Privacy Policy
This policy explains what personal data Beach Pass collects when you use beachpassksa.com, why we collect it, who we share it with and the choices you have. We handle personal data in line with Saudi Arabia’s Personal Data Protection Law (PDPL) and its Implementing Regulations.
1. Who we are
Beach Pass (“Beach Pass”, “we”, “us”) runs beachpassksa.com, an online service for discovering and booking day passes at beach clubs, private beaches and water-sports venues in Jeddah, Saudi Arabia. We are responsible for the personal data collected through this website (the “controller” under the PDPL).
If you have a question about this policy or your data, contact us at info@beachpassksa.com or call +966 54 799 1746.
2. The information we collect
Information you give us
- Booking requests: your name, email address and phone number, the venue and visit date you choose, the number of adults, children and maids in your group, any notes you add, and your confirmation that your group meets the venue’s access-day rules (for example, a ladies-only day).
- Contact messages: your name, email address, phone number (optional), enquiry type, subject and message.
- Newsletter: your email address, if you choose to subscribe.
Information collected automatically
- Security data: when you send a form we record your IP address, your browser’s user agent, the page you sent it from and the date and time. We use this to protect the website against spam, fraud and abuse, and to investigate technical problems.
- Cookies: we do not use advertising or cross-site tracking cookies. If we introduce analytics in future, we will update this policy and ask for your consent where required.
- Fonts: our web fonts are hosted on our own server, so viewing our pages does not share your IP address with a third-party font service.
We do not ask for sensitive personal data. If you choose to tell us about an accessibility or medical need so the venue can help on the day, we use it only for that purpose.
3. Why we use your information
- To handle your booking: to check availability with the venue, confirm your booking, send you booking emails and contact you about your visit. This is necessary to provide the service you ask for.
- To answer your enquiries: to reply to the messages you send us.
- To send our newsletter: only if you subscribe or opt in. You can unsubscribe at any time.
- To keep the website safe: to detect and prevent spam, fraud and misuse, and to keep our systems secure.
- To meet legal obligations: for example keeping accounting records or responding to lawful requests from the authorities.
- To improve Beach Pass: using summary information (for example, which venues are requested most), not to profile you individually.
We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.
4. Who we share it with
- The venue you book. To arrange your visit we share your name, phone number, visit date, the number of adults, children and maids in your group, and any notes relevant to your visit with the venue. The venue uses this information to admit your group, under its own policies.
- Service providers that help us run Beach Pass, such as website hosting and email delivery. They may only use your data to provide their service to us and must keep it secure and confidential.
- Payment providers, once online payment is available. Card details will be entered directly with the payment provider; Beach Pass will not see or store your full card number.
- Authorities, where the law requires it, or where it is necessary to protect the rights, safety and property of our guests, venues or Beach Pass.
5. Where your data is stored
Some of our service providers may store or process data outside the Kingdom of Saudi Arabia. Where this happens, we only transfer personal data as permitted by the PDPL and its regulations on transfers outside the Kingdom, and we take steps to make sure it stays protected.
6. How long we keep it
- Booking requests, contact messages and the security data sent with them: only as long as needed to handle your booking or enquiry and to meet legal, tax and accounting obligations.
- Newsletter: until you unsubscribe.
When data is no longer needed we delete it, or anonymise it so that it can no longer identify you.
7. How we protect it
- Every page and form on beachpassksa.com is served over an encrypted (HTTPS) connection.
- Booking requests, contact messages and newsletter sign-ups are kept in private storage on our server that cannot be reached from the web. They are encrypted at rest where our hosting supports it, and access is limited to authorised Beach Pass staff.
- Our forms are protected against automated abuse, and IP addresses used for this are stored only as one-way (hashed) values.
- Our staff and service providers are bound by confidentiality.
No online service can be completely secure. If we become aware of a breach that affects your personal data, we will notify you and the competent authority where the law requires it.
8. Your rights
Under the PDPL you have the right to:
- be informed about how your personal data is collected and used (this policy);
- access the personal data we hold about you and receive a copy in a clear, readable format;
- ask us to correct data that is inaccurate, incomplete or out of date;
- ask us to destroy your data when it is no longer needed, unless the law requires us to keep it;
- withdraw your consent at any time where we rely on it, for example for our newsletter.
To make a request, email info@beachpassksa.com. We may need to confirm your identity first, and we will reply within the time the PDPL requires. If you are not satisfied with our response, you can complain to the Saudi Data & AI Authority (SDAIA), which oversees the PDPL.
9. Marketing emails
We only send newsletters and offers if you subscribe, or opt in when you book. Every email includes a way to unsubscribe, or you can email us at any time. Service emails about your booking (for example, your confirmation) are not marketing and will still be sent.
10. Children
Booking requests must be made by an adult. When you book for a group we only ask how many children are coming, not their names or other details. We do not knowingly collect personal data directly from children.
11. Changes to this policy
We may update this policy as Beach Pass grows, for example when we introduce online payments. The date at the top of this page shows when it was last changed, and we will highlight significant changes on the website.
12. Contact us
Beach Pass
Jeddah, Saudi Arabia
Email: info@beachpassksa.com
Phone: +966 54 799 1746


