Access and deletion
Guest profiles help answer access requests quickly.
Saudi specific
Data protection for hotels: protect guest data under the PDPL
In Saudi Arabia, quotes and invoices are in riyals with 15% VAT shown clearly, so this is planned that way from the start. Guests entrust you with names, addresses and payment details. Your system helps you protect that data under Saudi law. Guest data deserves care: our hotel software for Saudi Arabia and the cloud hotel software are designed around the PDPL.
- English and the community languages your customers speak
- SAR, VAT and local levies
- Data protection under PDPL
What the PDPL means for hotels
The revised Saudi Arabia Data Protection Act has applied since 1 September 2023. Hotels process a lot of personal data: names, contact details, travel documents, payment information and preferences. Guests have rights, such as access to stored data or its deletion, unless a legal retention duty applies.
Hotels must inform transparently, protect data appropriately and know where it is stored. A suitable system makes this much easier.
How the system supports you
Guest data is bundled in one profile, so you can answer access requests quickly and delete or anonymise data on request. Roles and access rights limit who sees which data, and the change log shows who changed what and when.
We discuss with you where data is stored and which service providers are involved, so you can word your privacy notice accordingly. Responsibility for complying with the law remains with you as the operator.
Your benefits
Restricted access
Roles and permissions protect sensitive data.
Log
Changes are traceable.
Transparency
We clarify storage location and involved providers with you.
How we work
- 1
Clarify requirements
By e-mail we discuss your property, your workflows and your goals and agree on the scope.
- 2
Build and connect
We build the solution to fit your hotel and connect it to your existing systems.
- 3
Test and launch
We test with real workflows, train your team and only go live when everything is right.
Not legal advice
This page gives general information and does not replace legal advice. For implementing the PDPL in your business we recommend consulting a specialist.
Frequently asked questions
Since when does the PDPL apply?
The revised Saudi Arabia Data Protection Act has been in force since 1 September 2023.
Where is the data stored?
We discuss this with you before setup so you can word your privacy notice correctly.
Can I delete guest data?
Yes, on request data can be deleted or anonymised unless legal retention duties apply.
Related topics
Access rights and audit log
Who may do what in the hotel system? Roles and permissions, change log and secure login for Saudi hotels. Quote by e-mail. SAR pricing, 15% VAT, PDPL-aware.
Learn moreOnline check-in
Online check-in and digital forms for Saudi hotels: guests fill in their details before arrival and reception saves time. Data protection under PDPL. ZATCA-ready invoices.
Learn moreApple Pay and payment methods
Online payment for direct bookings: Apple Pay, credit card and invoice for Saudi hotels, with deposit and payment link. Quote by e-mail. Mada and STC Pay, SAR pricing, 15% VAT.
Learn more