الخصوصية

Privacy Policy

Last Updated: April 20, 2025

Introduction

StayKSA ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or mobile application, or use our services (collectively, the "Platform").

We adhere to the Saudi Arabia Personal Data Protection Law (PDPL) and other applicable data protection regulations. Please read this Privacy Policy carefully. By accessing or using our Platform, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy.

1. Information We Collect

1.1 Personal Information

We may collect personal information that you voluntarily provide when using our Platform, including but not limited to:

Contact Information: Name, email address, phone number, postal address
Account Information: Username, password, account preferences
Profile Information: Profile picture, biographical information, nationality
Identity Verification Information: Government-issued ID, passport information (for certain bookings, particularly those related to religious travel)
Payment Information: Credit card details, billing address, bank account information
Booking Information: Travel dates, accommodation preferences, special requests
Communication Information: Messages sent to accommodation providers or our customer service team

1.2 Information Collected Automatically

When you use our Platform, we may automatically collect certain information, including:

Device Information: Device type, operating system, browser type, mobile network information
Log Information: IP address, access dates and times, pages viewed, clickstream data
Location Information: Approximate location derived from IP address or precise location with your consent
Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar technologies as detailed in our Cookie Policy

1.3 Information from Third Parties

We may receive information about you from third parties, such as:

Business partners, including accommodation providers
Payment processors and financial service providers
Social media platforms, if you choose to link your social media accounts
Public databases and identity verification services

2. How We Use Your Information

We use your information for various purposes, including to:

2.1 Provide and Improve Our Services

Process and confirm your bookings
Facilitate payments and refunds
Provide customer support
Personalize your experience on our Platform
Improve our Platform and develop new features

2.2 Communication

Send booking confirmations and updates
Provide important information about your travel arrangements
Respond to your inquiries, comments, or concerns
Send administrative messages regarding our Platform

2.3 Marketing and Advertising

Send promotional communications about special offers, events, or other information that may be of interest to you (with your consent)
Deliver targeted advertisements based on your preferences and usage patterns
Conduct market research and analysis

2.4 Security and Compliance

Verify your identity
Detect, investigate, and prevent fraudulent transactions and other illegal activities
Comply with legal obligations
Enforce our Terms and Conditions and other policies

3. Legal Basis for Processing Personal Information

We process your personal information based on the following legal grounds:

Performance of a Contract: Processing necessary to fulfill our contractual obligations to you, including providing our services and processing bookings.
Legitimate Interests: Processing necessary for our legitimate interests, such as improving our services, preventing fraud, and ensuring the security of our Platform.
Consent: Processing based on your explicit consent, such as for marketing communications.
Legal Obligation: Processing necessary to comply with applicable laws and regulations.

4. How We Share Your Information

We may share your information with the following categories of recipients:

4.1 Accommodation Providers

We share your information with accommodation providers to facilitate your booking and stay. This includes your name, contact details, booking dates, and any special requests.

4.2 Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as:

Payment processors
Customer support services
Cloud storage providers
Analytics providers
Marketing and advertising partners

4.3 Business Partners

We may share your information with business partners for co-branded promotions, loyalty programs, or other joint offerings with your consent.

4.4 Legal and Regulatory Authorities

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect our rights, property, or safety, or that of our users or others.

4.5 Corporate Transactions

In the event of a merger, acquisition, reorganization, bankruptcy, or other similar event, your information may be transferred as part of the assets of our business.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

The length of time we have an ongoing relationship with you
Whether there is a legal obligation to which we are subject
Whether retention is advisable in light of our legal position (such as for statutes of limitations, litigation, or regulatory investigations)

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Measures we implement include:

Encryption of sensitive personal information
Secure Sockets Layer (SSL) technology for data transmission
Regular security assessments and penetration testing
Access controls and authentication mechanisms
Employee training on data protection and security

7. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information:

7.1 Access and Information

You have the right to request information about the personal data we hold about you and how we process it.

7.2 Rectification

You have the right to have inaccurate personal information corrected and incomplete information completed.

7.3 Deletion

You have the right to request deletion of your personal information in certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected.

7.4 Restriction of Processing

You have the right to request restriction of processing of your personal information in certain circumstances, such as when you contest the accuracy of the information.

7.5 Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit this information to another controller.

7.6 Objection

You have the right to object to the processing of your personal information in certain circumstances, including processing for direct marketing purposes.

7.7 Withdrawal of Consent

Where processing is based on consent, you have the right to withdraw consent at any time.

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section.

8. Marketing Communications

You may opt-out of receiving marketing communications from us by:

Following the unsubscribe instructions in any marketing email we send
Adjusting your communication preferences in your account settings
Contacting us using the information provided in the "Contact Us" section

Please note that even if you opt-out of marketing communications, we may still send you non-promotional communications, such as booking confirmations and important service-related information.

9. International Data Transfers

Your personal information may be transferred to, and processed in, countries other than the country in which you reside. These countries may have data protection laws that differ from the laws of your country.

We implement appropriate safeguards to protect your personal information when transferred internationally, which may include:

Data transfer agreements incorporating standard contractual clauses approved by relevant data protection authorities
Certification under approved data protection frameworks
Obtaining your consent for the transfer

10. Children's Privacy

Our Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete that information as soon as possible.

11. Third-Party Links

Our Platform may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Cookies and Similar Technologies

We use cookies and similar technologies to enhance your experience on our Platform, gather information about users and their usage patterns, and manage and improve our Platform and services.

12.1 Types of Cookies We Use

Essential Cookies: Necessary for the Platform to function properly
Preference Cookies: Remember your settings and preferences
Analytics Cookies: Help us understand how visitors interact with our Platform
Marketing Cookies: Track your activity across websites to deliver targeted advertisements

12.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can typically delete cookies or set your browser to reject cookies. However, if you disable cookies, some features of our Platform may not function properly.

For more detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the updated Privacy Policy on our Platform and updating the "Last Updated" date. Your continued use of our Platform after such changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Data Protection Officer
Email: [email protected] (TBC)
Phone (Toll Free): 8002444486
Address: Siad Holdings - Mohammed Bin Abu Baker Street, An Nahdah, Jeddah 23615

For urgent matters related to your data privacy rights, please contact our dedicated privacy team at [email protected] (TBC)

15. Complaints

If you have a complaint about our handling of your personal information, please contact us first. If you are not satisfied with our response, you may have the right to lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA) or other relevant supervisory authority.