Effective date: 22 September 2026
Last updated: 22 September 2026

Shaden Hospitality (“Shaden Hospitality”, “we”, “us”, “our”) is a hospitality owner, operator and asset manager based in Jeddah, Kingdom of Saudi Arabia. This notice explains what personal data we collect through shadenhospitality.sa, how we use it, and the rights you hold under the Saudi Personal Data Protection Law (PDPL).

This notice covers this corporate website only. Our properties and brands publish their own notices, and a booking made on a property website is governed by that property’s notice.

1. Who we are

Shaden Hospitality is the data controller for the personal data described here.

• Address: Jeddah, Kingdom of Saudi Arabia
• Email: info@shadenhospitality.sa

2. The data we collect

• Contact form: first name, last name, email address, telephone number, your message, and your consent to be contacted. These are the only fields the form asks for.
• Career and business enquiries: anything you choose to send us by email, including a CV or company profile if you attach one.
• Technical data: IP address, browser and device type, and the pages you visit, collected through cookies and through Google reCAPTCHA, which protects the contact form from automated abuse.

We do not ask for payment details on this website and we do not take bookings here.

3. Why we use it

• To answer the enquiry you sent us and to continue that correspondence.
• To assess business, partnership, development and career approaches.
• To keep this website secure, including protecting the contact form from automated submissions.
• To meet legal and regulatory obligations in the Kingdom.

4. Our legal basis

We process personal data on the basis of your consent, given when you submit the contact form; for our legitimate interests in operating and securing this website and in responding to business approaches; and to comply with legal obligations. You may withdraw consent at any time.

5. Who we share it with

• Our hosting and email providers, who process data on our behalf.
• Google, as the provider of reCAPTCHA on the contact form.
• Companies within the Shaden Hospitality group, where your enquiry concerns one of our properties or brands and is better answered by them.
• Government authorities, where disclosure is required by Saudi law.

We do not sell personal data and we do not share it for advertising.

6. Transfers outside the Kingdom

Some of our service providers process data outside Saudi Arabia. Where that happens, the transfer is made in line with PDPL requirements and subject to appropriate safeguards.

7. How long we keep it

We keep enquiry correspondence for as long as the enquiry is live and for the period afterwards required by Saudi accounting and corporate record-keeping rules, and no longer than is necessary for the purposes set out above.

8. Security

We apply technical and organisational measures appropriate to the risk, including access controls and encrypted transmission, to protect personal data against loss, misuse and unauthorised access.

9. Your rights

Under the PDPL you may ask to be informed of how your personal data is used, request access to it, request a copy in a readable format, ask for it to be corrected, ask for it to be destroyed, and withdraw your consent at any time.

To exercise a right, write to info@shadenhospitality.sa. We respond within the periods set by the PDPL. You may also raise a complaint with the Saudi Data & AI Authority (SDAIA).

10. Children

This website is a corporate site and is not directed at children. We do not knowingly collect personal data from anyone under 18.

11. Changes to this notice

We may update this notice. The current version is always published on this page with its effective date.