Welcome to the privacy policy of Waja Hostels platform.

Please read this policy carefully.

Effective Date: 01/10/2023

Section (1): Introduction

1. We respect the privacy of all users and are fully committed to protecting their personal data and using it appropriately. This policy explains how we collect, store, process, and use information and personal data, and how you can access and update it.

2. By accessing or using any of the services of the Waja Hostels platform, you acknowledge your agreement to this policy. You may not use the Waja Hostels platform unless you agree to the practices outlined in this policy.

3. The terms used in this Privacy Policy have the same meanings as in our terms and conditions.

Section (2): Definitions

Section (3): General Principles of Privacy Policy

The following principles have been established as guidelines for the privacy policy of the Waja Hostels platform:

1. Publish a copy of this policy – and its updates – to clarify its practices when collecting personal data.

2. Collect and use personal data in accordance with legitimate purposes.

3. Take reasonable measures to ensure the accuracy, completeness, and timeliness of personal data.

4. Process data in a manner consistent with the purposes for which it was collected or as consented to.

5. Treat personal data as confidential and keep it secure.

6. Take appropriate measures to provide adequate protection for data disclosed to other parties.

7. We greatly value the privacy of our website visitors and commit to protecting it.

8. Please read the privacy policy carefully to understand how we collect, use, protect, or otherwise handle personal identification information in accordance with our website.

9. You must maintain the confidentiality of your account information on the platform, and you are aware and agree that you are not authorized to share this information with others. This data includes the username and password, and you are fully responsible for any disclosure of this confidential information to third parties and for any use by anyone to whom you have disclosed this confidential information.

10. You commit to maintaining the confidentiality and privacy of your personal data, and you acknowledge your personal responsibility for any disclosure of personal information to the other party without any interference from the platform.

11. You commit not to disclose any personal information during the use of any communication feature except what is required for case diagnosis or within the limits necessary to request services, and you are personally responsible for any such disclosure in cases other than those mentioned.

12. You undertake to maintain the platform's secrets and are accountable to us for any breach of the platform's confidentiality and operations. You also commit to refrain from disclosing any information related to the platform's operation to others, whether for compensation or without compensation.

13. You agree to avoid following any method that may help collect information about other users, including their phone numbers and other means of contact.

14. You acknowledge and agree that the internet is not a secure means, and the complete confidentiality of your personal information cannot be guaranteed.

Section (3): Types of Data We Collect

1. We use various methods to collect personal data from and about you through direct interactions with you, automated technologies and interactions, third parties, or when subscribing to newsletters or completing other forms.

2. We collect various types of personal data, including but not limited to:

- Contact Data: Such as name, email address, message subject, and message content.

- Technical Data: Such as the Internet Protocol (IP) addresses used to connect your device to the internet, device name and location, operating system type, mobile device identifiers, version, language preferences, information you search for, access times, dates, and other statistics.

- Log Data: Such as device log data and internal usage analytics tools, including clicks, scrolls, features accessed, access time, duration, service usage method, event information, and other log data generated using the services.

- Geographic Location Data: We may use and store information about your geographic location if you permit us to do so.

- Contributions Data: Such as notes, opinions, comments, and information you provide to us through any available features on the Waja Hostels platform.

- Partners Data: Such as marketing and advertising partners and other third parties.

- Correspondence Information: Any information that comes to us in correspondence sent via email or through our website, including shared content and descriptive data.

- Any Other Personal Information: Any other personal information you send to us.

3. Users are required to provide complete, accurate, and truthful data and to maintain the confidentiality of their account information.

Section (4): Use of Personal Data

We use the personal data we collect for the following purposes:

1. Assisting you in creating an account, managing it, and verifying your identity.

2. Providing access to our services, enabling you to use and manage your account.

3. Improving and developing our systems and analytics, enhancing quality and standards for our services.

4. Monitoring the performance of our services and making your experience more enjoyable.

5. Providing technical support, responding to your inquiries and questions.

6. Sending updates to the privacy policy and terms of use.

7. Providing you with marketing and promotional materials about services we believe may interest you.

8. Detecting and correcting errors, enhancing data security, preventing fraud and misuse.

9. Enhancing our services and your experience with them.

10. Complying with our legal obligations, laws, and applicable regulations.

11. Managing our website and customizing our online content.

12. Customizing our website to be more suitable for you.

13. Enabling you to use the services available on our website.

14. Sending email notifications you have specifically requested.

15. Verifying compliance with the terms and conditions governing the use of our website (including monitoring private messages sent through our website's private messaging service).

