Privacy Policy

1. About Us

SightScape is a platform that enables users to discover, book, and purchase packages and tickets for experiences, activities, entertainment destinations, events, tours, trips, and other leisure services within the Kingdom of Saudi Arabia.

The SightScape Platform is owned and operated by Wajhat Al-Afaq for Entertainment Company, which acts as the controller of the personal data processed through the Platform unless otherwise stated.

SightScape operates as a discovery, booking, ticketing, and package sales platform. SightScape does not itself organize, operate, or deliver experiences, trips, tours, activities, or events unless this is expressly stated.

Experiences, activities, events, trips, and tours may be organized or delivered by independent service providers. SightScape processes personal data only to the extent required to facilitate bookings, issue tickets, provide support, improve its services, and protect the Platform and its users.

2. Personal Data We May Collect

We may collect and process different categories of personal data depending on how you use the Platform and the services you request.

2.1 Account and Registration Data

This may include:

• Name.
• Mobile number.
• Email address.
• City.
• Age or date of birth.
• Gender.
• Login credentials.
• Account preferences.
• Contact and support information.

Certain account details, such as age, date of birth, or gender, are generally optional. However, we may require some of this information when necessary to verify your age or eligibility, confirm whether a particular experience or service is suitable for you, comply with a service provider’s requirements, or meet applicable legal or regulatory obligations.

Where applicable, we will indicate whether a field is required or optional at the time the data is collected.

2.2 Booking and Purchase Data

This may include:

• Details of packages, tickets, or bookings you have purchased.
• Date and time of purchase.
• Booking reference number.
• Booking status.
• Ticket information or QR code.
• Package or ticket usage history.
• Activation or redemption details.
• Number of participants included in the booking.
• City or location associated with the booking.
• Special requests or notes relating to the booking.
• Cancellation, refund, or rescheduling history, where applicable.

2.3 Payment Data

When you make a purchase or booking through the Platform, electronic payments are processed by licensed or approved payment service providers in accordance with the applicable laws and regulatory requirements of the Kingdom of Saudi Arabia.

SightScape does not store complete payment card details on its systems and does not have access to your full card number or card verification value, commonly known as CVV.

We may receive or have access to limited payment-related information, such as:

• Payment status.
• Transaction amount.
• Transaction or reference number.
• Payment method.
• Name of the payment service provider.
• Card type, where available.
• Last four digits of the card, where available.
• Refund status or payment failure details.

We use this limited information to confirm bookings, issue tickets or packages, provide customer support, process refunds, maintain accounting records, prevent fraud, resolve disputes, and comply with legal and regulatory obligations.

The processing of payment data is also subject to the terms and privacy practices of the relevant payment service provider.

2.4 Device and Usage Data

This may include:

• Device type.
• Operating system.
• Browser type.
• Internet Protocol address.
• Device or application identifiers.
• Error and performance data.
• Pages or services accessed.
• Browsing activity within the Platform.
• Date and time of use.
• Interaction with offers, notifications, or messages.
• Clickstream and visit data within the website or application.

2.5 Location Data

We may collect or use location data where necessary for purposes including:

• Improving the user experience.
• Displaying nearby experiences or activities.
• Protecting the security of packages and tickets.
• Assisting with redemption or verification.
• Preventing fraud or misuse.
• Personalizing content and recommendations based on your location, where permission has been granted.

You may manage location permissions through your device or application settings. However, disabling location access may affect the availability or functionality of certain Platform features.

2.6 Communications and Customer Support Data

When you contact us by email, telephone, WhatsApp, contact forms, live chat, or any other support channel, we may collect:

• Your name and contact details.
• The content of your message or conversation.
• Details of the issue or request.
• Booking information connected to the request.
• Any files, images, or documents you submit.
• Your communication history with our support team.

2.7 Social Media Account and Interaction Data

When you interact with SightScape through Instagram, TikTok, or another social media platform, or access the Platform through a link sent to you through one of those channels, we may collect or process limited information associated with your social media activity, such as:

• Username or account name.
• User identifier assigned by the social media platform or a messaging and conversation management tool.
• The platform or link through which you accessed SightScape.
• The content of your interaction or conversation with SightScape.
• Date and time of the interaction.
• Campaigns or messages you engaged with.
• Any other information the social media platform or the user permits us to receive.

We may use this information to associate your social media identifier or interaction with your SightScape account when you enter the Platform through a dedicated or tracked link connected to the conversation.

This helps us identify the source of your visit, associate relevant communication or service information with your account, provide support, measure campaign performance, personalize your experience, and prevent fraud or duplicate accounts.

