1. Who is responsible for your data?
Maqam is operated in Saudi Arabia by مؤسسة عصام عتيق الغامدي لتقنية المعلومات. We are responsible for data we process for our own purposes, such as responding to website enquiries and supporting the platform. When a hotel determines how it uses guest and staff data to run its services, we process it on the hotel’s behalf under its instructions and our agreement. The hotel’s own privacy policy may also apply to your stay and its services.
2. What data we handle and where it comes from
- Visitors and people who contact us. Contact details and the contents of enquiries you send by email or WhatsApp. Our hosting service may process technical connection data, such as IP addresses and request times, to operate and protect the site.
- Guests. Your name, phone or WhatsApp number, room number and stay dates, which the hotel may provide at check-in. When you use the service, we handle order details, notes and status, plus message contents and delivery status when WhatsApp is used.
- Hotel staff. Name, phone number, account identifier, role, department, tasks and task status. We receive these details from you or a hotel administrator and may store a device push token when notifications are enabled.
- Payments. When payments are enabled, we process the amount, currency, status and reference supplied by the payment provider. You enter card details on the provider’s hosted checkout page.
3. Why we use the data
We use data to respond to enquiries, verify accounts and stays, let hotels fulfil orders and assign tasks, send service messages, confirm and troubleshoot payments, support users and protect the platform. Depending on the purpose, the basis is consent where requested, performance of an agreement to which you are a party, a legal obligation, or a legitimate interest such as preventing misuse, subject to applicable requirements.
Some services require specific data, such as a phone number to sign in or stay details to link an order to your room. Order notes are optional. Where marketing offers are available, they are sent with your consent and you can ask to stop receiving them.
4. Who can access the data
We share service data with the relevant hotel and its authorised staff according to their roles. Where the relevant integrations are enabled, we work with hosting and sign-in providers, Meta’s WhatsApp for messages, Moyasar for payments and Expo for staff app notifications. Each provider receives data needed for its service. We may also disclose data where required by law or a binding request from a competent authority.
Some provider services may involve processing outside Saudi Arabia. Any transfer is subject to applicable personal data transfer requirements. You can contact us about the processing location and safeguards for the service you use.
5. Storage and protection
Platform data is stored in its systems and databases, with access restricted by role and hotel. The website uses browser storage to remember your language. Service interfaces may use device or browser storage for your session or shopping cart.
Retention depends on the purpose and type of data, such as fulfilling an order or resolving a complaint, and any applicable legal or accounting obligations. Once the data is no longer needed and any required retention period ends, it is due for secure deletion or de-identification under applicable requirements.
6. Your rights and data deletion requests
Under applicable personal data protection law and regulations, you have the right to be informed about the processing, access your data and request a readable copy, request correction, updates or deletion, and withdraw consent when processing relies on it.
To request deletion or exercise another right, email hello@molham.studio. Include the type of request and the hotel name or order reference if relevant. We may ask for information to verify your identity before acting and will coordinate with the hotel where it is the data controller. Deletion is subject to applicable retention requirements.
You can submit a complaint to the competent data protection authority through the National Data Governance Platform.
7. Contact and updates
For privacy enquiries, contact the operator of Maqam at hello@molham.studio. We publish updates on this page with the date of the latest revision.