1. Introduction

At BE TOUR, we are committed to protecting your privacy and personal data in accordance with the Saudi Personal Data Protection Law (PDPL). This policy explains how we collect, use, and protect your personal data.

2. Data We Collect

2.1 Registration Data

• Full name
• Email address
• Phone number (optional)
• Password (encrypted)

2.2 Usage Data

• Geographic location (when permitted)
• Browsing and search history within the platform
• Saved experiences and interactions
• Device and browser information

2.3 Published Experience Data

• Experience content (text and images)
• Geographic location of the experience
• Voluntarily provided contact information

3. Legal Basis for Data Processing

We process your personal data based on:

• Consent: Your explicit consent upon registration and use of the platform.
• Contract performance: To provide the services you requested (publishing experiences, subscriptions).
• Legitimate interest: To improve our services and ensure platform security.
• Legal obligation: To comply with Saudi laws and regulations.

4. How We Use Data

• Providing and improving platform services.
• Showing relevant experiences based on your location and interests.
• Sending notifications related to your account and experiences.
• Preventing fraud and ensuring platform security.
• Analyzing usage patterns to improve user experience.
• Complying with legal and regulatory requirements.

5. Data Protection

We take appropriate security measures to protect your personal data, including:

• Encrypting passwords using strong encryption algorithms.
• Using HTTPS protocol to encrypt data in transit.
• Restricting access to personal data to authorized personnel only.
• Continuous monitoring of systems to detect any breach attempts.
• Regular data backups.

6. Your Rights (Under PDPL)

Under the Saudi Personal Data Protection Law, you have the right to:

• Access: Request a copy of your personal data stored with us.
• Rectification: Correct or update your inaccurate data.
• Erasure: Request deletion of your personal data (subject to legal requirements).
• Restriction: Request restriction of processing your data in certain cases.
• Portability: Request a copy of your data in a machine-readable format.
• Objection: Object to processing your data for direct marketing purposes.
• Withdraw consent: Withdraw your consent to data processing at any time.

To exercise any of these rights, contact us via email: privacy@betour.sa

7. Third-Party Data Sharing

We do not sell your personal data to any third party. We may share your data only in the following cases:

• Technical service providers who help operate the platform (hosting, analytics) under data protection agreements.
• Government authorities upon request in accordance with applicable regulations.
• In case of merger or acquisition with prior notification to you.

8. Cookies

We use essential cookies to operate the platform and improve your experience. These include authentication tokens and language preferences. You can control cookies through your browser settings.

9. Data Retention

We retain your personal data as long as your account is active or as needed to provide services. When you close your account, we delete your personal data within 30 days, while retaining data necessary for compliance with legal requirements.

10. Cross-Border Data Transfer

Your personal data is stored within Saudi Arabia. If data transfer outside the Kingdom is needed, it will be done in accordance with the provisions of the Personal Data Protection Law and after obtaining your consent where required.

11. Policy Changes

We may update this policy from time to time. We will notify you of any material changes via email or a platform notification at least 30 days before the changes take effect.

12. Contact Us

For any inquiries or complaints regarding your privacy and personal data: