BookSaudia (“we”, “us”, “our”) provides private car booking, driver assignment, and related travel services across Saudi Arabia. This Privacy Policy explains what information we collect through our website (booksaudia.com) and our mobile applications (collectively, the “Services”), why we collect it, who we share it with, and the choices you have. It applies to customers, drivers, agents, and corporate users of the Services.

1. Information we collect

1.1 Account and identity information

• Name, email address, mobile phone number, preferred language.
• Account credentials (hashed password) and one-time verification codes.
• If you sign in with Google or Apple, we receive the basic profile information those providers share (name, email, unique identifier).
• Government identification and licensing details from drivers and agents (e.g. Iqama number, driving licence, vehicle documents) collected to meet Saudi Transport Authority (TGA) requirements.

1.2 Booking and travel information

• Pickup and drop-off addresses, dates, times, and passenger counts.
• Flight numbers or train references you provide for airport / station transfers.
• Passenger manifest details you enter when required by TGA for cross-city trips.
• Add-ons you select (meet & greet, etc.) and any messages exchanged with your driver.

1.3 Location information

• Address suggestions rendered by Google Maps as you type in search fields. If you tap “Use current location” we request the device’s coarse latitude/longitude only for that lookup — it is not stored.
• For active journeys, the assigned driver’s vehicle GPS location is streamed to us via our Traccar telemetry service so we can display live tracking to you and confirm safe completion. Vehicle location is retained only for the duration of the journey plus a short audit window.

1.4 Payment information

• Card and payment details are collected and processed entirely by our payment providers (HyperPay and Stripe). We do not store your full card number or CVC on our servers. We receive only a transaction reference, the payment status, the last four digits of the card, and the card brand for reconciliation purposes.

1.5 Device and usage information

• IP address, approximate country/region derived from IP (via MaxMind GeoIP).
• Browser or mobile app version, operating system, device identifiers.
• Session cookies used to keep you signed in, remember your language preference, and enforce security controls such as CSRF protection and rate limiting.
• Server-side logs of requests, errors, and security events.

1.6 Communications

• Emails, SMS, and in-app chat messages you send to us, to your driver, or that we send to you (booking confirmations, receipts, security alerts).

2. How we use your information

• To create your account, verify your identity, and let you sign in.
• To take and fulfil your bookings, dispatch drivers, and generate booking references.
• To calculate journey pricing, taxes, and refunds.
• To send booking confirmations, PDF vouchers, driver pickup slips, and receipts.
• To provide live driver-tracking, ETA updates, and SOS alerts during a journey.
• To comply with Saudi Transport Authority passenger-manifest rules and other legal obligations.
• To detect fraud, abuse, and unauthorised access, and to enforce our terms.
• To improve the Services, debug problems, and analyse aggregate usage.
• To respond to your questions, complaints, and support requests.

3. When and with whom we share information

We share the minimum information necessary with a limited set of parties:

• Assigned driver — your name, contact number, pickup / drop-off address, pickup time, journey code, and any add-on notes so they can complete your trip.
• Travel agents and corporate accounts — where a booking was made on your behalf, we share the booking status and journey details with the party who booked it.
• Payment providers (HyperPay, Stripe) — to process your payment. They act as independent controllers of the card data you enter with them.
• Legal and regulatory authorities — including the Saudi Transport Authority, law enforcement, and courts, where we are required to disclose information by applicable law or a valid legal request.

We do not sell your personal information, and we do not share it with advertising networks for cross-context behavioural advertising.

4. International data transfers

The Services are operated from Saudi Arabia. Some of our infrastructure providers process data outside Saudi Arabia (for example, in Singapore, the European Union, or the United States). Where this happens we rely on the providers’ contractual safeguards and take reasonable steps to protect the information consistent with this Policy.

5. Data retention

• Booking records — retained for the period required by Saudi tax and transport regulations (currently five years for financial records) so we can support audits, dispute resolution, and safety investigations.
• Live GPS traces — retained only for the active journey plus a short audit window, after which they are aggregated or deleted.
• Account information — retained while your account is active. If you request deletion, we anonymise your account rather than remove associated booking records outright, so the historical booking data remains lawful to keep.

6. Your rights and choices

Subject to applicable law, you may:

• Access the personal information we hold about you.
• Correct information that is inaccurate or out of date.
• Request deletion or anonymisation of your account.
• Object to or restrict certain processing.
• Withdraw a consent you previously gave (for example, location permission).
• Lodge a complaint with the relevant data-protection authority in your jurisdiction.

To exercise any of these rights, email us at support@booksaudia.com. We may need to verify your identity before acting on the request.

7. Security

We protect your information with industry-standard safeguards: TLS encryption in transit, hashed passwords, rate limiting on login and OTP endpoints, CSRF protection, restricted server access, immutable audit logging, and regular dependency and infrastructure updates. No system is perfectly secure — please use a strong unique password and keep your device software up to date.

8. Children

The Services are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

9. Third-party links

The Services may contain links to third-party websites (for example, our payment providers). Those websites have their own privacy policies. We are not responsible for the content or practices of any linked site.

10. Changes to this Policy

We may update this Privacy Policy from time to time. When we do we will change the “Last updated” date at the top of this page, and — for material changes — notify you inside the app or by email. Continued use of the Services after the effective date of a change constitutes acceptance of the updated Policy.

11. How to contact us

BookSaudia — powered by AR Travel & Tours Limited KSA
2162, Makkah Al-Salamah District, Hatem Bin Al Laith Street, Additional No. 6818 — 6th Floor, Office No. 17, Makkah, 24242, Kingdom of Saudi Arabia
VAT number: 311901668900003  ·  CR Number: 4031318056
Email: support@booksaudia.com
Phone: +966-56-624-0786  ·  +44-20-3355-7160