Privacy Policy
Version 2 · 21/10/2026
This policy explains what personal data Al-Haddad Scuba collects, why, who receives it and what your rights are under the Saudi Personal Data Protection Law (PDPL). It applies to our website, bookings, payment links, guest-details pages, WhatsApp and email.
1. Who we are
MEYASSAR NOORALDEEN ALHADDAD Company (Al-Haddad Scuba), a limited liability company, unified national number 7014269893. Address: 3144 Mahmoud Al Halabi St., Al Loaloa District, Jeddah 23821; P.O. Box 11629, Jeddah 21463, Saudi Arabia. We decide how your data is used (the "controller").
Privacy contact: privacy@haddadscuba.com · WhatsApp +966 56 020 7606.
2. What we collect and why
| Data | Why we need it | Legal basis | Required? |
|---|---|---|---|
| Name, phone, email, language | To make and manage your booking and contact you about it | Our contract with you | Yes |
| ID or passport number, nationality, date of birth, gender | Border Guard sailing permits, ZAWIL shore-dive permits and marina gate passes | Legal obligation | Yes, for boat trips and shore dives |
| Health answers (medical form, snorkel declaration) | Your safety in the water | Your explicit consent | Yes, to take part in diving or snorkeling |
| Diver certification, number of dives, last dive | To place you on the right dive | Our contract with you | Yes, for certified dives |
| Emergency contact | To reach someone if you are hurt | Your vital interests | Yes |
| Signed release and policy acceptance | Proof that you were informed and agreed | Our legitimate interest | Yes |
| Payment details | To take and refund payments | Our contract with you | Yes. Card numbers are entered at the payment company; we never see or keep them |
| Messages with us (WhatsApp, email) | To answer you and keep a record | Our contract with you | No |
| Photos and videos of you on our trips | Your souvenirs and, only if you agree, our marketing | Your consent | No |
| Marketing preferences | To send offers you asked for | Your consent | No |
| Website use (only if you accept cookies) | To improve the website | Your consent | No |
We use your data only for these purposes. If we want to use it for something new, we will tell you first and ask for consent where needed.
3. Who receives it
| Who | What they receive | Why | Where |
|---|---|---|---|
| Border Guard, ZAWIL and Ebhar platforms | Names, ID numbers, nationality, date of birth | Sailing and shore-dive permits | Saudi Arabia |
| Saudi Water Sports & Diving Federation (SWSDF) and the Ministry of Sport | Trip reports and guest lists (names, nationality, age, diving level, dives), and incident reports, which can include health details | The Federation's rules for dive and snorkel trips: reports are kept at least one year and shown when the Federation asks; incident reports are sent within 24 hours | Saudi Arabia |
| Marina operators (for example Rixos) | Names and the details the marina asks for | Gate passes | Saudi Arabia |
| Bókun (our booking system) | Booking and contact details | Managing bookings and availability | Outside Saudi Arabia |
| Payment companies: Moyasar, Tabby, Tamara | Payment and contact details | Taking and refunding payments | Saudi Arabia and the GCC |
| Websites you booked through (GetYourGuide, Viator and others) | Booking details | Managing that booking | Outside Saudi Arabia |
| SSI (Scuba Schools International) | Student details and course results | Issuing your certification | Outside Saudi Arabia |
| WhatsApp (Meta) | Your messages and phone number | Talking with you | Outside Saudi Arabia |
| Anthropic (Claude AI) | Payment screenshots, WhatsApp messages, names | Checking payment screenshots, helping our team answer messages, writing names in Arabic | Outside Saudi Arabia |
| Web Hosting Hub (our hosting and email) and Dropbox (our photo storage) | The data above, stored for us | Running our systems | Outside Saudi Arabia |
| Meta (Facebook and Instagram ads) | Hashed contact details of a booking | Measuring our ads, only if you agreed to marketing | Outside Saudi Arabia |
| Doctors, hospitals and emergency services | What they need to treat you | An emergency | Saudi Arabia |
Everyone who processes data for us does so under our instructions and must protect it. We never sell your data.
4. Data sent outside Saudi Arabia
Some of the services above are outside the Kingdom. We send only what each one needs, with the safeguards the PDPL transfer rules require, or because the transfer is needed to carry out your booking. Health answers are kept only in our booking system and are not given to any of these services, except the hosting provider that stores that system for us.
5. How long we keep it
| Data | Kept for |
|---|---|
| Health answers | 12 months from when you sign, then deleted |
| ID and passport details for permits | 2 years after your trip, then deleted |
| Signed releases and policy acceptance | 5 years after your trip |
| Bookings, invoices and payment records | As long as Saudi tax and commercial law requires |
| Messages with us | 2 years |
| Photos used in marketing, marketing preferences | Until you withdraw your consent |
6. Your rights
You have the right to:
- know how your data is used (this policy);
- see your data and get a copy in a readable format;
- correct data that is wrong or incomplete;
- ask us to delete data we no longer need or that was processed against the law;
- withdraw your consent at any time (for example marketing or photos), without affecting what was done before;
- complain to the Saudi Data & AI Authority (SDAIA).
Write to privacy@haddadscuba.com or message us on WhatsApp. We may ask you to confirm who you are. We answer within 30 days; if a request needs longer, we tell you why and answer within another 30 days.
Some data we must keep even if you ask us to delete it, for example invoices required by tax law.
7. How we protect it
- Each member of our team sees only what their work needs. Health answers are seen only by the instructor or guide of your trip and by managers.
- Our systems use encrypted connections, protected passwords and a record of who changed what.
- If a breach could harm you, we tell SDAIA within 72 hours and tell you without undue delay, with what to do.
8. Children
For guests under 18, a parent or legal guardian gives the details, answers the health questions and agrees on the child's behalf.
9. Marketing and photos
- We send offers only if you agreed. Every message has a way to stop them, or tell us on WhatsApp.
- Our team may take photos and videos on trips. We use them in marketing only if you agreed, and remove them if you ask.
10. Cookies
Our website uses only the cookies it needs to work (for example your language and booking session). Analytics or advertising cookies are used only if you accept them, and you can change your choice at any time.
11. AI
We use AI to check payment screenshots, to help our team answer WhatsApp messages and to write names in Arabic. No decision with a legal or similar effect on you is made by AI alone; our team reviews the results.
12. Changes to this policy
We may update this policy. The version date is at the top, and we will tell you about important changes before they apply. If the Arabic and English texts differ, the Arabic text applies.
Booking & Cancellation Policy →
Al-Haddad Scuba · +966 56 020 7606 · reservations@haddadscuba.com · https://ops.haddadscuba.com/policy/privacy?lang=en