Privacy Policy

Your privacy,in safe hands

This policy explains how we collect, use and protect your personal data when you use the Abyat Al Sharq Hotel website, in line with the Personal Data Protection Law of the Kingdom of Saudi Arabia.

On this page
  1. Who we are
  2. The data we collect
  3. How we use your data
  4. Legal basis
  5. Sharing your data
  6. WhatsApp and third-party services
  7. Cookies and browser storage
  8. How long we keep data
  9. Your rights
  10. Protecting your data
  11. Changes to this policy
  12. Contact us

Last updated: 11 October 2026

Who we are

The party responsible for your data is Abyat Al Sharq Hotel Operating Company, which operates Abyat Al Sharq Hotel in Al-Madinah Al-Munawwarah. For any question about your data: appiat.almadinah@appiatalsharq.com or +966 50 988 8955.

The data we collect

We collect only the minimum needed to serve you:

  • Booking requests: the website does not store them. It turns your details into a message that you send to the hotel yourself by WhatsApp or email, containing your name, mobile number, stay dates, room type, number of rooms and guests, and any notes you write.
  • Job applications: the website does not store them. It prepares an email or WhatsApp message that you send to us yourself, containing your name, mobile number, email, the area you apply for, your city, the summary you write, and the CV you attach.
  • Visitor counter: only the total number of visits per day, with nothing that identifies you.
  • Technical protection data: we turn your internet (IP) address into a one-way hashed token, made with a secret key, that does not reveal the address and cannot be turned back into it, and keep it for two hours at most to stop repeated visits from being over-counted.

How we use your data

  • To contact you to confirm your booking request and provide our hotel services.
  • To review job applications and contact candidates.
  • To protect the website from misuse.
  • To know how many people visit the website, in aggregate.

We do not use your data for advertising, and we never sell it.

Legal basis

We process your data on the basis of your consent when you send a form, to fulfil the request you made, and in our legitimate interest in keeping the website secure, in accordance with the Personal Data Protection Law and its implementing regulations.

Sharing your data

Only the relevant staff at the hotel and the company can access your data, and only as far as their work requires.

The website is hosted by a technical service provider, which keeps the visitor counter and the technical protection data described above and may keep temporary technical logs for operation and security; its servers may be outside the Kingdom, subject to the safeguards the law requires. Booking and job messages reach us by WhatsApp or email.

We disclose your data to a government authority only when it is requested in accordance with applicable law.

WhatsApp and third-party services

When you tap a WhatsApp button, the website opens WhatsApp with a ready-made message that is sent only if you choose to send it; the conversation is subject to WhatsApp's privacy policy. If you choose email, the website opens your own email app with a ready-made message that is sent only if you choose to send it. If you choose to show the embedded map, it loads from Google Maps and is subject to Google's privacy policy. The website also uses Google Fonts, which load from Google's servers when you open a page, so Google receives your device's internet (IP) address; they are subject to Google's privacy policy.

Cookies and browser storage

We do not use advertising cookies or tracking tools. We use one essential cookie, which lasts 30 minutes, to count your visit once, and we may store simple preferences in your browser, such as the motion setting; you can clear these from your browser settings at any time.

How long we keep data

We keep your data only as long as needed for the purpose it was collected for, then delete it or remove anything that identifies you, unless the law requires us to keep it longer.

Your rights

The Personal Data Protection Law gives you the following rights, which you can exercise by contacting us:

  • To be informed of how your data is collected and used.
  • To access your data and obtain a copy of it.
  • To request that your data be corrected, completed or updated.
  • To request that your data be destroyed once it is no longer needed.
  • To withdraw your consent at any time, without affecting what came before.

We respond within the period set by the law. You also have the right to lodge a complaint with the Saudi Data & AI Authority (SDAIA).

Protecting your data

The website runs over an encrypted connection and does not store booking or job details. Your messages reach the hotel by WhatsApp or email, where only the relevant staff can read them.

Changes to this policy

We may update this policy when needed, and will publish the updated version on this page with its last-updated date.

Contact us

For any question about your privacy, or to exercise your rights: appiat.almadinah@appiatalsharq.com or +966 50 988 8955.