Privacy Notice
This is a draft and has not yet been reviewed by a Saudi-qualified lawyer. It must be reviewed before launch.
This notice explains what personal data we collect when you book a tour or contact us, why we collect it, how long we keep it, and what rights you have. It is written to follow the principles of Saudi Arabia’s Personal Data Protection Law (PDPL), which applies to processing personal data in the Kingdom, including data about visitors.
What we collect
When you request a booking, we collect only what is needed to run the tour:
- Your name
- Your WhatsApp or mobile number
- Your email address, if you give one
- Your accommodation or pickup area, and any note that helps us find you
- Your tour date, start time and group size
- Your preferred guide language
- Any mobility, child-seat or similar operational needs you tell us about
We do not ask for your passport number, national ID or hotel room number. We do not need them to collect you from a lobby and guide you around the city.
Why we collect it
To arrange and deliver the tour you asked for: confirming your booking, assigning a guide and vehicle, finding you at pickup, and contacting you if something changes. We also keep a record of bookings for our own accounting and operational history.
Marketing
We only send you offers if you separately opted in. That choice is a distinct checkbox from agreeing to the booking terms, and it is never a condition of booking. You can withdraw it at any time by telling us, and we will act on it.
Who sees your data
- Our own staff — the guide and driver assigned to your tour, and the office
- Our hosting and database provider, which stores the booking record
- WhatsApp, if you choose to message us there, under its own terms
We do not sell your personal data.
Where your data is stored
Our booking database is currently hosted outside the Kingdom, in the Asia Pacific (Mumbai) region. That means your data is transferred and stored abroad. We are stating this plainly rather than omitting it. Before this site handles live customer bookings, this arrangement needs a transfer assessment under the SDAIA regulation on transferring personal data outside the Kingdom, or the database needs to move to a Saudi region.
How long we keep it
Booking records are kept while they are needed for the tour and for our accounting obligations afterwards. Enquiries that do not become bookings are kept only as long as we are still in conversation with you.
Your rights
Under the PDPL you can ask to see the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it where we are not required to keep it, and withdraw consent where consent is what we relied on.
Security
Access to booking data is restricted to staff who need it, protected by individual accounts rather than a shared password. The site is served over HTTPS.