Privacy policy
Last updated: 11 October 2026.
This is a translation; in case of discrepancy, the French version prevails.
We only collect the data needed for your booking, and we do not sell it.
Who is responsible for your data
The company selling the Saudia Keys services, established in Ireland and identified in the legal notice. For any question: contact@saudiakeys.com.
The data we collect
When you book or request a quote: your name, email address, phone number, and the details of the service (dates, number of people, children's ages, special requests).
For a hotel: the last name, first name and nationality of the person checking in, as shown on their passport.
For a trip at sea: a copy of each participant's visa, required by the authorities for the permit.
When you pay: the amount, date and status of the payment. Your card number is entered with Stripe; we never receive it.
When you write to us: the content of your messages.
Why we use it
To carry out your booking: confirm it, pass it on to the guide, driver or hotel, send you your instructions and voucher, and handle a cancellation or refund. This processing is based on the performance of the contract.
To meet our accounting and tax obligations.
To measure visits to the website and improve it, anonymously (see below).
To send you our offers by email on services similar to those you requested or booked, unless you tick the box “I don't want to receive offers” when making your request or purchase. Every email contains an unsubscribe link, which takes effect immediately.
We do not sell your data and we do not send you advertising without your consent.
Who it is shared with
The providers who carry out your booking: guides, drivers, hotels and partner agencies in Saudi Arabia. They only receive what they need, for example the guest's name and the dates of the stay.
Our technical providers, acting on our instructions: Meta and Google (measuring our advertising, with your consent), Stripe (payment), Supabase (database), Vercel (website hosting), Resend (sending emails), Anthropic (automated reading of the documents we receive from our suppliers, to check they match your booking).
The authorities, where required by law.
Transfers outside the European Union
Our services take place in Saudi Arabia: sending your data to our Jeddah agency and to the providers on site is necessary to carry out your booking.
Some of our technical providers are based in the United States. These transfers are covered by the safeguards provided for by European regulations.
How long we keep it
Booking data is kept for the duration of the relationship, then for 6 years to meet our accounting obligations.
A quote request that does not lead to a booking is deleted after 3 years.
Copies of visas sent for a trip at sea are deleted after the service.
Cookies and audience measurement
Only with your consent, given in the banner shown on your first visit, the website uses a Meta (Facebook, Instagram) cookie to measure the effectiveness of our advertising: pages viewed, quote requests, purchases. Without your consent, no advertising cookie is set.
Again only with your consent, the website also uses the Google Ads tag, which sets Google cookies to measure the effectiveness of our Google ads: pages viewed, quote requests and online payments (amount and order number, without your contact details). Only the page path is sent, without its parameters.
Again only with your consent, sending a quote request, and then your purchase (payment of an order, or a confirmed hotel booking, with its amount), are also reported to Meta by our server, with your name, email and phone made unreadable (hashed): this lets us measure our advertising even when a blocker stops the cookie from working. For a hotel booking, the Meta cookie identifier, IP address and browser type recorded with your request are kept with it for this sole purpose. Without consent, nothing is sent or kept.
You can change your choice at any time with the “Cookies” link at the bottom of every page. Pages with a personal link (offer, voucher) are never reported to Meta or Google.
Your cart is kept in your browser, on your device.
Visits are measured without cookies and without recording your IP address: each visitor is represented by an anonymous code that changes every day.
The Stripe payment page sets its own cookies, which are necessary for payment security.
Your rights
You can ask to access, correct or erase your data, to restrict its processing or to receive it in a portable format, and you can object to processing, by writing to contact@saudiakeys.com. We reply within one month.
You can also lodge a complaint with a data protection authority: the Data Protection Commission in Ireland (dataprotection.ie), or the authority of your country of residence, for example the ICO in the United Kingdom (ico.org.uk).