سياسة الخصوصية

ENGLISH

GHAYD Privacy Policy

Last updated: September 24, 2026

This policy describes how GHAYD, a beauty-booking platform, handles personal data through its app, website and support service. It covers customers, service providers and provider applicants. Contact GHAYD at support@ghayd.com.

Data and purposes

Depending on the features you use, we process your name, phone number, account identifier and email if supplied; city, neighbourhood, address and location coordinates when you use and permit location access; and booking details, prices, status, cancellations, refunds and notes. These support account access, service discovery, booking fulfilment and support.

Provider applications may include business details, work location, service categories, schedules, a personal photo and an uploaded identification or verification document. We use these to review applications and manage provider services. Public profile information, portfolio images and published reviews may be visible to platform users. Support messages and attachments help us answer requests. Technical connection data, including IP addresses, browser or device information, service logs, session data and local preferences, supports operation and security.

Data needed for an account or booking is required for that service. Optional permissions can be refused, although the related feature may be unavailable. Processing is based on providing the requested service and fulfilling its obligations, consent where required, and applicable legal obligations.

Sharing and service providers

Relevant booking, contact and service-address details are used to coordinate with the selected provider. We use technical services including Supabase for accounts, databases and file storage, Google mapping and location services, and website hosting and email services. They may process data needed for their functions under their terms and applicable data protection requirements. Depending on their infrastructure, processing may occur outside Saudi Arabia; transfers are subject to applicable requirements.

If you choose WhatsApp, a device calendar or a sharing feature, selected details are passed to that service and its privacy policy also applies. Information may be disclosed where a legal obligation or competent authority requires it, to the extent necessary.

Permissions and website technology

Manage location, photo, camera and calendar permissions in device settings where those features are available. Revoking permission stops future access through it but does not delete previously submitted data. The app stores session information and some preferences locally. The current website adds no analytics or advertising tools, but loads Google Fonts, which connects your browser to Google. Hosting services may process connection data and operational or security logs.

Retention and protection

Retention depends on account management, bookings, application review and support needs. Certain records may need to be kept for legal obligations or disputes, then deleted or de-identified when the legal and operational need ends. For deletion requests, we review linked records and retention requirements and explain applicable exceptions. Uninstalling the app or signing out does not delete your account or stored data.

We use technical and organisational measures to protect data and restrict access according to need. No storage or transmission method guarantees absolute security. Do not send passwords, verification codes or card details through email or booking notes.

Your privacy choices

Subject to applicable law, you may request information about processing, access to or a copy of your data, correction, deletion, or withdrawal of consent for processing based on consent. Withdrawal does not affect earlier lawful processing or legally required retention.

Email support@ghayd.com with your request and the contact information associated with your account. This includes requests to delete your account and data. We may require proportionate identity verification before acting and will explain applicable exceptions. Do not include an identity document or verification code in your initial message. The email link opens your mail app and does not send automatically.

You may also raise a complaint with the competent Saudi personal data protection authority through the National Data Governance Platform. Policy changes will be published here with an updated date, with additional notice or consent when required.