Naqaha provides curated retreat experiences in destinations in Saudi Arabia and internationally.

For the purposes of applicable data protection law, Naqaha is responsible for determining how and why personal information described in this Privacy Policy is processed, except where another organization independently determines how it processes your information.

The personal information we collect depends on how you interact with Naqaha and the services you use.

- Name
- Email address
- Telephone number
- Country of residence, where requested
- Booking and retreat information
- Accommodation and occupancy selections
- Information relating to additional guests included in a booking
- Payment status and transaction information
- Communications you send to Naqaha
- Preferences or requests you provide in connection with your retreat
- Technical and website usage information, where collected
- Any other information you voluntarily provide to us

We aim to collect only personal information that is reasonably necessary for the purposes for which it is processed.

If you make a booking for another person, you may provide us with personal information about that guest, such as their name, email address and information required to administer their participation.

You should ensure that you are authorized to provide that information and that the other guest is aware that their information will be processed in accordance with this Privacy Policy.

Where appropriate, Naqaha may communicate directly with additional guests regarding their participation in the retreat.

We may collect personal information directly from you and automatically through your interaction with our website and services.

- When you make a retreat booking
- When you complete forms on our website
- When you contact or communicate with us
- When you subscribe to communications, where available
- When you participate in a retreat
- When you provide information to us before or during a retreat
- Through cookies and similar website technologies, where used
- From service providers involved in processing or administering your booking where appropriate

Naqaha may process personal information for purposes including:

- Processing and managing retreat bookings
- Confirming payments and reservations
- Sending booking confirmations and important retreat communications
- Communicating with you before, during and after your retreat
- Managing accommodation and guest arrangements
- Providing requested services and responding to enquiries
- Coordinating with relevant retreat suppliers and service providers
- Maintaining booking and transaction records
- Preventing fraud, misuse and unauthorized transactions
- Maintaining and improving our website and booking experience
- Complying with applicable legal and regulatory requirements
- Establishing, exercising or defending legal claims where necessary
- Sending marketing communications where permitted and appropriately authorized

Naqaha processes personal information only where there is an appropriate basis under applicable law.

Depending on the circumstances, this may include processing that is necessary to perform or administer an agreement with you, processing based on your consent, processing required to comply with applicable legal obligations, or processing permitted on another basis recognized by applicable data protection law.

Where processing relies on consent, you may withdraw that consent in accordance with applicable law. Withdrawal does not affect processing that was lawfully carried out before consent was withdrawn.

When you book a retreat, we process information necessary to create, administer and manage your reservation. This may include your identity and contact information, retreat selection, occupancy selection, number of guests, payment option, amounts paid, outstanding balance and booking reference.

We may retain appropriate records of your booking and related communications for operational, financial, legal and compliance purposes.

Payments made through the Naqaha website are processed through an authorized third-party payment service provider.

Naqaha may receive and retain information relating to the transaction, such as payment status, amount paid, transaction reference and information necessary to associate the payment with your booking.

Payment card details entered into the payment provider's payment interface are processed by the relevant payment provider. Naqaha does not intend to directly collect or store full payment card numbers or card security codes through its booking system.

Payment providers process information in accordance with their own applicable terms and privacy practices.

In some circumstances, Naqaha may need information relating to allergies, dietary requirements, accessibility needs, injuries, health considerations or other special requirements where relevant to safely and appropriately provide a retreat.

Because some of this information may be considered sensitive personal information, Naqaha will seek to collect only information reasonably necessary for the relevant purpose and will apply appropriate safeguards and legal requirements to its processing.

Please do not provide detailed medical information unless it is reasonably necessary for your participation or specifically requested for an appropriate purpose.

Naqaha may share personal information where reasonably necessary to operate our business, administer your booking or provide your retreat.

- Accommodation and hospitality providers
- Retreat instructors, guides and activity providers
- Transportation providers where transfers are included or arranged
- Technology and website service providers
- Payment service providers
- Email and communications providers
- Professional advisers such as lawyers, accountants or auditors
- Government, regulatory or law-enforcement authorities where disclosure is legally required
- Other suppliers where reasonably necessary to provide services requested as part of your retreat

We do not intend to sell your personal information to third parties.

Naqaha operates retreats in multiple destinations and may use service providers that process information in different countries. As a result, personal information may in some circumstances be transferred or processed outside the Kingdom of Saudi Arabia.

Where applicable, Naqaha will take appropriate measures to ensure that international transfers of personal information are carried out in accordance with applicable data protection requirements.

Our website may use cookies and similar technologies that are necessary for website functionality, security, performance, analytics or user preferences.

Where required by applicable law, optional cookies or similar technologies will be used subject to the appropriate consent choices.

Additional information about the cookies used by Naqaha may be provided through a separate Cookie Policy or cookie preferences interface.

Where permitted by applicable law and where the required consent has been obtained, Naqaha may use contact information to send news, retreat announcements, offers or other marketing communications.

You may withdraw your marketing consent or unsubscribe from marketing communications using the unsubscribe mechanism provided in the communication or by contacting Naqaha.

Choosing not to receive marketing communications will not prevent us from sending necessary transactional communications relating to an existing booking.

Naqaha will retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to satisfy applicable legal, regulatory, accounting, tax, contractual or dispute-resolution requirements.

Retention periods may therefore differ depending on the type of information and the reason it is held.

When personal information is no longer required and there is no applicable reason requiring its continued retention, Naqaha will take appropriate steps to securely delete, destroy or anonymize it in accordance with applicable requirements.

Naqaha takes reasonable administrative, organizational and technical measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, misuse or destruction.

Access to personal information should be limited to persons and service providers who require it for legitimate purposes.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

Subject to applicable law and any relevant exceptions, you may have rights regarding your personal information, including:

- The right to be informed about how and why your personal information is processed
- The right to access personal information held about you
- The right to request a copy of your personal information in a readable and clear format
- The right to request correction, completion or updating of inaccurate or incomplete information
- The right to request destruction of personal information in circumstances provided by law
- The right to withdraw consent where processing is based on consent
- The right to raise a complaint concerning the processing of your personal information

We may need to verify your identity before responding to certain privacy requests. Some rights may be subject to exceptions or limitations under applicable law.

Naqaha retreats are generally intended for adults unless a particular retreat expressly states otherwise.

We do not knowingly seek to collect personal information from children through our standard retreat booking process except where necessary and lawfully permitted in connection with a retreat that accepts minors.

Where personal information relating to a minor is required, Naqaha will apply the consent and other requirements applicable under relevant law.

The Naqaha website may contain links to websites or services operated by third parties.

Naqaha does not control the privacy practices of independent third parties. We encourage you to review the privacy information provided by a third party before submitting personal information directly to it.

Naqaha may update this Privacy Policy from time to time to reflect changes to our services, practices, technology or applicable legal requirements.

The current version will be published on our website together with the date it was last updated.