إشعار الخصوصيةPrivacy Notice

1Purpose of This Privacy Notice

This Privacy Notice explains how the ALLNEST platform collects, uses, stores, discloses, and protects personal data when you use our website, application, or any of our digital services.

This Notice applies to all users of the Platform, including:

• Guests and customers
• Hosts and unit owners
• App and website users
• Suppliers and partners
• Job applicants
• Users of our communication channels and customer support

ALLNEST is committed to complying with the provisions of the Saudi Personal Data Protection Law (PDPL) and its implementing regulations issued by the Saudi Data and Artificial Intelligence Authority (SDAIA).

The Platform and its services are not directed at individuals under the age of eighteen, and we do not knowingly collect personal data from children. If we become aware that we have collected data from a minor without the lawful consent of their guardian, we will take the necessary steps to delete that data.

2Personal Data We Collect

We collect only the personal data necessary to provide our services and operate the Platform safely and effectively.

Guest and Customer Data — may include:

• Full name
• Email address
• Mobile number
• Date of birth
• Nationality
• National ID, residency (iqama), or passport number
• Address

Booking and Transaction Data — includes:

• Booking details
• Check-in and check-out dates
• Cancellations and refunds
• Invoices and payments
• Claims and complaints

Financial Data — includes:

• Payment information
• Bank account details
• Invoice and transaction records

Technical and Usage Data, such as:

• Internet Protocol (IP) address
• Device and browser type
• Operating system
• Session data and activity logs
• Cookies

Location Data: location data may be collected when location services are enabled within the app, to improve the user experience and search results.

Communication and Support Records, such as:

• Emails
• Chat conversations
• Recorded calls
• Support requests and complaints

Host Data — may include:

• Identity data
• Property and unit data
• Property photos
• Licenses and permits
• Bank account details

Job Applicant Data, such as:

• CV / resume
• Qualifications
• Work experience
• Certificates and training courses

3How We Collect Personal Data

We collect data through:

Direct collection, when you:

• Create an account
• Complete bookings
• Contact technical support
• Enter property data
• Fill out forms or surveys

Automated collection, via:

• Cookies
• Analytics and tracking tools
• Device and session data
• Usage logs

External sources, such as:

• Payment service providers
• Government entities for identity verification
• Marketing and advertising partners
• Anti-fraud service providers

4How We Use Personal Data

We use personal data for the following purposes:

• Creating and managing accounts
• Executing and managing bookings
• Processing payments and refunds
• Identity verification and regulatory compliance
• Communicating with users
• Providing technical support and customer service
• Improving the user experience
• Performance analysis and service development
• Preventing fraud and unlawful activity
• Sending notifications and marketing offers after obtaining consent where required
• Protecting the Platform and users from misuse

You may unsubscribe from marketing messages and offers at any time via the link provided in the message, or by contacting us directly, without affecting your core use of the service.

5Cookies

ALLNEST uses cookies and similar technologies to:

• Improve the Platform's performance
• Save user preferences
• Analyze usage
• Personalize content and advertising
• Enhance security and prevent fraud

Some cookies are essential for the Platform's core operation, while analytics and marketing cookies are used with your consent. You can manage or reject cookies through your browser or device settings, noting that this may affect certain features of the Platform.

6Legal Basis for Processing

We process your personal data based on one of the following legal grounds:

Consent — in cases such as: marketing messages, personalized advertising, certain site services.

Performance of a contract — to provide the services, operate the Platform, and complete bookings and transactions.

Legal obligation — to comply with applicable regulations and government or regulatory requests.

Legitimate interests — such as improving services, preventing fraud, protecting the Platform, and developing systems and technical features.

7Sharing Personal Data

We may share your personal data with:

• Hosts, to complete bookings
• Payment service providers
• Technology and cloud hosting partners
• Marketing and analytics companies
• Government and regulatory authorities, upon a lawful request
• Security and cybersecurity service providers

Your personal data is not sold to any third party.

8Transfer of Data Outside the Kingdom

Some data may be processed or stored outside the Kingdom of Saudi Arabia with approved service providers, in accordance with the controls issued by the Saudi Data and Artificial Intelligence Authority (SDAIA) governing the transfer of personal data outside the Kingdom, and subject in all cases to the applicable statutory safeguards for data protection.

9Data Storage and Retention Period

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or to comply with applicable legal and regulatory requirements, including the retention periods for financial records and invoices required under applicable tax and commercial regulations in the Kingdom of Saudi Arabia.

Once the regulatory or operational need has ended:

• The data is securely deleted, or
• It is converted into anonymized data that can no longer identify the data subject.

10Data Protection and Information Security

ALLNEST is committed to implementing appropriate security measures to protect personal data, including:

• Encryption
• Protection and monitoring systems
• Access control
• Protection of servers and infrastructure
• Periodic security reviews and testing

Nevertheless, no electronic system can be guaranteed to be 100% secure.

11Rights of Data Subjects

In accordance with the Saudi Personal Data Protection Law, you have the right to:

• Know how your data is collected and used
• Access your personal data
• Request a copy of your data
• Request correction or updating of your data
• Request deletion of your data where the statutory conditions are met
• Withdraw your consent to processing
• Object to certain types of processing
• File a complaint with the competent authority
• Claim compensation for damage arising from a violation of the Law

12How to Exercise Your Rights

You may submit privacy requests or exercise your rights by contacting us at:

Email: info@allnest.biz

Your request will be responded to within the applicable statutory period, being a maximum of thirty (30) days from the date of receipt of the request. This period may be extended to sixty (60) days in cases required by law, in which case you will be notified accordingly.

13Contact Us

For any inquiries relating to privacy or data protection, please contact us at:

Email: info@allnest.biz

14Submitting Complaints and Objections

If you have a complaint relating to the processing of your personal data, you may contact us first so that we can attempt to resolve the matter amicably.

If an amicable resolution cannot be reached, you have the right to file a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA), as the competent authority responsible for supervising the implementation of the Personal Data Protection Law in the Kingdom of Saudi Arabia.

15Amendments to This Privacy Notice

ALLNEST reserves the right to amend or update this Privacy Notice at any time in line with:

• Legal and regulatory changes
• The development of services and systems
• Updates to our data processing practices

The updated version will be published on the Platform, along with the date of the last update.