Privacy Policy
Portal Privacy Policy
Last updated: 3 November 2026
1. Introduction and Scope
This Policy explains how Portal, as the controller of personal data relating to its services, handles the personal data of users and guests when they register, make bookings or contact us. It covers the purposes of processing, data sharing and retention, and the rights of data subjects.
This Policy applies in accordance with the Personal Data Protection Law, its implementing regulations and other applicable laws in the Kingdom of Saudi Arabia. Where a particular processing activity requires your consent, we request that consent separately for the specified purpose. Merely visiting the website is not treated as consent to all processing purposes.
2. Personal Data We Collect and How We Use It
We collect the following data to the extent necessary to provide Portal’s services:
Data Purpose Name To register the booking, identify the booking holder and guest, and provide the service. Mobile number To communicate about the booking and send instructions and notifications relating to the stay. Email address To send booking confirmations, invoices and notifications, and respond to enquiries and requests. Booking details To manage the accommodation, booked dates, booking status and value, amendments, cancellations and refunds. Identification number To verify the guest’s identity and meet applicable registration requirements and legal obligations.When collecting data, we identify the fields required for the service and any optional fields. We may be unable to complete a booking or provide a particular service if the necessary data is not supplied.
The data listed above does not include full payment card details. Payment details are processed through the payment service provider used for the booking.
3. How We Collect Personal Data
We collect the data you provide when registering, making or updating a booking, or contacting us about Portal’s services, through the designated forms and communication channels.
Data needed to manage bookings and related operations is recorded in the systems used by Portal, including OwnerRez and Odoo.
If you make a booking on behalf of another person, you must have the necessary authority to provide their data and inform them of this Policy. Applicable legal requirements concerning notification of the source of their data and the purposes of processing will be observed.
4. Legal Bases for Processing
Depending on