Privacy Policy
Last updated 5 October 2026
This page explains what personal data SaudiActivities.com collects, why, where it goes, how long we keep it and what you can do about it. We keep it short and specific to this website.
Who we are
SaudiActivities.com is operated by Stark Ventures FZCO, United Arab Emirates. Stark Ventures FZCO is responsible for the personal data described here. Questions or requests: starkventuresFZCO@gmail.com.
When you request a booking
The booking form asks for your name, email address, phone number and, if you like, your hotel and a message. Together with the activity, date, number of guests and price, we use these details only to arrange your booking and to contact you about it.
- Your request is stored in our booking database (Supabase, hosted in Mumbai, India).
- We send ourselves a notification email and you a confirmation email through our email provider (Resend).
- We share the details our local partner needs to run the activity (for example your name, date, number of guests and hotel for pickup).
- No payment details are entered or stored on this website.
When you contact us on WhatsApp or by email
Many of our buttons open WhatsApp with a pre-filled message, or your email app. What you send then goes through WhatsApp (Meta) or your email provider and reaches our team; we use it to answer you and to arrange bookings.
Protection against spam and abuse
To stop automated abuse of the booking form, we keep a scrambled code made from your IP address together with a secret value that changes every day (a salted hash). We cannot turn it back into your IP address. These records are deleted after 24 hours; the same code is also kept with your booking until the booking is anonymised.
How long we keep your data
- Booking requests: 24 months. After that, your name, email address, phone number, hotel, message, the page you booked from, the analytics ID and the IP code are removed automatically. What remains (booking reference, activity, date, number of guests and price) cannot identify you and is kept for our accounts.
- Abuse-protection records: 24 hours.
- Analytics data: 14 months (see below).
Analytics (Google Analytics 4)
We use Google Analytics 4 to understand how the site is used: which pages are viewed, what people search for and filter on, and how often someone taps “Request to Book”, WhatsApp, email or sends a booking request. When a booking request succeeds we record the booking reference, activity and value, sent from your browser and from our server. We do not send your name, email address or phone number to Google.
Google processes this data for us and may do so outside your country. Google Analytics 4 does not log or store IP addresses. Event-level data is kept for 14 months.
Cookies and similar storage
| Name | Type | Purpose | Kept for |
|---|---|---|---|
_ga | Cookie (Google Analytics) | Tells visits from the same browser apart | 2 years |
_ga_HBTPBLCM0N | Cookie (Google Analytics) | Keeps track of the current visit | 2 years |
sa_consent | Local storage (this site) | Remembers your analytics choice | Until you change it or clear your browser |
saudiactivities_saved, saudiactivities_recent | Local storage (this site) | Your saved activities and recently viewed list; never leaves your device | Until you clear your browser |
sa_geo | Session storage (this site) | Whether to show the cookie banner (your country code only) | Until you close the tab |
ga_debug | Session storage (this site) | Only set when we test the site with ?ga_debug=1 | Until you close the tab |
Your choice
- If you visit from the EU, EEA, UK or Switzerland: we ask first. Analytics cookies are only used after you click “Accept” in the banner; until then, and if you click “Reject”, Google Analytics runs without cookies and without identifying your browser.
- Everywhere else: analytics is on by default. You can switch it off with the button below, block cookies in your browser, or use Google’s opt-out browser add-on.
- We do not use advertising or ad-personalisation cookies.
Other services that load content
To show this site quickly, your browser loads fonts from Google Fonts and activity photos from Pexels, and the site is hosted by Vercel. Like any website, these services receive your IP address and browser details when they deliver the files.
Your rights
You can ask us for a copy of the personal data we hold about you, ask us to correct or delete it, or object to how we use it. Email starkventuresFZCO@gmail.com and we will reply within 30 days. You can also complain to the data-protection authority where you live.
Changes
If we change how we handle personal data, we update this page and the date at the top.