This connection does not give SightScape access to your Instagram or TikTok account, password, or account controls. It is limited to the data and identifiers made available by the social media platform, the messaging tool, or the user.

2.8 User-Submitted Content

We may collect content submitted by users, including:

• Ratings.
• Reviews.
• Comments.
• Photos or videos.
• Suggestions and feedback.
• Survey responses.

We may use this content to improve the Platform, present or promote experiences, develop our services, or for other operational or marketing purposes, in accordance with our Terms and Conditions and this Privacy Policy.

2.9 Partner and Business Enquiry Data

If you contact us as a service provider, partner, hotel, travel agency, company, influencer, content creator, distributor, or prospective partner, we may collect:

• Name.
• Job title.
• Organization name.
• Mobile number.
• Email address.
• City.
• Type of business or proposed partnership.
• Social media account information, where relevant.
• Licensing information or supporting documents, where required.
• Any information submitted through partnership or contact forms.

3. Sources of Personal Data

We may collect personal data from the following sources:

• Information you provide directly when creating an account, making a purchase or booking, or contacting us.
• Information generated through your use of the Platform.
• Your interactions with SightScape accounts on Instagram, TikTok, or other social media platforms.
• Dedicated or tracked links through which you access the Platform.
• Messaging and conversation management tools.
• Payment service providers processing your transactions.
• Service providers connected to your bookings.
• Approved partners, distributors, or sales channels.
• Analytics, marketing, and performance measurement tools.
• Customer service and support channels.
• Any other lawful source connected to the provision of our services.

4. How We Use Personal Data

We use personal data for the following purposes:

4.1 Providing Services and Operating the Platform

• Creating and managing user accounts.
• Processing purchases and payments.
• Issuing tickets, packages, and QR codes.
• Confirming bookings.
• Facilitating entry, redemption, or validation.
• Managing activation and usage.
• Sending booking confirmations, reminders, and service-related notifications.
• Providing customer support.
• Managing internal wallets, rewards, and promotional offers.
• Processing cancellation, refund, rescheduling, ticket transfer, package transfer, and other service-related requests.

4.2 Managing Bookings with Service Providers

We may use personal data to share the information required by a service provider, such as your name, booking number, booking date and time, number of participants, ticket or package type, or any other information necessary to fulfil, verify, manage, or communicate about your booking.

4.3 Improving the Platform and Our Services

• Analyzing Platform performance.
• Understanding how users interact with the website or application.
• Improving the user experience.
• Developing products and services.
• Testing new features.
• Measuring user satisfaction.
• Identifying and resolving technical issues.
• Improving the speed and security of the Platform.
• Analyzing aggregated or de-identified data to improve services and support operational decision-making.

4.4 Personalizing the User Experience

We may use information relating to your usage, interests, city, booking history, content interactions, and preferences to provide a more relevant experience.

This may include:

• Showing experiences and activities that match your interests.
• Ranking or recommending content based on usage behavior.
• Personalizing offers and recommendations.
• Tailoring messages and notifications to your preferences.
• Displaying content relevant to your city or preferred category.
• Customizing the website or application experience based on your interests and usage history.

We may also associate data from your interactions with SightScape through Instagram, TikTok, or messaging tools with your Platform account in order to provide a consistent experience, support you more effectively, identify the source of your visit or campaign, and personalize content and recommendations.

SightScape may also use automated systems, artificial intelligence, and machine learning technologies to improve search results, rank content, personalize recommendations, understand user interests, and improve the overall Platform experience, in accordance with applicable laws.

4.5 Security and Fraud Prevention

• Verifying identity or account information where necessary.
• Protecting packages and tickets against copying, tampering, or misuse.
• Preventing unauthorized use.
• Identifying attempted fraud or abuse.
• Protecting the rights of SightScape, its users, service providers, and partners.
• Managing payment disputes and objections.
• Monitoring Platform security, investigating suspicious activity, and taking appropriate steps to protect the Platform and its users.

4.6 Communicating with Users

We may use contact information to send:

• Booking confirmations.
• Tickets or QR codes.
• Important alerts.
• Customer support communications.
• Booking updates.
• Notifications concerning changes, cancellations, or rescheduling.
• Account security messages.
• Responses to enquiries, requests, and complaints, including follow-up on submitted requests.

4.7 Marketing and Promotions

Where permitted by applicable law, we may use your data for marketing, campaign measurement, and campaign optimization, including:

• Sending offers and recommendations.
• Displaying promotional campaigns.
• Sending discounts or promotional codes.
• Recommending new experiences or events.
• Personalizing content based on interests, city, or usage history.
• Measuring advertising campaign performance.
• Improving advertising and retargeting.
• Analyzing user interaction with messages, offers, and content.
• Creating user segments for analytics, marketing, or service personalization.