Section (5): Sharing of Personal Data

1. We may disclose your personal data in the following specific situations:

2. When necessary to achieve our legitimate interests.

3. We may share your personal data to fulfill the terms of our contract with you.

4. When your data is required for compliance purposes (such as compliance with a court order or other legal proceedings) or to exercise our legal rights, establish or defend them, or protect your vital interests or the vital interests of another person.

5. To protect our rights or maintain our property, investigate fraud issues, prevent or take action regarding potential policy violations, potential threats to the safety of any person and unlawful activities, or as evidence in litigation in which we are involved.

6. We reserve the right to transfer information (including your personal data) to a third party in the event of a sale of a portion of the business or assets to another entity, merger, entry into any restructuring, reorganization, acquisition, joint venture, assignment, transfer, bankruptcy, liquidation, receivership, or any other transaction, provided that the new entity agrees to the terms of this privacy policy and uses your personal data only for the purposes for which you have provided it to us.

7. The owner or developer undertakes to transfer or make personal data available to the Waja Hostels platform wherever the laws permit such disclosure, including technology and data laws.

8. The owner or developer may request the Waja Hostels platform to disclose personal data related to bookings to the owner's or developer's partners or other service providers or entities ("Accommodation Partners") or to systems through which such personal data may be accessed by Accommodation Partners for the purpose of managing or facilitating bookings between marketers, sellers, and the owner or developer.

9. The owner or developer assures and warrants that they have all necessary rights, authorizations, and permissions to disclose personal data related to the bookings of marketers and sellers to Accommodation Partners.

10. The Waja Hostels platform and its employees and affiliated business partners are entitled to handle personal data within the limits of service provision.

Section (6): Personal Data Storage

1. "Waja Hostels platform retains personal data for the period necessary to achieve the purposes for which it was collected, or to retain that data for a longer period to comply with the legal obligations to which we are subject, or to defend against claims made against us.

2. The "Waja Hostels platform" also retains your account-related data in electronic records as long as you remain a user of the website, applications, for internal analysis, enhancing security, improving the functionality of our services, and enforcing our legal policies.

3. The criteria that determine the data retention periods include:

   - The nature and sensitivity of the personal data we collect.

   - The duration of your use of the services or the operation of our business.

   - The length of time your account is active or the time required to provide you with the services.

   - Current legal requirements, such as government orders for investigation or litigation purposes, or to protect against potential claims.

   Usage data is generally retained for a shorter period, unless this data is used to enhance security or improve our service functionality, or when we are legally required to retain it for longer periods.

4. We may use your personal data to contact you regarding newsletters, marketing materials, or other information that may interest you. You can unsubscribe from receiving any or all of these communications from us by following the unsubscribe link.

5. When accessing the service with a device, usage data may include information such as the type of device you use, the unique identifier of your device, your device's IP address, your device's operating system, your device's browser type, unique device identifiers, and other diagnostic data.

6. We use cookies and similar tracking technologies to track activity on our service and store certain information.

7. Cookies are files containing a small amount of data that may include a unique anonymous identifier. Cookies are sent to your browser from a website and stored on your device. Other tracking technologies such as beacons, tags, and scripts are also used to collect and track information and to improve and analyze our service.

8. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

Section (7): Personal Data Security

1. "Waja Hostels platform" takes reasonable administrative, technical, and physical measures to protect personal data from unauthorized access, unintended or unlawful use. Some preventive measures we use include firewalls, data encryption, access control to our data center physically, and permission control for data access. You understand that the internet is not a completely secure means of communication. Despite taking high-level protection measures for user data, this level of protection may not be 100% effective.

2. Each party must implement and maintain appropriate technical and organizational security measures to protect the confidentiality, integrity, availability, and continuity of personal data and confidential information transferred, stored, or processed in any way in the context of this agreement, according to the highest current security standards, particularly through measures such as encryption and pseudonymization.

3. To detect and respond to any security breaches that could compromise the confidentiality, integrity, availability, or continuity of the data transferred, stored, or processed in any way in the context of the agreement. This includes consideration of the current security sector standards and laws, including surveillance systems, alert systems, backup procedures, and protection software.

4. To comply with relevant good practices in terms of physical and information security concerning any confidential information and personal data of this kind.

5. To avoid any action or omission that could reasonably be expected to adversely affect the service's security or system.

