Privacy Policy
At Sariya Hotel, Yanbu (“Sariya Hotel”, “the Hotel”, “we”, “us” or “our”), we respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, use, process, store, disclose and protect personal data when you interact with Sariya Hotel, including through our website, booking channels, digital platforms, communications, hotel services and other interactions with us.
This Privacy Policy is intended to provide information in accordance with the applicable laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL) and its Implementing Regulations.
The Personal Data Protection Law applies to the processing of personal data in the Kingdom of Saudi Arabia and establishes rights for data subjects and obligations for entities processing personal data. (dgp.sdaia.gov.sa)
1. Who We Are
The entity responsible for the processing of your personal data is:
Sariya Hotel, Yanbu
Kingdom of Saudi Arabia
Address: Al Mahar Island Royal Commission, King Abdullah Road, Al Subh, Yanbu 31360, Saudi Arabia
Telephone: +966 14 322 2225
Where applicable, specific services may involve third-party service providers or booking platforms that process personal data in accordance with their own privacy policies and applicable contractual arrangements.
2. What Is Personal Data?
For the purposes of this Privacy Policy, “Personal Data” means information that identifies an individual or that can reasonably be used, directly or indirectly, to identify an individual.
Depending on your interaction with us, this may include information such as your name, contact details, identification information, booking information, payment-related information, preferences, communications and other information associated with your stay or interaction with the Hotel.
The PDPL definition of personal data includes information that may directly or indirectly identify an individual, including names, identification numbers, addresses, contact information, financial information, photographs and videos. (dgp.sdaia.gov.sa)
3. Personal Data We May Collect
A. Identification and Contact Information
This may include:
● Full name;
● Nationality;
● Email address;
● Telephone or mobile number;
● Postal or residential address;
● Identification or passport information where required for hotel operations or applicable legal requirements.
B. Reservation and Stay Information
This may include:
● Booking details;
● Arrival and departure dates;
● Room preferences;
● Number of guests;
● Special requests;
● Stay history;
● Preferences relating to hotel services;
● Information relating to meetings, events, weddings or other services booked with us.
C. Payment and Transaction Information
Where necessary to process a transaction, we may process information relating to payments, deposits, invoices and transactions.
Where payment processing is handled by a third-party payment provider, payment information may be processed directly by that provider in accordance with its applicable privacy policy and security practices.
D. Communications
We may collect information contained in communications you send to us, including enquiries, requests, feedback, complaints and correspondence with the Hotel.
E. Website and Technical Information
When you access our website, certain technical information may be collected automatically, such as:
● IP address;
● Browser type;
● Device type;
● Operating system;
● Language and regional settings;
● Pages visited;
● Date and time of access;
● Website interaction data;
● Referring website or source;
● Technical and diagnostic information.
Such information may be collected through cookies and similar technologies.
F. Marketing Preferences
Where applicable, we may collect information relating to your communication preferences, including whether you wish to receive promotional offers, hotel news, special packages and other marketing communications.
G. Photographs, CCTV and Security Information
For security, safety and operational purposes, the Hotel may use CCTV systems in certain public or controlled areas of the property.
Where applicable, photographs or videos may also be taken during Hotel events, promotions or activities, subject to applicable laws and notices.
4. How We Collect Personal Data
We may collect personal data through:
● Our website;
● Online reservation and booking systems;
● Telephone calls;
● Email communications;
● Contact and enquiry forms;
● In-person interactions at the Hotel;
● Guest registration and check-in processes;
● Restaurants, spa, events and other Hotel services;
● Surveys, feedback forms and reviews;
● Social media and digital platforms;
● Third-party booking platforms and travel partners;
● Cookies and similar technologies;
● Other lawful means permitted under applicable law.
Where personal data is obtained from a third party, we will handle it in accordance with applicable legal requirements.
5. Why We Collect and Process Personal Data
We may process personal data for purposes including:
● Processing and managing reservations;
● Providing accommodation and Hotel services;
● Managing check-in and check-out;
● Responding to enquiries and requests;
● Providing requested services and fulfilling guest preferences;
● Processing payments and financial transactions;
● Managing meetings, events and weddings;
● Communicating with guests before, during and after their stay;
● Providing customer support;
● Managing complaints and feedback;
● Improving our services and guest experience;
● Operating, maintaining and improving our website and digital services;
● Conducting analytics and understanding website usage;
● Sending marketing communications where permitted by applicable law;
● Protecting the security of our guests, employees, property and systems;
● Detecting and preventing fraud, misuse and other unlawful activities;
● Complying with legal, regulatory and governmental requirements;
● Establishing, exercising or defending legal claims or rights;
● Performing other purposes permitted or required under applicable law.
We aim to collect and process only the personal data necessary for the relevant purpose.
6. Legal Basis for Processing
Depending on the circumstances, personal data may be processed on one or more lawful bases permitted under applicable Saudi law.
These may include:
● Your consent;
● The performance of a contract or taking steps at your request before entering into a contract;
● Compliance with a legal or regulatory obligation;
● Situations where processing is necessary to protect legitimate interests or rights, where permitted under applicable law;
● Protection of vital interests where applicable;
● Other legal bases permitted under the Personal Data Protection Law and its Implementing Regulations.