You may opt out of marketing communications using the unsubscribe method provided in the message or by submitting a support request through the “Contact Us” page on the website or application.

Even after opting out of marketing communications, we may continue to send essential messages relating to your account, bookings, services, or security.

4.8 Legal Compliance and Protection of Rights

We may use personal data to comply with applicable laws, regulations, and instructions issued by competent authorities, respond to lawful requests, protect the rights of SightScape, its users, service providers, or partners, enforce our Terms and Conditions, manage disputes and claims, or establish, exercise, or defend legal rights.

5. Legal Basis for Processing

We process personal data based on one or more lawful grounds, depending on the type of data and the purpose of the processing. These grounds may include:

• Your consent, where consent is required by law.
• Performance of a contract to which you are a party, or taking steps at your request before entering into a contract.
• Compliance with a legal obligation or a request from a competent authority.
• Pursuing SightScape’s legitimate interests, provided those interests do not conflict with your rights and interests and where permitted by law.
• Protecting the vital interests of a user or another person, where applicable.
• Any other legal basis permitted under applicable law.

6. Sharing Personal Data with Third Parties

SightScape may share certain personal data with third parties where necessary to provide services, fulfil bookings, operate the Platform, comply with legal obligations, or achieve the purposes described in this Privacy Policy.

Any sharing will be limited to the data reasonably required for the relevant purpose.

The categories of third parties with whom we may share data include:

6.1 Service Providers

We may share booking information with service providers responsible for delivering an experience, activity, event, trip, or tour, including:

• Name.
• Mobile number or email address, where necessary.
• Booking number.
• Number of participants.
• Booking date and time.
• Ticket or package type.
• Booking status.
• Any relevant booking requirements or notes.

This information may be shared to allow the service provider to:

• Verify the booking.
• Deliver the service.
• Manage entry.
• Contact the user where necessary to fulfil the booking.
• Address complaints or requests relating to the service.
• Coordinate necessary operational arrangements.

6.2 Payment Service Providers

We may share information required by payment service providers, banks, payment gateways, installment providers, buy-now-pay-later providers, or other financial service providers in order to process payments or refunds, manage disputes, prevent fraud, or comply with legal and regulatory requirements.

6.3 Technology Service Providers

We may use technology service providers to operate all or part of the Platform, including providers of:

• Hosting.
• Data storage.
• Databases.
• Cloud computing.
• Infrastructure management.
• Cybersecurity.
• Data analytics.
• Messaging and notifications.
• Customer service systems.
• Artificial intelligence tools.
• Messaging and conversation management tools.
• Social media interaction and identifier linking.
• Performance optimization.
• Other technical services required to operate the Platform.

6.4 Analytics and Marketing Providers

We may use analytics, measurement, advertising, and personalization providers to understand how the Platform is used, improve our services, measure marketing campaign performance, personalize content, enhance the user experience, and retarget users with relevant offers or content, in accordance with applicable laws.

6.5 Partners and Distributors

If a booking or purchase is made through a partner, distributor, hotel, travel agency, platform, or approved sales channel, we may share the data required to complete or verify the booking, provide support, prepare reports, complete commercial settlements, or perform related contractual obligations.

6.6 Government and Regulatory Authorities

We may share specific data with government entities, regulatory authorities, or government partners where required by law, in response to an official request, or in connection with a collaboration, initiative, program, campaign, or service requiring the disclosure of certain information.

Such sharing will be limited to what is necessary for purposes including:

• Verification.
• Legal and regulatory compliance.
• Reporting.
• Supporting government initiatives.
• Delivering services connected to a user or booking.
• Protecting rights, security, or public safety where required by law.

6.7 Professional Advisers

We may share personal data, where necessary, with lawyers, accountants, auditors, consultants, or other professional service providers for legal, financial, tax, accounting, operational, risk management, or rights-protection purposes.

6.8 Business Transfers and Restructuring

If SightScape is involved in a merger, sale of assets, restructuring, change of ownership, financing transaction, investment, or strategic partnership, personal data may be disclosed or transferred to relevant parties to the extent necessary, subject to applicable law and the continued protection of personal data.

6.9 Data Protection Obligations

SightScape seeks to ensure that personal data is shared only to the extent necessary for the relevant purpose. Where required, we implement appropriate contractual and organizational safeguards to protect personal data shared with third parties.

SightScape does not sell users’ personal data as a standalone commercial product to third parties.