6. Both parties shall make reasonable efforts:

   - To ensure that their computer systems, databases, server devices, connection operations, and application program interfaces do not and will not render the other party's software, devices, or security procedures inoperable, or contain any materials that are damaging, harmful, or detrimental to the other party or that may cause harm, including but not limited to computer worms, computer viruses, malware, Trojan horses, malicious ransomware, corrupted files, hacking software, unauthorized hidden software, or any other materials.

   - To prevent and detect social engineering activities from third parties, including unauthorized account acquisition, which may lead to a security breach related to the Extrant.

   - To protect and maintain the user's identity and password confidentiality on the platform and not disclose them to anyone other than those who need to access the platform to perform their job duties.

8. In the event that the Owner or Developer becomes aware of the possibility or has reasonable grounds to suspect the occurrence of a security breach that may endanger the Platform, its systems, databases, data, server devices, connections, integration solutions, or its website, as well as the Extrant and any confidential information or personal data stored, transferred, or processed in any way in the context of the agreement, the Owner or Developer shall take all reasonable and appropriate measures as required by the situation immediately, even before consulting the Platform to prevent, avoid, or mitigate any damage or negative effects on the Platform and the Guests.

9. Collaboration with the Platform in taking any reasonable and appropriate actions required to address the security breach and mitigate the risk of similar security incidents occurring in the future.

10. Providing all necessary information proactively to the Platform to ensure that the Platform remains fully informed and capable of conducting its own investigation regarding the cause, mitigation measures taken, and the damages incurred or potentially incurred by both parties and third parties related to the security incident, taking into account current laws, the current situation, and sector standards, including particularly surveillance systems, alert procedures, and backup measures.

11. Bearing responsibility, considering the existing legal restrictions, for providing all necessary information to the Platform proactively to ensure that the Platform remains fully informed and capable of conducting its own investigation regarding the cause, mitigation measures taken, and the damages incurred or potentially incurred by both parties and third parties related to the security incident.

12. Cooperating with the Platform in taking any reasonable and appropriate actions required to address the security breach and mitigate the risk of similar security incidents occurring in the future.

13. All details of credit cards/prepaid and personal identification data will not be stored, sold, shared, leased, or rented to any third party.

14. For your personal information security, we commit to taking reasonable technical and organizational precautions to prevent the loss, misuse, or alteration of your personal information.

15. All electronic financial transactions performed through our website are protected using encryption technology.

16. We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your personal data.

17. If you wish to inquire about the personal data we hold about you and want it removed from our systems, please contact us via email at care@waja.sa.

- Right to Object: You have the right to object to our processing of your personal data.

- Right to Restriction: You have the right to request the restriction of processing your personal information.

- Right to Data Portability: You have the right to receive a copy of your personal data in an organized, machine-readable, and commonly used format.

- Right to Withdraw Consent: You also have the right to withdraw your consent at any time when we rely on your consent to process your personal information.

18. Please note that we may require you to verify your identity before responding to these requests. Please note that we may not be able to provide the service without some necessary data.

19. Users can visit our website anonymously.

20. Our privacy policy link includes the word "Privacy" and can easily be found on the home page of our website.

21. Users will be notified of any changes to our privacy policy on our privacy policy page.

22. Users can change their personal information by emailing us at care@waja.sa.

23. Our "Do Not Track" Policy:

24. We respect "Do Not Track" signals and do not track cookies or use advertising when a Do Not Track mechanism is in place.

25. You can enable or disable "Do Not Track" by visiting the "Preferences" or "Settings" page in your web browser.

26. To opt-out of the sale of your personal information: We do not sell or rent your personal information for any purpose. We do not sell your personal information for monetary value. However, under some circumstances, the transfer of personal information to a third party, or within our group of companies, without monetary exchange, may be considered a "sale" under California law. You are the sole owner of your personal data, and you can request disclosure or deletion at any time.

27. Please note that if you request us to delete your data or to stop selling it, this may affect your experience with us, and you may not be able to participate in some programs or membership services that require the use of your personal information to function. However, under any circumstances, we will not discriminate against you for exercising your rights.

28. Your data protection rights, as outlined above, are covered under the California Consumer Privacy Act, in short, the CCPA.

