Compliance, Privacy & Disclaimer Policy

This policy explains how the GoodGuest platform ("the Platform") collects, processes and protects personal data, in compliance with the Saudi Personal Data Protection Law issued by Royal Decree No. (M/19) dated 9/2/1443H and its Implementing Regulations ("the Law"). By using the Platform or creating an account, you acknowledge and agree to this policy.

The Arabic version of this policy is the legally authoritative version; other translations are provided for convenience only.

• Account data: name, email address, password (irreversibly encrypted), interface language, and profile photo if you choose to upload one.

• Program data: guide-section completion records, assessment attempts and scores, badge status, tier and validity, and your verification code.

• Payment data: payments are processed by a payment provider licensed by the Saudi Central Bank; your full card details never reach our servers and are never stored by us — we retain only the transaction reference, amount and status.

• Limited technical data: cookies strictly necessary for session operation and language/theme preference only. We use no advertising trackers or third-party analytics.

We process your data exclusively for: creating and managing your account, delivering the excellence guide and assessment, issuing your badge and verifying it at subscribed hotels, processing payments, operational communication (confirmation codes, recovery codes, security notices), and platform security.

The legal basis for processing is the performance of the contract concluded upon your subscription, your explicit consent at registration, and the legitimate interest of protecting the Platform and its users, per the relevant articles of the Law.

We never sell or trade your personal data. It is shared only minimally: (a) subscribed hotels — when you present your verification code they see only your name, badge status and score; (b) operational service providers (payment, email, hosting) to the extent necessary to perform the service; (c) competent authorities where legally required under the Law.

Some data may be hosted with service providers outside Saudi Arabia; in such cases we comply with the Law's cross-border data-transfer controls and verify that an adequate level of protection is in place.

The Law guarantees you: the right to be informed of why your data is collected, the right to access your personal data and obtain a copy, the right to request correction or updating, the right to request destruction when no longer needed, and the right to withdraw consent at any time (noting that withdrawal may end our ability to serve you).

To exercise any of these rights, contact us at the address below; we will respond within the statutory periods. You may also lodge a complaint with the competent Saudi data-protection authority (SDAIA) if you believe our processing violates the Law.

We retain your data for the life of your account and as needed to fulfil the processing purposes or statutory requirements (e.g., payment records), after which it is destroyed or anonymized. Upon account-deletion request, your personal data is deleted and related transaction records are anonymized.

We apply appropriate technical and organizational safeguards: encryption in transit (HTTPS), hashed passwords and codes, access restriction, session invalidation on password change, and login rate-limiting. In the event of a breach affecting your data, notification will be made per the Law.

The Platform is an independent certification and knowledge service; it is not a governmental entity nor affiliated with one. The excellence guide is general guidance, not legal or professional advice, and the Platform does not guarantee specific outcomes from applying it.

Discounts and offers linked to the badge are provided by the subscribed hotels, which bear sole responsibility for honouring them and for their terms and availability; the Platform's role is limited to certifying guest eligibility. The Platform bears no liability for a hotel declining, modifying or discontinuing an offer, nor for any dispute between guest and hotel.

The Platform is provided "as is" and "as available". To the extent permitted by the Law, the Platform is not liable for indirect or consequential damages or loss of profit arising from its use or unavailability, nor for interruptions beyond its reasonable control. Nothing above prejudices rights that cannot be waived by law.

The user warrants the accuracy of the data provided at registration and is responsible for keeping login credentials confidential and for all activity under their account.

This policy and all matters arising from use of the Platform are governed by the laws of the Kingdom of Saudi Arabia, with jurisdiction vested in the competent Saudi judicial authorities.

We may update this policy from time to time; the updated version will be published on this page with its effective date, and material changes will be notified to your registered email.

To contact us regarding this policy or to exercise your rights: dr.alimis@gmail.com