Privacy Policy

Effective date: 9 July 2026

This policy explains how Zuluugo collects, uses, and protects your personal data, in line with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia.

1.Who we are (data controller)

Zuluugo, a brand operated by Muhannad Hassan Mohammed Alharbi, a registered freelancer (Freelance Practitioner Certificate no. FL-334886444), Ahmed Al-Attas, 7755, Jeddah, Kingdom of Saudi Arabia. Privacy contact: hello@zuluugo.com.

2.Data we collect

• Account: your email address (for magic-link sign-in).
• Host profile (if you are a Host): name, city/country, languages, bio, photo.
• Booking: experience, date, group size.
• Messages: content you send through in-site messaging.
• Payment: processed by Moyasar; we receive a confirmation and limited transaction info (amount, status, last digits) but not your full card number.
• Technical: device/browser data, and local storage for your language and currency preferences and your session.

3.How we use it

To operate the marketplace, process bookings and deposits, enable communication between Travelers and Hosts, provide support, ensure safety and prevent fraud, and comply with law.

4.Legal basis

Performance of your booking/contract, our legitimate interest in running and improving the service, your consent where required, and our legal obligations.

5.Who we share with

With the Host you book (to fulfil the booking); with Moyasar (payment processing); with Supabase, our hosting/database provider; and with authorities where legally required. We do not sell your personal data.

6.International transfer

Our infrastructure providers (e.g., Supabase) may process data outside the Kingdom; we take reasonable steps to ensure an adequate level of protection consistent with the PDPL.

7.Retention

We keep data only as long as needed for the purposes above or as required by law, after which we delete or anonymize it.

8.Security

We use reasonable technical and organizational measures to protect your data; no method is 100% secure.

9.Your rights

Under the PDPL you have the right to access, correct, delete, and object to the processing of your data. To exercise any right, email hello@zuluugo.com.

10.Cookies & local storage

We use minimal local storage for your language/currency preference and sign-in session; we do not run third-party advertising trackers.

11.Children

The service is not intended for anyone under 18, and we do not knowingly collect their data.

12.Changes

We may update this policy from time to time; the effective date reflects the latest version.

13.Contact

For any privacy question: hello@zuluugo.com.