Privacy Policy

1. Introduction

Beyond Square is committed to protecting your personal data in accordance with the Personal Data Protection Law issued in Saudi Arabia and its implementing regulations. This policy explains what data we collect, why we collect it, how we use and protect it, and your rights regarding it.

2. Data We Collect

• Identity & contact data: name, email address, phone number.
• Account data: password (encrypted, never stored as plain text), registration date.
• Booking data: the booked space or room, date, duration, status, wallet balance and points.
• Technical usage data: IP address, browser type, login time — used solely for account security and abuse prevention.
• Event registration data: the events you've registered attendance for.

3. Purpose of Collecting & Processing Data

• Creating and managing your account, and carrying out related booking and payment transactions.
• Communicating with you regarding your bookings, event registrations, or any updates related to our services.
• Protecting the security of the website and accounts, and preventing unauthorized access attempts.
• Improving the quality of our services based on general usage patterns, without linking them to your identity during analysis.

4. Legal Basis for Processing

We process your personal data based on your explicit consent at registration, in performance of the contract between us when completing a booking or event registration, and in compliance with regulatory obligations where applicable.

5. Sharing Data with Third Parties

Beyond Square does not sell your personal data to any third party. Limited data may be shared only with trusted service providers necessary to operate the service (such as the electronic payment gateway provider), strictly to the extent required to complete the transaction, and in compliance with the same data protection standards.

We may disclose your data if required by law or an order from a competent judicial or regulatory authority in Saudi Arabia.

6. Data Retention

We retain your data for as long as your account is active, and for the additional period necessary to fulfill any regulatory or accounting obligation after closure. You may request deletion of your account and data at any time as described in the "Your Rights" section below.

7. Data Security

We apply reasonable technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction, including password encryption and limiting internal administrative access strictly on a need-to-know basis.

8. Your Rights Over Your Personal Data

Under the Personal Data Protection Law, you have the right to:

• Access the personal data we hold about you.
• Request correction of any inaccurate or incomplete data.
• Request deletion or destruction of your data once there is no longer a regulatory need to retain it.
• Withdraw your consent to the processing of your data at any time.
• File a complaint with the Saudi Data & AI Authority (SDAIA) if you believe the processing of your data violates the law.

9. Cookies

We use essential cookies solely to operate login and maintain your session within the website, and do not currently use them for advertising or marketing tracking purposes.

10. Data Transfer

Your data is stored on cloud infrastructure that may be managed from outside Saudi Arabia for purely operational purposes, subject to data protection controls equivalent to those required under Saudi law for any such transfer.

11. Contact to Exercise Your Rights

To exercise any of the rights above or to inquire about this policy, contact us through the contact details published on the "Contact Us" page.

12. Updates to This Policy

We may update this policy from time to time to keep pace with the evolution of our services or applicable regulations; the updated version takes effect as soon as it is published on this page, with the "Last Updated" date above updated accordingly.