Last Updated: April 12, 2026

Introduction

Hayhom Company for Information Technology (“Hayhom”) is committed to protecting the privacy of users of its platforms and applications, which include systems, websites, applications, and all affiliated channels, services, and products.

Hayhom Company is committed to collecting and processing personal data in accordance with the provisions of the Saudi Personal Data Protection Law and its executive regulations issued by the Saudi Data and Artificial Intelligence Authority (SDAIA), and in line with best local and international practices in the field of privacy protection.

This policy aims to clarify how personal data is collected and processed by Hayhom, outline the legitimate purposes of such processing, define the rights of data subjects and how to exercise them, and explain the technical and organizational measures adopted by Hayhom to protect data from any unauthorized access, use, or disclosure.

Scope of the Policy

This policy applies to all personal data collected or processed by Hayhom from users of its platforms and applications, whether they are natural or legal persons, inside or outside the Kingdom of Saudi Arabia, through any of the following means or channels:

Hayhom official websites.
Hayhom mobile applications.
Hayhom e-commerce stores.
Hayhom electronic systems.
Official communication channels, including but not limited to WhatsApp messages and SMS.
Any other method or platform adopted by Hayhom in the future to provide its services or products.

Definitions

For the purposes of this policy, the following terms and phrases shall have the meanings assigned to them below, wherever they appear in this policy, unless the context indicates otherwise.

Personal Data: Any information relating to a natural or legal person through which their identity can be identified or recognized, including, but not limited to, name, national ID number, commercial registration number, mobile number, email address, or any other data that can be used to identify the concerned person or entity.
Processing: Any operation performed on personal data, whether automated or manual, including, but not limited to, collection, recording, organization, storage, use, disclosure, modification, transmission, retrieval, transfer, or destruction.
Data Controller: Hayhom, in its capacity as the entity that determines the purposes and means of processing personal data and bears legal responsibility for such data.
Data Subject: The natural or legal person to whom the personal data processed by Hayhom relates.
Sensitive Data: Personal data that, if disclosed, processed, or handled, may pose a high risk to the data subject, including, for example, financial data, biometric data, identity verification means, and any data classified by the law or its executive regulations as sensitive data requiring additional protection.

Purpose and Legal Basis for Collecting Personal Data

Hayhom collects and processes users’ personal data when using the platforms or applications, in order to achieve the following purposes:

Providing services or products and operating platforms or applications
Data is used to activate accounts, execute registration and payment processes, and enable users to manage and organize events and occasions and obtain products and services.

Improving user experience and developing services and products
Data is used to analyze performance and usage in order to improve provided services and products, develop new features, and ensure the stability and security of the platforms or applications.

Communication and technical support
Contact data is used to communicate with users regarding their requests or inquiries or to provide technical and technical support.

Sending notifications and updates
Hayhom sends notifications or alerts to users related to the use of services or products or updates to terms or related policies.

Compliance with laws and regulations
Data may be processed to fulfill regulatory requirements or to meet any legal or regulatory obligations issued by the competent authorities in the Kingdom of Saudi Arabia.

Marketing and informational communication
Hayhom may use contact data to provide interested or potential customers with updates, offers, and similar services, with the option to unsubscribe or stop receiving such notifications at any time according to the approved procedures. This use does not include invitees’ data under any circumstances.

Protection and service security
Data is used to maintain the security of the platforms or applications, protect accounts from unauthorized use or access, and monitor any activity that may affect service stability or user safety.

Types of Personal Data Collected by Hayhem Company

Hayhom collects types of personal data necessary to provide its services or products, including – but not limited to – the following:

Personal data and contact information:
Includes full name, mobile number, email address, and other contact details.

Event and occasion data:
Includes details of events or occasions, names of invitees and their contact information, attendance responses, notes, dates, times, and locations of events and occasions, and any other data entered by the user within the event or occasion.

Technical and usage data:
Includes IP address, device type, device number and specifications, operating system, platform and application login data, activity logs, and other technical data.

Payment and transaction data:
Includes transaction number, payment amount and date, financial service provider data, and payment channels, noting that the company does not retain or store bank or credit card information, as payments are processed through payment channels on the platforms or applications.

Communication and technical support data:
Includes messages, conversations, support requests, and text, audio attachments, and video clips submitted by the user for follow-up and technical support purposes.

