Last updated: 16 September 2026
1. About this policy
LUXURY KSA provides an online marketplace for event-related products, rentals, venues, talent and services in Saudi Arabia. This policy explains how personal information is used when you browse the website, create an account, submit an enquiry, make a booking or contact our team. It also applies to vendors using the marketplace.
For privacy questions or requests, contact projects@luxuryksa.com or +966 9200 04373. Our customer-service location is Riyadh, Kingdom of Saudi Arabia.
2. Information we collect
We collect information you provide, including your name, email address, telephone number, account information, delivery or event address, event preferences, order details and messages. Vendors may also provide business, registration, tax, bank and verification documents needed to operate their accounts.
Our website and service providers may receive technical information such as IP address, device and browser information, request logs and records of how the service is used. We receive payment references, payment status and transaction information needed to manage an order, reconcile payments, process refunds or investigate a dispute. Please do not send card numbers, security codes, passwords or unnecessary sensitive information through enquiries or support messages.
3. How and why we use information
We use information to provide and administer accounts, respond to enquiries, arrange bookings and fulfilment, communicate order updates, process payments and refunds, support vendors, prevent fraud and misuse, resolve complaints, maintain security and meet accounting or other legal obligations.
Processing is based on the legal grounds applicable to the activity, including performance of a contract, compliance with legal duties, valid consent or another basis permitted by Saudi data-protection law. Where consent is required, it can be withdrawn without affecting processing already lawfully carried out. Optional marketing preferences are separate from the information needed to provide a service.
4. Payments and card security
When a Paymob payment option is available and selected, payment information is processed through Paymob's secure payment service. Card details entered into Paymob's hosted checkout are handled by the payment provider, rather than entered into a LUXURY KSA enquiry form. We do not need your full card number or card security code to answer a support request.
We use payment references and transaction results for order administration, fraud checks, reconciliation, refunds and disputes. Paymob, banks and card networks may process information under their own privacy notices and legal obligations. Please also review Paymob's privacy policy at https://paymob.sa/en/policy.
5. When information is shared
Information may be shared with the vendor or fulfilment partner responsible for your order, payment providers, hosting and technology providers, communication providers and professional advisers, where necessary for the relevant purpose. We may also disclose information when required by law, to respond to a lawful authority request, or to protect legitimate rights and prevent fraud.
Vendors receive the information needed to respond to or fulfil the relevant enquiry or booking. They must use it consistently with their legal obligations and the purpose for which it was supplied.
6. Cookies and browser storage
The website uses cookies or similar browser storage for functions such as keeping you signed in, retaining basket or wishlist selections and remembering preferences. You can manage cookies and local storage through your browser. Blocking or clearing essential storage may sign you out or remove saved selections. Optional tracking that requires consent should only operate after the required consent is obtained.
7. Retention and security
We retain information for as long as needed for the purpose for which it was collected, including providing services, resolving disputes and meeting applicable accounting, payment-record and other legal retention duties. Information that is no longer required should be deleted or anonymised, subject to lawful retention requirements and backup cycles.
Access to personal information is restricted according to operational need. We use security controls appropriate to the services we provide, including HTTPS for website communications. No transmission or storage system can be guaranteed completely secure. Please keep account credentials confidential and notify us if you suspect unauthorised access.
8. Processing outside Saudi Arabia
Some technology or service providers may process information outside Saudi Arabia. Where a cross-border transfer occurs, it must follow applicable Saudi transfer requirements and safeguards. Contact us if you need more information about the processing relevant to your account or booking.
9. Your privacy rights
Subject to applicable law, you may request information about the processing of your personal data, access to or a copy of that data, correction of inaccurate information, and deletion where it is no longer required. You may withdraw consent where processing relies on consent and raise a complaint about how your information is handled. Some requests may be limited by a legal duty to retain records or by other lawful exceptions.
Send requests to projects@luxuryksa.com with enough information to identify your account or enquiry. We may request proportionate identity verification before disclosing or changing information. You may also raise a data-protection complaint with the competent Saudi authority, including through SDAIA's Personal Data Protection Platform at https://dgp.sdaia.gov.sa.
10. Children and changes to this policy
Accounts and purchases should be managed by a person legally able to enter into the transaction. If information about a child is necessary for an event, provide it only when you are entitled to do so and limit it to what is needed. Contact us if you believe information has been provided without appropriate authority.
We may update this policy when our services or legal requirements change. The latest version and update date will appear on this page. Material changes affecting a consent-based activity may require a separate notice or renewed consent.