitted to use your Personal Information for the purposes specified. You undertake and hereby agree that Provin shall not be held liable for any unauthorized use of or access to your Personal Information by a Vendor or Service Provider or any third party. The disclosure to Vendor or Service Providers may be required for us to provide you access to any of our Services, as part of our Services and products, to comply with our legal obligations, to enforce any applicable user agreements, or to prevent, detect, mitigate, and investigate fraudulent or illegal activities related to any of our Services or otherwise.

We may also disclose your Personal Information to the following categories of third-party recipients and Service Providers in the following circumstances:

(i) where you give us your consent;

(ii) to third-party Service Providers engaged in data processing services for us or handling personal data for Purposes outlined in this Privacy Policy or communicated to you during the collection of your Personal Information. Some Service Providers may handle specific tasks for us as part of contractual obligations, including cloud services for data storage, and task management. We ensure that your data receives comparable protection, following data protection laws and regulations, through measures like contracts or adherence to standards;

(iii) to our group companies, assignee, transferor or successor operator;

(iv) in the context of a due diligence exercise of a potential transaction involved in a Provin assets sale, merger, or acquisition of any part of our business;

(v) to competent regulatory authorities, government agencies, courts, or any other third party where disclosure is necessary for the purposes of (a) satisfying any legal, regulatory, tax, accounting, or reporting requirements; (b) applicable laws or regulations; (c) fraud prevention; and (d) exercising our legal rights; and

(vi) where necessary for the performance of a contract with you.

Children’s Privacy

Our Services are not directed at or intended for use by individuals under the age of 18. We do not knowingly collect Personal Information from children. If you become aware that your child has provided us with Personal Information, please contact us so that we may delete it promptly.

Log Data

When you access the Service by or through a mobile device, we may collect certain information automatically, including, but not limited to, the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use and other statistics ("Log Data").

In addition, we may use third party services such as Google Analytics that collect, monitor and analyze this type of information in order to increase our Service's functionality. These third-party Service Providers have their own privacy policies addressing how they use such information.

Cookies

[Cookies are files with small amount of data, which may include an anonymous unique identifier. cookies are sent to your browser from a web site and stored on your computer's hard drive.

We use "cookies" to collect information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.]

Behavioural Remarketing

Provin uses remarketing services to advertise on third-party websites after you have visited our Service. We, together with our third-party Service Providers, use cookies and similar technologies to inform, optimize, and serve ads based on your previous visits to our Service. By continuing to use the Service, you consent to this use of cookies for remarketing purposes. If you wish to disable remarketing, you may do so by adjusting your browser or device settings to block cookies or by following the opt-out instructions provided by the relevant advertising provider. 

Google

Google AdWords remarketing service is provided by Google Inc.

You can opt-out of Google Analytics for Display Advertising and customize the Google Display Network ads by visiting the Google Ads Settings page: http://www.google.com/settings/ads

Google also recommends installing the Google Analytics Opt-out Browser Add-on - https://tools.google.com/dlpage/gaoptout - for your web browser. Google Analytics Opt-out Browser Add-on provides visitors with the ability to prevent their data from being collected and used by Google Analytics.

For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: http://www.google.com/intl/en/policies/privacy/

Twitter

Twitter remarketing service is provided by Twitter Inc.

You can opt-out from Twitter's interest-based ads by following their instructions: https://support.twitter.com/articles/20170405

You can learn more about the privacy practices and policies of Twitter by visiting their Privacy Policy page: https://twitter.com/privacy

 

Facebook

Facebook remarketing service is provided by Facebook Inc.

You can learn more about interest-based advertising from Facebook by visiting this page: https://www.facebook.com/help/164968693837950

To opt-out from Facebook's interest-based ads follow these instructions from Facebook: https://www.facebook.com/about/ads/#568137493302217

Facebook adheres to the Self-Regulatory Principles for Online Behavioral Advertising established by the Digital Advertising Alliance. You can also opt-out from Facebook and other participating companies through the Digital Advertising Alliance in the USA http://www.aboutads.info/choices/, the Digital Advertising Alliance of Canada in Canada http://youradchoices.ca/ or the European Interactive Digital Advertising Alliance in Europe http://www.youronlinechoices.eu/, or opt-out using your mobile device settings.

For more information on the privacy practices of Facebook, please visit Facebook's Data Policy: https://www.facebook.com/privacy/explanation

Your Rights and Access to Your Personal Information

You have a number of rights under Law No. 20 of 2014 concerning Electronic Transactions (“Privacy Law”) regarding how we handle and undertake Processing of your Personal Information. These include your rights to:

(i) request to access to your Personal Information. This will enable you to receive a copy of the Personal Information we hold about you. You may also request the transfer of your Personal Information either to you or directly to a third party, at your request.