Third-party data provided by the user:
If the user enters or provides the platforms or applications with data related to other parties (such as invitees or contacts), such data is processed based on the user’s consent and request for the purpose of providing the service or product, and the user is responsible for obtaining the consent of those parties before providing Hayhom with their data.

Sharing Data with Third Parties

Hayhom is committed to maintaining the confidentiality of personal data and does not share it with any external party except in the cases specified below:

Approved service providers:
Some data may be shared with approved service providers to facilitate the provision of certain services or products, under agreements that ensure confidentiality, data protection, and non-use for other purposes.

Competent official authorities:
Data may be shared in the event of a legal obligation or an official request issued by a competent governmental or judicial authority, in accordance with the applicable laws and regulations in the Kingdom of Saudi Arabia.

Halls, hotels, operators, and coordinators:
Some data related to organizing events and occasions or providing related services and products may be shared with halls, hotels, operators, and coordinators, to the extent necessary to provide the requested services or products or complete booking or organizational procedures, with emphasis on those parties to maintain confidentiality and not use the data for purposes other than those for which it was shared.

Third-Party Websites and Services

The platforms and applications may contain links or advertisements to third-party websites and services, including our partners, suppliers, advertisers, sponsors, service providers, or licensors. The user acknowledges that Hayhem Company does not control the content of these websites or services and assumes no responsibility for their policies or practices, including the collection or processing of personal data.

Browsing or interacting with any third-party website is subject to the terms and policies of those websites, and users are advised to review them before providing any personal information or using the services offered by such third parties.

Protection of Personal Data

Hayhem Company is committed to protecting personal data in accordance with the Saudi Personal Data Protection Law and its executive regulations, by taking the necessary measures to ensure:

The confidentiality of personal data and its protection from any unauthorized access, use, or disclosure.
The integrity of personal data and preventing its unlawful alteration.
Restricting access to personal data to authorized employees and entities within the scope of defined necessity and responsibility.
Using personal data in accordance with the authorized purpose and ensuring the rights of individuals and entities in line with the approved policy and the applicable laws and regulations in the Kingdom of Saudi Arabia.

Data Subject Rights

Hayhem Company ensures that the data subject may exercise the legal rights stipulated in the Saudi Personal Data Protection Law, including the following:

Access: Knowing the personal data collected by the company, its categories, and the purposes related to its processing.
Rectification: Requesting the modification or correction of any inaccurate or incomplete personal data.
Deletion: Requesting the removal or destruction of personal data when the purpose of its collection has ended or when there is no longer a legal need for its processing.
Withdrawal of consent: Withdrawing any consent previously given for the processing of personal data, without affecting processing activities based on prior consent.
Restriction or objection to processing: Objecting to or restricting the processing of personal data when a legal justification is available.
Data portability: Requesting a copy of personal data in a readable format, when the processing is based on consent.

Data Retention Period

Hayhem Company retains personal data for the purposes for which it was collected, or as required by applicable laws and regulations. Personal data is retained for as long as it is necessary to fulfill legal or regulatory obligations, or to protect the rights and claims of the company or the relevant parties. The user may request the deletion of their personal data, and such request will be processed in accordance with the approved procedures and provided that it does not conflict with any existing legal obligations.

General Provisions

Acceptance of the policy:
By using Hayhem platforms and applications, you expressly agree to this Privacy Policy, including any subsequent amendments made to it, as well as the controls and terms governing the use of the platforms and applications. If you do not agree to any of the terms of this policy, you must stop using the platforms and applications immediately.

Amendments to the policy:
Hayhem Company reserves the right to amend the Privacy Policy and the controls and terms of use of the platforms and applications in accordance with applicable laws and regulations in the Kingdom of Saudi Arabia. Continued use of the platforms or applications after the announcement of any amendments constitutes your explicit acceptance of those changes.

Contact and inquiries:
Complaints, suggestions, and feedback related to the use of your data are welcome and may be submitted to the company via email or the mobile number published in the official communication channels.

Jurisdiction:
This policy and any disputes arising from its use or interpretation shall be governed by the laws and regulations of the Kingdom of Saudi Arabia, and the competent courts within the Kingdom of Saudi Arabia shall have exclusive jurisdiction.