Privacy Notice
This is a draft and has not yet been reviewed by a Saudi-qualified lawyer. It must be reviewed before launch.
This notice explains what personal data we collect when you book a tour or contact us, why we collect it, how long we keep it, and what rights you have. It is written to follow the principles of Saudi Arabia’s Personal Data Protection Law (PDPL), which applies to processing personal data in the Kingdom, including data about visitors.
What we collect
When you request a booking, we collect only what is needed to run the tour:
- Your name
- Your WhatsApp or mobile number
- Your email address, if you give one
- Your accommodation or pickup area, and any note that helps us find you
- Your tour date, start time and group size
- Your preferred guide language
- Any mobility, child-seat or similar operational needs you tell us about
We do not ask for your passport number, national ID or hotel room number. We do not need them to collect you from a lobby and guide you around the city.
Why we collect it
To arrange and deliver the tour you asked for: confirming your booking, assigning a guide and vehicle, finding you at pickup, and contacting you if something changes. We also keep a record of bookings for our own accounting and operational history.
Marketing
We only send you offers if you separately opted in. That choice is a distinct checkbox from agreeing to the booking terms, and it is never a condition of booking. You can withdraw it at any time by telling us, and we will act on it.
Cookies and analytics
We use Google Analytics to count visits and see which tours people look at, so we know which pages are worth improving. It sets cookies in your browser and shares your IP address and device details with Google.
We have switched off Google’s advertising features, so nothing collected here is used to build an advertising profile of you or to follow you around other websites. We never send Google your name, phone number, email, hotel or booking reference, and the staff area of this site is excluded from analytics entirely.
Analytics is not needed to run your tour. You can block it with your browser’s privacy settings, or with any content blocker, and everything on this site will still work.
Who sees your data
- Our own staff — the guide and driver assigned to your tour, and the office
- Our hosting and database provider, which stores the booking record
- WhatsApp, if you choose to message us there, under its own terms
- Google Analytics, for the visit statistics described above
We do not sell your personal data.
Where your data is stored
Your booking record is held by our hosting provider on servers outside the Kingdom. We state this because the PDPL requires a controller to tell you when personal data is transferred abroad.
How long we keep it
Booking records are kept while they are needed for the tour and for our accounting obligations afterwards. Enquiries that do not become bookings are kept only as long as we are still in conversation with you.
Your rights
Under the PDPL you can ask to see the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it where we are not required to keep it, and withdraw consent where consent is what we relied on.
Security
Access to booking data is restricted to staff who need it, protected by individual accounts rather than a shared password. The site is served over HTTPS.