Privacy Policy & Confidentiality of Information – Rekaz Platform
The Rekaz Platform team welcomes you. We inform you that, out of our commitment to protecting users, Rekaz Platform seeks to safeguard the information of service providers and their customers in accordance with the Privacy Policy and Confidentiality of Information mechanism applied on the Rekaz Platform.
Accordingly, Rekaz Platform notes that this document informs you of the Privacy Policy and Confidentiality of Information in effect on Rekaz Platform. Rekaz Platform has established this policy—"Privacy Policy and Confidentiality of Information"—to clarify and define the confidentiality and privacy mechanism applied on the Rekaz Platform. Please review it, as your use of Rekaz Platform means your information is subject to this policy.
Definitions
(Rekaz Platform)
This refers to the platform that provides an operating and management system for service-based businesses (such as salons, sports clubs, academies, home/mobile services, and others). This definition includes all forms of Rekaz Platform on the internet, whether an application, a website, or a dashboard, including related features such as managing appointments, bookings, subscriptions, invoices, reminders via communication channels, and any booking interfaces, websites, or "branded/white-labeled" apps activated for the establishment.
(Service Provider / Establishment)
This refers to any establishment or individual (natural or legal person) who registers on Rekaz Platform to use the system to manage their service business, including their accounts, branches, services, employees, and operations through Rekaz Platform.
(End Customer)
This refers to any person who books an appointment/service, subscribes, pays, or interacts with the Service Provider's booking interface (such as a booking page, website, or white-labeled app).
(Employee / Practitioner)
This refers to any person added by the Service Provider on Rekaz Platform (such as a receptionist, trainer, specialist, technician, service provider), who is granted access permissions as determined by the Service Provider.
(Booking Interface)
This refers to any interface made available by the Service Provider to their customers via Rekaz (booking page, website, white-labeled app, form, payment link, etc.).
(User)
This term refers to any person using Rekaz Platform, whether a Service Provider, an Employee/Practitioner, or an End Customer.
Rekaz's role regarding data
Service Provider data (Account owner / Establishment): Rekaz Platform is often a "data controller" with respect to account creation, management, and platform operation data.
Service Provider's customer data (End Customers): Rekaz Platform is often a "data processor" on behalf of the Service Provider with respect to the Service Provider's customer data that is entered or collected through booking interfaces, while the Service Provider remains primarily responsible for the purpose of collecting and using such data within their business.
Information Rekaz Platform collects and stores in its electronic systems
First: Service Provider data (Establishment / Account owner)
May include, for example and not limited to:
- Identification and contact information: name, mobile number, email address.
- Verification and compliance information: national ID / residency ID (when needed), commercial registration / freelance document, VAT number (if any), tax invoice details.
- Bank account information: IBAN / IBAN certificate (when collections or financial settlements are enabled).
- Branch information: addresses, branch locations, working hours, days off/holidays.
- Service settings: service list, prices and durations, packages/subscriptions, offers, cancellation policies.
- Employee and permissions data entered by the Service Provider: employee names, roles, schedules, and permissions.
Second: End Customer data (Service Provider's customers)
May include, for example and not limited to:
- Name, mobile number, email address (if available).
- Booking data: appointments, service type, branch, service provider, booking-related notes.
- Subscription/package data: subscription type, duration, status, start and end dates.
- Billing and payment data: invoices, payment status, payment amounts, payment methods, payment links (noting that sensitive card data is usually processed by the payment provider directly, not within Rekaz).
Third: Technical and usage data
- Login information: username/email, password (in encrypted form), account recovery methods.
- System logs: IP addresses, device type, browser, operating system, login times/dates, error logs.
- Cookies and similar technologies to improve the experience and provide operational and analytical features.
Sharing information
Naturally, Rekaz Platform seeks to retain information in a manner that preserves user privacy, and it retains such information only for operating the platform, improving quality, delivering services, and facilitating them.
As a general rule:
- Only a limited number of platform operators who require access for their work can view data, with defined permissions and under administrative and technical oversight.
- Data is not sold, rented, or shared for commercial purposes outside the scope of providing the service and a unified user experience.
How secure is the confidentiality of user information?
Rekaz Platform strives to maintain the confidentiality of users' information by:
- Applying appropriate security and technical controls to protect data from unauthorized access.
- Periodically updating protection procedures as needed.
However, since the internet cannot be guaranteed 100%, Rekaz Platform advises users to:
- Keep login credentials confidential and not share them.
- Use strong passwords, update them periodically, and avoid reusing them across multiple services.
If a security breach results in unauthorized access to or tampering with personal data, the platform is committed to taking the necessary measures to address the incident, notify competent authorities, and inform affected parties according to applicable legal requirements.
Third-party services (integrations)
The user expressly acknowledges and agrees that in some cases Rekaz Platform may need to share certain relevant information with third parties (service providers) to enable service delivery, such as:
- Payment solution providers (for collections, issuing payment links, or settlements).
- Messaging/notification providers (e.g., WhatsApp/SMS/email) when reminders or notifications are enabled.
- Hosting and cloud infrastructure providers to operate the platform and store data.
- Specialized operational integration providers (e.g., gate/access device integrations for clubs, if enabled).
Such sharing occurs only to the extent necessary and for a legitimate purpose related to the service, in accordance with Saudi Arabia's Personal Data Protection Law. Rekaz Platform also commits to ensuring service providers adhere to confidentiality and do not use information outside the scope of the service.
Users' rights regarding personal data
Rekaz Platform is keen to provide mechanisms to exercise rights related to personal data in accordance with relevant regulations, including:
- Right of access: view the personal data held by the platform.
- Right to obtain a copy: request a copy of data during the subscription period.
Rules and Terms of Use of Rekaz Platform
All obligations of Rekaz Platform, all obligations of users, and the rights governing the relationship between the user and Rekaz Platform are set out in the Terms of Use agreement.
Transactions between the Service Provider and the End Customer (providing a service, attending an appointment, subscription, cancellation policy, etc.) are an independent contractual relationship subject to what the two parties agree upon. Rekaz Platform is not a direct party to that relationship except to the extent of operating the platform and providing its technical tools.
Contact regarding privacy
For more details about processing your personal data and how to exercise your rights, you may contact us through the official communication channels announced within Rekaz Platform or via the support section, according to the contact details shown in the platform.