Privacy Policy

Who we are and who collects your data

Lamsat Hudoo is a Saudi platform for booking women-only at-home massage and nail care in Al-Ahsa. We are the controller of your personal data under the Saudi Personal Data Protection Law (PDPL). For any question: hello@lamsathudoo.sa

What data we collect

• Your phone number — to sign in and contact you about your booking

• Your name (optional)

• Your session address and its coordinates — so the specialist can reach you precisely

• Booking details: service, time, price, and any notes you write

• Payment status and a reference ID from our licensed payment gateway (Moyasar) only — your full card number and security code (CVV) never touch our servers and are never stored by us

• Your device's push notification token, to send booking alerts

• Basic device data (device type, OS) for technical support purposes only

Why we collect it

We collect your data based on performing our service contract with you and your consent at sign-up, solely to: fulfil and coordinate your booking with a specialist, contact you about its status, process payment, improve the service and technical support, and comply with legal requirements. We do not use your data for targeted advertising, and we never sell or share it with anyone for marketing purposes.

Who we share your data with

We share only the minimum necessary with: the specialist assigned to your booking (name, address, and time only), our licensed payment gateway Moyasar to complete payment, our database hosting provider under a data protection agreement, and regulators if legally required.

Where your data is stored

Your data is stored on a trusted cloud, whose servers may be inside or outside Saudi Arabia. If your data is transferred outside the Kingdom, we ensure an adequate level of protection consistent with the Personal Data Protection Law issued by the Saudi Data & AI Authority (SDAIA).

How long we keep it

• One-time codes (OTP) are deleted automatically within minutes of expiring

• Your personal account data is deleted as soon as you request account deletion

• Your booking/financial records are kept anonymized (without your name or phone) for the period required by Saudi accounting regulations, even after your account is deleted

Your rights and deleting your account

Under the Personal Data Protection Law you have the right to: know and access your data, correct inaccurate data, delete your account and personal data at any time (from the app, or via this website without opening the app), withdraw your consent to processing, and file a complaint with the Saudi Data & AI Authority (SDAIA) if you believe your rights were not respected.

Protecting your data

We use encryption in transit and at rest, store verification codes only as a hash (never as plain text), and restrict access to your data to authorized staff only.

Children

Our service is for adults only, and we do not knowingly collect data from anyone under 18.

Changes to this policy

We may update this policy from time to time. We'll notify you in-app of any material change before it takes effect.

For privacy questions: hello@lamsathudoo.sa