Privacy Policy Effective Date: July 9, 2026
Welcome to 4booking ("4booking", "we", "us", or "our"), an online travel booking platform operated by Innovative Experiences Company for Information Technology, a company registered in the Kingdom of Saudi Arabia.
Commercial Registration Number: 1009028099
Ministry of Tourism License Number: 73219962
Website: https://4booking.net
We are committed to respecting your privacy and protecting your personal data in accordance with the Saudi Personal Data Protection Law (PDPL), its Implementing Regulations, and other applicable laws.
This Privacy Policy explains what personal data we collect, why we collect it, how it is processed and shared, how long it is retained, and how you may exercise your rights.
Depending on how you use our services, we may collect the following categories of personal data:
A. Personal and Contact Information
B. Travel and Booking Information
C. Payment and Transaction Information
We may process payment amounts, transaction identifiers, payment status, billing details, and information required for refunds or payment reconciliation.
Payment card information is handled according to the payment processing arrangements applicable to each transaction. Please refer to the payment service provider's privacy and security information where relevant.
D. Technical and Usage Information
E. Customer Support Information
We may process information you provide when contacting customer support, submitting complaints, requesting refunds, or communicating about bookings.
We process personal data for specified, lawful purposes, including:
Booking and Service Fulfilment
To search for availability, process travel reservations, coordinate with service providers, issue booking confirmations, and manage modifications or cancellations.
Processing for these purposes may be necessary to perform a contract with you or take steps at your request before entering into a contract.
Payment Administration
To facilitate payments, issue invoices, manage refunds, reconcile transactions, and address payment disputes.
Customer Support
To respond to enquiries, resolve complaints, and communicate information concerning travel services.
Legal and Regulatory Compliance
To meet applicable accounting, tax, consumer protection, tourism, and other legal obligations.
Platform Security and Improvement
To protect against misuse, investigate security incidents, maintain service reliability, and improve website functionality, using an appropriate lawful basis.
Marketing Communications
Where required by applicable law, we will obtain your consent before sending promotional emails or other direct marketing communications.
You may withdraw your marketing consent through the unsubscribe option or by contacting us.
We do not treat acceptance of this Privacy Policy as consent for every processing activity. Where consent is legally required, it will be requested separately.
To provide travel booking services, we may disclose relevant personal data to:
We seek to limit disclosures to personal data reasonably necessary for the relevant service or lawful purpose.
Third-party travel providers may process personal data under their own privacy policies and applicable legal responsibilities.
We do not sell personal data to data brokers or advertisers.
Travel reservations may require personal data to be transferred or disclosed outside the Kingdom of Saudi Arabia, including to airlines, hotels, reservation systems, and other travel service providers operating internationally.
Any such transfers will be assessed and carried out in accordance with applicable Saudi personal data protection requirements.
Where required, we will implement appropriate contractual, technical, organizational, or other lawful safeguards.
We aim to limit the personal data transferred to what is necessary for the applicable purpose.
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, or for periods required by applicable laws and regulations.
Retention periods depend on the type of information and the relevant purpose, including:
When retention is no longer necessary and no lawful reason requires continued storage, personal data will be securely deleted, destroyed, or anonymized as appropriate.
We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, destruction, or loss.
These measures are assessed according to the sensitivity of the information and the risks associated with its processing.
No electronic system can guarantee absolute security. We therefore continually review security needs and respond to identified risks and incidents in accordance with applicable requirements.
Our website may use cookies and similar technologies to support essential functions, remember user preferences, maintain sessions, and measure website performance.
Where required by applicable law, we will obtain consent before using non-essential cookies or similar technologies.
You may adjust applicable cookie preferences through available website controls or your browser settings.
Further information is provided in our separate Cookies Policy.
Subject to applicable Saudi law, you may have the right to:
You may submit a request through the privacy contact details below.
We may need to verify your identity before fulfilling a request and may be required to retain certain information to comply with legal obligations.
You may also raise a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA), subject to applicable complaint procedures.
Our platform may contain links to websites and services operated by third parties.
Their handling of personal data may be governed by their own privacy policies.
We encourage users to review the applicable privacy terms before providing information directly to those services.
Travel bookings may involve personal data relating to children, including passenger identification information necessary for reservations.
Where such information is required, we will process it in accordance with applicable legal requirements and appropriate authorization or guardian-related safeguards.
We do not knowingly use children's personal data for unauthorized direct marketing.
We may update this Privacy Policy to reflect changes in our services, practices, or legal obligations.
The revised policy will be published on this page with an updated revision date.
Where additional notice or consent is legally required, we will take the necessary steps.
Data Controller: Innovative Experiences Company for Information Technology
Commercial Registration: 1009028099
Ministry of Tourism License: 73219962
Country: Kingdom of Saudi Arabia
Website: https://4booking.net
Privacy Contact Email: [4booking@4booking.net]
Contact Address: [7591 Al-Najah street, Riyadh, SA]
For questions concerning privacy, personal data processing, or the exercise of your rights, please contact us using the details above.
