This policy follows the Saudi Personal Data Protection Law and its regulations.
Data we collect
- Booking data: name, mobile number, email, nationality, number of guests, expected arrival time, special requests, and the occupant's name and mobile if booking for someone else.
- Saved companions (optional): name, category (adult or child), nationality, and relationship.
- Payment data: payment method, the last 4 digits of the card, and the transaction reference only. The full card number never reaches us; it is processed by Tap Payments.
- Technical data: IP address and device type, for security and fraud prevention.
- We do not collect ID numbers or ID images through the website. IDs are checked at reception only.
Why we use it
To make and manage your booking, send confirmations and reminders on WhatsApp and email, process payments and refunds, officially register your stay, and improve our service. We only send marketing offers with your consent, and you can turn them off in "My profile".
Who we share it with
- The property management system (Taskeen): to run your stay, register it with the authorities, and issue the tax invoice.
- Tap Payments, and Tabby or Tamara when chosen: to process payment.
- Our WhatsApp Business provider: to send messages.
- Competent government authorities: whenever the law requires.
We never sell your data.
Retention
We keep account data as long as the account exists. Booking and payment records are kept for the period required by tax and tourism regulations (as required by law), then deleted or anonymised.
Your rights
You have the right to access your data, get a copy, correct it, delete it, and withdraw your consent. Most of these are available directly in "My profile" (download data, delete account). For anything else, contact privacy@thrio.sa and we reply within 30 days. You may also file a complaint with the Saudi Data & AI Authority (SDAIA).
Security
We encrypt data in transit, restrict access to authorised staff according to their roles, and verify identity with a code sent to your mobile before showing any booking.