Privacy policy

Privacy Policy

1. Introduction

This Privacy Policy explains how personal data is collected, used, stored, disclosed, and protected when users access or interact with the Platform.

The Platform connects customers with providers of catering, food services, hospitality, restaurants, hotels, banquet halls, event management, and related services.

We are committed to protecting personal data and respecting the privacy rights of users in accordance with the Personal Data Protection Law (PDPL) and its Implementing Regulations in the Kingdom of Saudi Arabia.

This Privacy Policy applies to visitors, registered users, Service Providers, and Customers.

Depending on how users interact with the Platform, we may collect the following categories of information:

2.1. Account Information

• Full name and username.

• Email address and telephone number.

• Login credentials in a securely protected format.

• Account preferences and registration details.

2.2. Service Provider Information

• Business name and commercial contact details.

• Business location and address.

• Business descriptions and service categories.

• Business registration and licensing information where required.

• Contact details of authorized business representatives.

• Photographs, logos, and other business-related materials.

2.3. Subscription and Payment Information

• Selected subscription plan.

• Subscription activation and expiration dates.

• Payment status, transaction references, and billing records.

• Information required for invoices and applicable tax documentation.

Where payments are processed through an external payment service provider, payment information may be handled directly by that provider in accordance with its applicable privacy and security practices.

2.4. Technical and Usage Information

• IP address and device information.

• Browser type and operating system.

• Pages visited and interactions with the Platform.

• Access dates, session information, and technical logs.

• Cookies and similar technologies, where used.

2.5. Communications

• Customer support inquiries.

• Complaints and reports.

• Messages submitted through contact forms.

• Correspondence relating to accounts, subscriptions, or advertised services.

We aim to collect only personal data reasonably necessary for specified and legitimate purposes.

Personal data may be processed for the following purposes:

3.1. Creating, managing, and securing user accounts.

3.2. Registering Service Providers and publishing their business listings.

3.3. Managing subscriptions, billing, and payment confirmations.

3.4. Enabling Customers to discover and contact Service Providers.

3.5. Responding to inquiries, complaints, and support requests.

3.6. Verifying business information and preventing fraudulent or unauthorized activities.

3.7. Maintaining the functionality, security, and performance of the Platform.

3.8. Analyzing website usage and improving user experience.

3.9. Communicating important service updates, subscription notifications, and changes to Platform policies.

3.10. Sending promotional communications where permitted by applicable law and subject to any required consent.

3.11. Complying with applicable legal, regulatory, and accounting obligations.

Personal data will not be used for purposes incompatible with those originally disclosed unless a lawful basis exists and any required notices or consents have been provided.

Personal data is processed only where a valid legal basis exists under applicable Saudi Arabian data protection laws.

Depending on the circumstances, processing may be based on:

4.1. The user's consent, where required.

4.2. The necessity of processing to perform an agreement with the data subject.

4.3. Compliance with applicable legal or regulatory obligations.

4.4. Legitimate interests where permitted under the PDPL and its Implementing Regulations, subject to applicable conditions and safeguards.

4.5. Other lawful grounds expressly permitted under applicable legislation.

Where consent is the legal basis for processing, users may withdraw their consent in accordance with applicable law.

Service Providers may choose to publish business information to promote their services.

Such information may include:

• Business name and logo.

• Business location.

• Service descriptions and categories.

• Business contact information.

• Photographs and promotional materials.

Information intentionally submitted for publication may be accessible to visitors and potential Customers.

Service Providers must ensure that they have the necessary authority and lawful basis to publish any personal data relating to business owners, employees, representatives, or other individuals.

Personal contact details will not be made publicly available merely because they were provided during account registration, unless publication is part of the relevant service and has an appropriate lawful basis.

We do not sell personal data.

Personal data may be shared only where necessary and legally permitted, including with:

6.1. Technology and hosting providers supporting Platform operations.

6.2. Payment service providers handling subscription transactions.

6.3. Authorized service providers assisting with technical support, security, communications, or website analytics.

6.4. Customers or Service Providers where sharing is necessary to facilitate a requested business connection.

6.5. Government authorities, regulators, or judicial bodies where disclosure is legally required.

6.6. Professional advisers where necessary for legitimate legal, accounting, or compliance purposes and subject to appropriate confidentiality obligations.

We require third-party processors to handle personal data in accordance with applicable legal requirements and appropriate contractual safeguards.

We implement reasonable and appropriate technical, organizational, and administrative safeguards designed to protect personal data against unauthorized access, disclosure, alteration, loss, or misuse.

These safeguards may include:

• Access controls and authentication mechanisms.

