Privacy Policy

Last updated: April 28, 2026

At Sfarya (sfarya.com), we respect your privacy and are committed to protecting your personal data in accordance with applicable laws, including the EU General Data Protection Regulation (GDPR) and Saudi Arabia's Personal Data Protection Law (PDPL).

This policy explains how we collect, use, and protect information when you visit our site or use our tools.

1. Data Controller

Entity: Sfarya

Site: sfarya.com

Contact for privacy matters: hello@sfarya.com

2. Data We Collect

Information you provide:

Name and email when subscribing to the newsletter or contacting us
Message content via our contact form
Account data on registration (full name, email, language preference)
Trip plans and saved destinations

Information collected automatically:

IP address, browser type, OS, device type
Pages visited and time spent
Cookies and similar tracking identifiers
Referral data

3. Legal Basis for Processing

We process your data based on:

Consent: for newsletter and cookies
Legitimate interest: to improve services and site security
Contract performance: when you submit a direct request

4. How We Use Your Data

Operating the site and tools (Trip Planner, Guides, etc.)
Sending newsletters and notifications with your consent
Responding to inquiries and support requests
Aggregate analytics to improve the site
Fraud prevention and platform security
Legal compliance

5. Sharing With Third Parties

We do not sell your personal data. We share only with:

Technical service providers: hosting, analytics (Google Analytics), email provider
AI services: when you use AI-powered tools, inputs are sent to LLM providers for processing
Government authorities: only upon legal request

All third parties are bound by confidentiality and data protection agreements.

6. Cookies

We use cookies for:

Essential: site functionality and language preference
Analytics: to understand site usage (can be disabled)
Marketing: to display relevant ads (can be disabled)

You can manage cookies via your browser settings at any time.

7. Your Rights

Under GDPR and PDPL, you have the right to:

Access: receive a copy of your data
Rectification: correct inaccurate data
Erasure: request deletion (right to be forgotten)
Restriction: limit processing
Portability: receive your data in a readable format
Object: to marketing processing
Withdraw consent: at any time

To exercise any right, contact: hello@sfarya.com. We respond within 30 days.

8. Data Security

We apply technical and organizational measures including encryption (HTTPS/TLS), data isolation, and regular security reviews.

9. Data Retention

Account data: until deletion requested
Newsletter data: until unsubscription
Technical logs: up to 12 months

10. International Data Transfers

Your data may be processed on servers outside your country. We ensure adequate safeguards under international standards.

11. Children's Privacy

Our service is not directed at children under 16, and we do not knowingly collect their data.

12. Updates to This Policy

We may update this policy and will notify you of material changes via email or site notice.

13. Contact and Complaints

For privacy-related questions or complaints:

Email: hello@sfarya.com
You may also lodge a complaint with your local data protection authority