PRIVACY POLICY FOR KAABAROOM
Last Updated: October 6, 2026
This Privacy Policy ("Policy") describes how your personally identifiable information ("Personal Information") is collected, protected, and used when you visit the KaabaRoom website ("Website" or "Service") and use any of its related products and services (collectively, "Services"). KaabaRoom is a specialized hotel booking platform dedicated to providing accommodation solutions in the holy cities of Makkah Al-Mukarramah and Al-Madinah Al-Munawwarah for pilgrims and visitors.
This Policy is a legally binding agreement between you ("User", "you", or "your") and the Website operator ("Operator", "we", "us", or "our"). By accessing and using the Website and Services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Agreement. This Policy does not apply to the practices of companies that we do not own or control, or to individuals that we do not employ or manage.
1. Automatic Collection of Information
When you access the KaabaRoom Website, our servers automatically record information that your browser sends. This data may include:
- Your device's IP address
- Browser type and version
- Operating system type and version
- Language preferences
- The webpage you were visiting before you came to our Website
- Pages of our Website and Services that you visit
- Time spent on those pages
- Information you search for on the Website (e.g., hotel names, dates, cities like Makkah or Madinah)
- Access times and dates
- Other statistical data
This automatically collected information is used only to identify potential cases of abuse and to establish statistical information regarding the usage and traffic of the Website and Services. This statistical information is not aggregated in a way that would identify any particular user.
2. Collection of Personal Information
You can browse KaabaRoom without revealing your identity. However, to use certain features—such as booking a hotel, creating an account, or saving your favorite properties—you may be asked to provide Personal Information. We receive and store any information you knowingly provide when you create an account, make a hotel reservation, publish a review, or fill out online forms.
This information includes:
- Personal & Regulatory Details: Full name, country of residence, nationality, gender, date of birth, passport copies, National ID, Muqeem card details, and Umrah/Hajj visa documentation.
- Contact Information: Email address, phone number, and mailing address.
- Account Details: Username, unique user ID, and encrypted password.
- Travel & Pilgrimage Details: Travel dates, room preferences, Nusuk application details (where applicable), and special requests (e.g., Haram views, wheelchair access).
- Payment Information: Credit/debit card details (including Mada) processed securely through PCI-DSS compliant third-party payment gateways.
- Travel Companions: Names and identification details of family members or group members staying with you.
3. Use and Processing of Collected Information
We process your Personal Information to operate KaabaRoom effectively and to fulfill local legal mandates. Your information is used for the following purposes:
- Creating, securing, and managing user accounts.
- Processing hotel reservations and issuing formal booking confirmations.
- Sending administrative updates, check-in instructions, and high-season policy updates.
- Requesting user feedback and verified hotel reviews.
- Complying with regulatory requirements mandated by the Ministry of Hajj and Umrah and local tourism authorities in Saudi Arabia.
- Enforcing our platform Terms and Conditions and preventing fraudulent transactions.
Legal Bases for Processing
In compliance with the Saudi Arabian Personal Data Protection Law (PDPL) and international standards (like GDPR):
- Performance of a Contract: Necessary to execute your room reservation.
- Legal Obligation: Compliance with local security laws requiring guest identity tracking.
- Consent: For sending promotional offers or optional marketing communications.
- Legitimate Interests: Improving platform performance and enhancing guest safety.
4. Managing and Deleting Your Information
You have the right to access, update, rectify, or request the destruction of the Personal Information we hold about you. You can update most data via your account dashboard.
If you request the absolute deletion of your account or data, we will securely destroy it, except where we are legally obligated to retain copies under Saudi Arabian tax, financial, or pilgrimage tourism regulations.
5. Disclosure of Information
We strictly protect your privacy and do not sell, rent, or trade your Personal Information. To fulfill your bookings, we share necessary data with trusted third parties:
- Accommodations: The specific hotels in Makkah or Madinah that you have booked, allowing them to legally check you in.
- Government Gateways: Authorized local tourism data systems and Hajj/Umrah verification protocols when required.
- Payment Gateways: Secure local and international transaction processors.
- Technical Providers: Secure cloud infrastructure, database hosting, and customer support tool channels.
All third-party partners are bound by strict data processing agreements and are legally prohibited from using your data for unauthorized marketing purposes.
6. Retention and Security of Data
We retain your data only as long as necessary to fulfill your travel bookings, provide customer support, and meet statutory financial auditing laws in Saudi Arabia. Once no longer required, data is permanently erased or fully anonymized.
To safeguard your data, KaabaRoom employs robust technical and organizational measures, including Secure Socket Layer (SSL) encryption, firewalls, and restricted data access protocols. While we implement industry-standard defenses, no transmission over the internet can be guaranteed as 100% secure.
7. Your Data Rights
Under the Saudi PDPL and applicable global privacy regulations, you possess the following rights:
- Right to be Informed: Knowing exactly how your data is being used.
- Right of Access: Requesting a copy of your stored Personal Information.
- Right to Rectification: Correcting inaccurate or outdated profile details.
- Right to Destruction: Requesting erasure of data when its booking purpose has concluded.
- Right to Consent Withdrawal: Opting out of marketing distributions at any time.
8. Privacy of Children
KaabaRoom does not knowingly collect Personal Information from individuals under the age of 18 without explicit parental or legal guardian supervision. Minor data is only processed when provided by a parent or guardian as part of a family accommodation booking.
9. Cookies and Tracking Technologies
KaabaRoom uses cookies to personalize your browsing experience, store currency preferences, and retain search configurations (such as hotel dates in Makkah).
A cookie is a small text file placed on your device. You can choose to accept or decline cookies via your web browser settings; however, disabling cookies may prevent certain components of our booking engine from operating correctly.
10. Changes to this Policy
We reserve the right to modify this Privacy Policy at any time. When updates occur, we will revise the "Last Updated" date at the top of this page. Continued utilization of our Services following any policy modifications constitutes your formal acceptance of the updated terms.
11. Contacting Us
If you have any inquiries regarding this Privacy Policy, wish to exercise your data rights, or need clarification on how your passport/visa data is processed, please contact us:
- Email: support@kaabaroom.com
- Office: KaabaRoom Support, Makkah, Kingdom of Saudi Arabia