• Encryption where appropriate.

• Secure account and password management.

• Monitoring and protection against unauthorized activities.

• Restricted access to personal data.

• Security maintenance and system updates.

Although appropriate safeguards are implemented, no online system can guarantee absolute security.

Where a personal data breach occurs, we will assess and address it in accordance with applicable Saudi Arabian data protection requirements, including notification obligations where applicable.

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or to comply with applicable legal obligations.

Retention periods may depend on:

8.1. The duration of the user's account or subscription.

8.2. The need to maintain billing and transaction records.

8.3. Applicable accounting, tax, and regulatory requirements.

8.4. The resolution of complaints, disputes, or legal claims.

8.5. Legitimate operational and security requirements permitted by law.

When personal data is no longer required and no lawful reason for retention remains, it will be securely deleted or anonymized in accordance with applicable requirements.

Subject to the conditions and limitations established by the Saudi Personal Data Protection Law, individuals may have the following rights:

9.1. Right to Be Informed

The right to understand how and why their personal data is processed.

9.2. Right of Access

The right to access personal data held about them.

9.3. Right to Obtain Personal Data

The right to request their personal data in a readable and clear format, subject to applicable legal requirements.

9.4. Right to Correction

The right to request correction, completion, or updating of inaccurate or incomplete personal data.

9.5. Right to Destruction

The right to request the destruction of personal data where permitted under applicable law.

9.6. Right to Withdraw Consent

The right to withdraw consent where processing relies on consent, subject to applicable legal conditions.

Users may submit requests concerning their personal data through the Platform's official contact channels.

Requests will be handled in accordance with applicable statutory requirements and time limits.

The Platform may use cookies and similar technologies to support website functionality, improve security, remember preferences, and analyze website performance.

These technologies may include:

10.1. Essential Cookies: Necessary for core website functions, account authentication, and security.

10.2. Preference Cookies: Used to remember selected settings and preferences.

10.3. Analytics Cookies: Used to understand website usage and improve performance.

10.4. Marketing Cookies: Used for advertising measurement or promotional activities where implemented.

Where legally required, non-essential cookies or tracking technologies will be used only after obtaining appropriate consent.

Users may manage certain cookie preferences through available website controls or browser settings.

The Platform may send communications relating to its services, subscription offers, promotional campaigns, or relevant business opportunities.

Marketing communications involving personal data will be sent only where a valid legal basis exists and any required consent has been obtained.

Users may withdraw marketing consent or unsubscribe through the available communication channels.

Withdrawal of marketing consent will not prevent the Platform from sending necessary operational, security, or contractual notifications.

Personal data may be processed or accessed outside the Kingdom of Saudi Arabia only where permitted under the PDPL and applicable regulations governing the transfer or disclosure of personal data outside the Kingdom.

Where international transfers occur, the Platform will apply the legally required conditions and safeguards.

The use of external hosting, analytics, communications, or payment providers will be assessed for compliance with applicable cross-border data transfer requirements.

The Platform may contain links to external websites, Service Provider websites, or third-party services.

These third parties may operate independently and maintain their own privacy practices.

The Platform is not responsible for the independent processing activities of third parties, except to the extent responsibility arises under applicable law.

Users are encouraged to review the privacy policies of external services before providing personal information.

The Platform is intended primarily for individuals and businesses seeking or advertising professional services.

Users registering for commercial services must have the legal capacity or appropriate authorization required to enter into the relevant agreements.

The Platform does not intentionally seek to collect personal data from children for independent commercial account registration.

Where children's personal data is processed, applicable Saudi Arabian legal requirements and necessary safeguards will be observed.

Users may request account closure through the Platform's available support channels.

Following account closure, personal data will be deleted or retained according to applicable legal requirements, legitimate retention purposes, and the rights of data subjects.

Account closure does not automatically require the immediate deletion of records that must lawfully be retained.

This Privacy Policy may be updated to reflect changes in applicable laws, regulatory requirements, Platform functionality, or personal data processing practices.

Material changes will be communicated through appropriate channels, and additional consent will be obtained where legally required.

The updated Privacy Policy will become available through the Platform.

Users may submit privacy-related questions, requests, or complaints through the Platform's official contact channels.

Requests will be reviewed and addressed in accordance with applicable Saudi Arabian data protection requirements.

Where applicable, individuals may also exercise their right to submit complaints to the competent Saudi Arabian data protection authority.

This Privacy Policy is governed by the applicable laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law and its Implementing Regulations.

Any dispute relating to personal data processing shall be handled in accordance with applicable Saudi Arabian laws and the jurisdiction of the competent authorities.