(ii) request correction of the Personal Information that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, although we may need to verify the accuracy of the new data you provide to us.

(iii) request the erasure of your Personal Information. This enables you to ask us to delete or remove Personal Information where there is no good reason for us continuing to process it. Please note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

(iv) ask us to restrict the Processing of your Personal Information, or stop the Processing, at your request. You may also object to automated Processing, if applicable.

(v) withdraw consent at any time where we are relying on consent to process your Personal Information. However, this will not affect the lawfulness of any Processing carried out before you withdraw your consent or Processing of any Personal Information in reliance on other Purposes.

If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

If you would like to exercise any of your rights listed above, please contact us at info@provin.me.

[To delete your account, follow these steps: 

• Ensure that you are logged into the app.

• Navigate to the main screen and locate the 'Account' tab.

• Within the 'Account' tab, find and select 'Settings.'

• Look for the option to 'Delete Account' and follow the on-screen instructions to confirm the deletion.

• After this step complete all your personal data gather by us will be completely delete and no longer available by us.

Before responding to your request, we may ask you to verify your identity and to provide further details about your request. We will endeavor to respond within an appropriate timeframe.

Data Security

We take appropriate technical and organizational measures to safeguard Personal Information. Our infrastructure partner, Nizek Tech, employs industry-standard measures to prevent unauthorized access, data loss, or misuse. The security of your Personal Information is important to us but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security. Once Personal Information is shared with a Vendor to deliver a user-selected product/service, the Vendor’s own privacy and security practices apply to its processing as an independent controller.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

International Data Transfers

All Personal Information is Processed and stored within the State of Kuwait. We do not currently transfer data outside of Kuwait. Should such transfers become necessary, we will implement appropriate safeguards in accordance with applicable laws.

Links to Other Sites

The Service may contain links to external sites not operated by us. We are not responsible for the content, policies, or practices of such third-party websites and encourage you to review their privacy policies independently.

Changes

Provin may change this Privacy Policy from time to time without notice. Any changes we may make to this Privacy Policy in the future will be posted where appropriate. Your continued use of the Services provided by Provin or engagement with Provin after we publish our changes to this Privacy Policy will mean that you are consenting to the updated Privacy Policy. This version was last updated on ]2025[.

Provin reserves the right in its sole and absolute discretion to change these policies, terms, and disclaimers at any time. Any such changes will take effect when posted on this page or otherwise notified to you and it is your responsibility to read the policies, terms, and disclaimers on each occasion you provide or obtain Services from Provin and upon using Provin’s products, services, Platform or the website or otherwise engage with us. Your continued usage or engagement shall signify your acceptance to be bound by the then-current or future policies, terms, and disclaimers applied by Provin.

General

If any of the terms and conditions of this Privacy Policy should be determined to be illegal, invalid, or otherwise unenforceable by reason of any applicable laws or regulations; such provisions shall be removed and deleted from this Privacy Policy. To the extent reasonably possible, all other terms and conditions of this Privacy Policy shall remain in full force and continue to be binding and enforceable.

To the fullest extent permitted by applicable law or regulations, neither Provin nor any other third party, Service Provider, or Vendor acting on behalf of or in conjunction with Provin, nor any of the respective affiliates, group companies, subsidiaries, or holding companies of either Provin or any authorized contractor, partner or service provider acting on behalf of or in conjunction with Provin (“Protected Companies”) nor any of the respective owners, shareholders, directors, officers, employees, agents, consultants or representatives of any Protected Companies shall be responsible for any proceedings, claims, liabilities, costs, fees (including attorney fees), expenses, delays, losses, penalties or other damages (howsoever arising) caused to you or any other third party arising out of or in connection with this Privacy Policy.

In no event shall Provin be liable for any loss or damage including, without limitation, indirect or consequential loss or damage, or any loss or damage whatsoever arising from loss of data or profits arising out of, or in connection with, the use of the website or Platform or reliance placed by you on the information contained on this website or Platform. To the fullest extent permitted by law, Provin shall not be liable for the acts, omissions, advice, diagnosis, or treatment provided by Service Providers who independently perform medical or health services through the Platform. Such Service Providers remain solely responsible for compliance with applicable regulatory requirements and for the quality of the services they provide.

Any dispute relating to the enforcement, interpretation, or application of the Privacy Policy shall be governed by and construed in accordance with the laws of the State of Kuwait. Any dispute arising out of or in connection with this Privacy Policy, or any usages of Provin’s Services including the website shall be dealt with through the Courts of the State of Kuwait to the exclusion of all others.

Contact

If you have any questions about this Privacy Policy, please contact us. You can telephone our customer service team at [+96599264006] or write to us at info@provin.me.