Section (8): Processing of Personal Data

1. All personal data concerning the other party or related to them (and/or anyone acting on their behalf) shall be processed in accordance with the Privacy Policy provided to data subjects with transparency and clarity before or at the time of collecting personal data, by the knowledge of the other party, or as soon as possible thereafter, as permitted by technology and data laws. The owner or developer may refer to their own Privacy Policy in the information they provide through the service concerning guests and their personal data.

2. Waja Hostels processes any personal data collected and related to the owner or developer and/or anyone acting on their behalf in accordance with the Privacy Policy of the platform applied to business partners and available on the platform and as modified by the platform from time to time.

3. The owner or developer ensures that, in accordance with technology and data laws, and wherever personal data is provided to Waja Hostels, they have informed their employees, agents, representatives, and others who have personal data processed by Waja Hostels about this processing by the platform concerning the agreement and have obtained their consent where necessary.

4. Your information, including personal data, may be transferred to computers located outside your jurisdiction, province, country, or any other government jurisdiction where data protection laws may differ from those in your jurisdiction.

5. If you are located outside the Kingdom of Saudi Arabia and choose to provide information to us, please note that we transfer the data, including personal data, to the Kingdom of Saudi Arabia and process it there.

6. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

7. Waja Hostels will take all reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy, and your personal data will not be transferred to an entity or country unless there are adequate controls in place, including the security of your data and other personal information.

Section (9): Compliance with Regulatory Authorities

1. We regularly review our compliance with this Privacy Policy. In case of formal written complaints, we will contact the person who made the complaint for further information, and we will also cooperate with the relevant regulatory authorities, including local data protection authorities, to resolve any complaints regarding the transfer of personal data that we cannot resolve with our users directly.

2. Each party agrees to provide all forms of cooperation, assistance, and reasonable information to enable the other party to comply with the obligations under technology and data laws at its own expense. Each party agrees to assist the other party with:

1. Responding to requests from competent authorities, including regulatory authorities, related to personal data that has been processed and shared in the context of this agreement.

2. Responding to requests from data subjects wishing to exercise their privacy rights, including their rights under technology and data laws.

3. Conducting assessments to verify compliance with applicable laws, including technology and data laws.

Section (10): User Responsibility

1. The user is responsible for ensuring the accuracy and correctness of the data they provide to us.

2. If the user shares any data with us about any other person, they are the legal responsible party for this data. They must inform the person who provided us with their data about the content of this policy and obtain their prior consent.

3. The user plays an important role in protecting their personal data by following the steps below:

4. Access and control or modify their account information.

5. Do not disclose their account data to any other person, especially login data.

6. Log out after the session is finished when using a device for another person or in public places.

7. We will not be responsible for any shortcomings or failures by the user in maintaining the confidentiality of their data or any actions that result in unauthorized access to the data by other parties.

Section (11): External Links

1. Our services may include links and advertisements from external parties, digital platforms, add-ons, and applications. Clicking on these links may allow external parties to collect or share your data according to their own privacy policy, which may differ from this privacy policy.

2. We do not take any responsibility for the practices employed by websites or services linked to the "Waja Hostels" platform, including the information or content contained within them, data collection practices, or the privacy policies they apply. Please be aware that when you use a link to go from the "Waja Hostels" platform to an external website, our privacy policy no longer applies to external websites or services.

3. You agree that we are not responsible for websites and social media platforms that we may be linked to (such as Facebook, Instagram, Twitter, or Google Groups, among others).

4. Our service may contain links to other websites that we do not operate. If you click on an external link, you will be directed to the third party's site. We strongly advise you to review the privacy policy of every site you visit.

5. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Section (14): Changes to the Privacy Policy

1. We reserve the right to update this policy at any time at our discretion to reflect changes in our information handling, or any laws, regulations, or related policies. We recommend reviewing and reading this policy regularly for the latest information on the privacy procedures we follow. Changes will take effect immediately upon publication, and the update date mentioned at the top of the page will be modified.

2. Please be aware that we will not take responsibility if you fail to review this policy before using the "Waja Hostels" platform. Reading this policy by users constitutes complete acknowledgment and recognition of everything stated in this policy.

3. We may update our privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page.

4. It is advisable to regularly review this privacy policy to be aware of any changes. The changes to this privacy policy will take effect when published on this page.

Section (15) Children's Privacy:

We do not knowingly collect personal information from children under the age of 18. If you become aware that a child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children without parental consent, we take steps to remove this information from our servers.

Contact Us:

If you have any questions about this privacy policy, please contact us via email at care@waja.sa.ssssssssssssssssssssssssssssssssssssssssssss