Privacy Policy

Effective Date: [01/10/26]

Legal Entity: Gharmish Experience Est. (CR: 7051409212)

At Gharmish, protecting your privacy is part of protecting your experience. This Privacy Policy explains how we collect, use, and safeguard your personal data in line with the Saudi Personal Data Protection Law (PDPL) and applicable regulations.

1. Information We Collect

When you use Gharmish, we may collect:

  • Personal Information: name, email, phone number, profile details.
  • Booking Information: selected experiences, payment method (processed via secure third-party providers).
  • Device & Technical Data: IP address, device type, operating system, app usage statistics.
  • Location Data: if enabled, to recommend nearby experiences.
  • Communication Data: interactions with hosts, customer support, or reviews you provide.

2. How We Use Your Data

We never sell personal data; we only use it to improve services.

  • Process and confirm bookings.
  • Share relevant details with hosts for confirmed reservations.
  • Personalize recommendations and improve services.
  • Communicate updates, support, and promotional offers (with your consent).
  • Protect platform integrity and prevent fraud.

3. Data Sharing

All third parties must comply with PDPL and handle your data securely. We may share data with:

  • Hosts: to provide confirmed booking details.
  • Service Providers: for payment processing, analytics, and IT support.
  • Government Authorities: if required under Saudi law or regulations.

4. Legal Basis for Processing

We process personal data only when:

  • Necessary to deliver services you request.
  • Required to meet legal or regulatory obligations.
  • Based on your consent (e.g., marketing communications).

5. Your Rights (under PDPL)

You have the right to:

  • Access your personal data.
  • Correct or update your data.
  • Withdraw consent for processing (where applicable).

You can exercise these rights through your account settings or by contacting hello@gharmish.com.

6. Data Retention

We retain personal data only as long as needed for the purposes stated, or as required by Saudi law (e.g., financial or legal obligations).

7. Data Security

  • We use industry-standard encryption and secure servers.
  • Access to personal data is restricted to authorized staff and service providers.
  • We take steps to minimize risks of unauthorized access, loss, or misuse.

8. International Data Transfers

  • Where possible, Gharmish stores data within Saudi Arabia. If data is transferred abroad (e.g., for payment or analytics), we ensure compliance with PDPL and adequate safeguards.

9. Children’s Privacy

  • The Gharmish platform is not directed to children under 13. We do not knowingly collect data from children.

10. Updates to Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised effective date. Continued use of Gharmish after updates constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions or requests regarding your data, please contact us:

hello@gharmish.com