Where processing is based on consent, you may withdraw your consent where permitted by applicable law. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
7. Marketing Communications
Where permitted by applicable law, Sariya Hotel may use your contact information to provide information about Hotel offers, promotions, packages, events, experiences and other relevant communications.
Where consent is required, we will obtain the appropriate consent before sending such communications.
You may unsubscribe from marketing communications at any time by using the unsubscribe mechanism provided in the communication or by contacting us through the details provided in this Privacy Policy.
Please note that even if you opt out of marketing communications, we may continue to send transactional or service-related communications necessary for your reservation or relationship with the Hotel.
8. Cookies and Similar Technologies
Our website may use cookies and similar technologies to:
● Operate and secure the website;
● Remember preferences;
● Improve website functionality;
● Understand how visitors use our website;
● Measure website performance;
● Support analytics;
● Improve our digital services;
● Support marketing and advertising activities where applicable.
The use of cookies may involve information such as your IP address, device information, browsing activity and interaction with our website.
Where required by applicable law, we will provide appropriate mechanisms for managing or obtaining consent for non-essential cookies.
For further information, please refer to our Cookie Policy.
9. Sharing Personal Data
We may disclose or make personal data available to third parties where necessary for the purposes described in this Privacy Policy and where permitted by applicable law.
These parties may include:
● Hotel service providers;
● Booking and reservation system providers;
● Payment service providers;
● Information technology and hosting providers;
● Website and digital service providers;
● Marketing and communications service providers;
● Customer service providers;
● Professional advisers;
● Auditors and consultants;
● Government authorities or regulatory bodies where legally required;
● Other service providers necessary to provide requested Hotel services.
Where we engage third-party processors to process personal data on our behalf, we take reasonable steps to ensure that appropriate contractual, organisational and technical measures are in place.
10. International Transfers and Processing
Some of our service providers or technology systems may process or store personal data outside the Kingdom of Saudi Arabia.
Where personal data is transferred outside the Kingdom, Sariya Hotel will comply with the applicable requirements of the Personal Data Protection Law, its Implementing Regulations and the applicable regulations and controls governing transfers of personal data outside the Kingdom.
11. Data Security
Sariya Hotel takes appropriate organisational, technical and administrative measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, destruction or other unlawful processing.
However, no electronic transmission or storage system can be guaranteed to be completely secure.
We continually review our security practices and take reasonable steps to address identified risks.
12. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to meet applicable legal and regulatory requirements, to resolve disputes, establish or defend legal claims, and for other legitimate and lawful purposes.
Retention periods may vary depending on the nature of the information and the purpose for which it is processed.
When personal data is no longer required, it will be securely deleted, destroyed or anonymised where required and permitted by applicable law.
13. Your Rights
Subject to applicable laws and any relevant exceptions, you may have rights in relation to your personal data, including the right to:
● Be informed about the processing of your personal data;
● Request access to your personal data;
● Request correction or completion of inaccurate or incomplete personal data;
● Request deletion or destruction of personal data where applicable;
● Request restriction or cessation of certain processing where applicable;
● Withdraw consent where processing is based on consent;
● Exercise other rights available to you under applicable Saudi data-protection laws and regulations.
These rights are subject to the conditions, exceptions and limitations established under applicable law.
14. How to Exercise Your Rights
To submit a request concerning your personal data or to exercise an applicable data-subject right, please contact:
Sariya Hotel, Yanbu
Address: Al Mahar Island Royal Commission, King Abdullah Road, Al Subh, Yanbu 31360, Saudi Arabia
Telephone: +966 14 322 2225
When submitting a request, we may need to verify your identity and obtain sufficient information to process the request securely.
We will handle requests in accordance with the applicable requirements and timeframes under Saudi law.
15. Complaints and Enquiries
If you have any questions, concerns or complaints regarding the processing of your personal data, please contact Sariya Hotel using the contact details provided above.
We encourage you to contact us first so that we can review and address your concern.
You may also have the right to submit a complaint to the competent regulatory authority in accordance with the applicable laws and regulations of the Kingdom of Saudi Arabia.
16. Children’s Personal Data
Our services are generally intended for adults and individuals who are legally capable of entering into applicable agreements.
Where personal data relating to children or minors is collected in connection with a Hotel service, reservation or stay, such information will be processed in accordance with applicable laws and regulations and only where there is an appropriate lawful basis for doing so.
17. Third-Party Websites
Our website may contain links to third-party websites, applications or services.
Sariya Hotel is not responsible for the privacy practices, security or content of third-party websites.
We recommend reviewing the privacy policies of third-party websites before providing them with personal data.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, data-processing practices or applicable laws and regulations.
The updated version will be published on this website together with the relevant “Last Updated” date.
Where required by applicable law, we will provide additional notice regarding material changes.
19. Contact Us
If you have any questions regarding this Privacy Policy or how Sariya Hotel processes personal data, please contact us:
Sariya Hotel, Yanbu
Kingdom of Saudi Arabia
Address: Al Mahar Island Royal Commission, King Abdullah Road, Al Subh, Yanbu 31360, Saudi Arabia
Telephone: +966 14 322 2225
