Privacy policy

General draft text — to be reviewed by legal counsel and updated before launch.

We respect your privacy and process your personal data in line with the Saudi Personal Data Protection Law (PDPL).

What we collect

• Account data: name, mobile number, email.
• Booking data: places and services booked, times, party size, and the declarations you accept.
• Payment data: cards are processed by the payment provider; we do not store your full card number.
• Usage data: technical details such as device type and sign-in logs, for security and to improve the service.
• Guide chats: your messages with the Shatt Guide, to answer you and improve quality.

How we use it

To create your account and manage your bookings, send confirmations and reminders, provide support, prevent fraud and meet legal obligations. We send marketing messages only according to your preferences.

Who we share it with

• The venue you booked: only what it needs to serve you (name, booking, party size).
• Service providers: such as payments, messaging and hosting, under suitable data protection commitments.
• Authorities: when the law requires it. We do not sell your personal data.

Retention and security

We keep data for as long as it is needed or the law requires (for example financial records), and protect it with encryption and access controls.

Your rights

You can view your data, request a copy, correct it and ask for your account to be deleted, from your account page or by contacting us.

Contact

support@shatt.sa