7. Tracking, Personalization, and Marketing Technologies

SightScape uses cookies and similar tracking technologies, including pixels, software development kits (SDKs), analytics tools, campaign measurement tools, device or advertising identifiers, and customized or tracked links associated with messaging and communication tools.

These technologies may be used to improve the user experience, understand how the Platform is used, and measure traffic sources and user interactions.

We may use these technologies for purposes including:

• Remembering user preferences.
• Improving website and application performance.
• Analyzing visits and usage.
• Understanding which pages or experiences are of greatest interest.
• Measuring service and campaign performance.
• Preventing fraud and improving security.
• Personalizing content and recommendations.
• Providing a more relevant experience based on user interests, preferences, and usage history.

We may also use these technologies for marketing purposes, including:

• Measuring advertising campaign performance.
• Improving advertisements.
• Retargeting users.
• Displaying relevant offers and experiences.
• Analyzing interaction with messages, offers, and content.
• Creating marketing segments based on interests, city, or Platform engagement.

Users may control certain tracking technologies through their browser settings, device settings, or consent options made available through the Platform.

Disabling certain tracking technologies may reduce the functionality of the Platform or affect the user experience.

Further details will be provided in SightScape’s Cookie Policy.

8. International Transfers and Processing Outside Saudi Arabia

Some personal data may be processed or stored by service providers or systems located outside the Kingdom of Saudi Arabia where necessary to operate the Platform, provide services, or use technical, analytics, or marketing tools.

Where personal data is transferred or disclosed outside the Kingdom, SightScape will comply with the requirements and safeguards prescribed by the Saudi Personal Data Protection Law and its implementing regulations.

SightScape will also take appropriate measures to protect the confidentiality, security, and rights of the individuals concerned.

9. Messages and Notifications

SightScape may send users messages or notifications through email, SMS, WhatsApp, Instagram, TikTok, in-app notifications, or any other communication channel used by the user to contact SightScape.

These communications may include:

• Booking confirmations.
• Tickets and QR codes.
• Booking updates.
• Reminders.
• Notifications of schedule changes, cancellations, or rescheduling.
• Instructions relating to an experience.
• Customer support messages.
• Security alerts.
• Offers and recommendations.
• Surveys or requests for feedback.

Users are responsible for providing accurate and current contact information and for reviewing messages and notifications sent to their email address, mobile number, WhatsApp, Instagram, TikTok, or any other channel they use to communicate with SightScape.

SightScape may use these channels to send important notices relating to a booking.

Users may opt out of marketing communications using the option provided in the message or by submitting a support request through the “Contact Us” page on the website or application.

SightScape may continue to send essential service, booking, account, or security communications.

10. Data Retention

SightScape retains personal data for as long as necessary to achieve the purposes for which it was collected, comply with legal requirements, maintain accounting or tax records, prevent fraud, resolve disputes, enforce terms, or protect legal rights.

Retention periods may vary depending on the type of data and the purpose for which it is processed.

Once personal data is no longer required, we may delete it, anonymize it, or retain it temporarily in backup systems in accordance with our technical and operational procedures.

We may retain certain information after an account has been deleted where retention is necessary for legal compliance, fraud prevention, dispute resolution, agreement enforcement, or recordkeeping.

Deleted data may remain in secure backup systems for a limited period before being permanently deleted or overwritten in accordance with SightScape’s backup and retention procedures.

11. Data Security

SightScape takes reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure, or misuse.

These measures may include:

• Technical security systems.
• Restricted access controls.
• Authentication measures.
• Security monitoring.
• Encryption or other forms of data protection, where appropriate.
• Internal procedures for handling personal data.

However, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute protection against all technical or security risks.

If a personal data breach or security incident occurs, SightScape will take appropriate steps to investigate, contain, and mitigate the incident and will notify the competent authority and affected individuals where required by law.

12. User Rights

Under applicable law, users may have the following rights in relation to their personal data:

• The right to be informed of the legal basis and purpose for collecting and processing personal data.
• The right to access personal data.
• The right to obtain a copy of personal data in the format available under applicable law.
• The right to request the correction, completion, or updating of personal data.
• The right to request the deletion or destruction of personal data where the legal conditions are met.
• The right to withdraw consent where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.
• The right to submit a complaint to the competent authority.

The exercise of these rights may be subject to legal restrictions or exceptions, including legal obligations, record-retention requirements, fraud prevention, protection of legal rights, and dispute resolution.

13. How to Exercise Your Rights

Users may submit requests to access, correct, update, delete, or destroy their personal data, withdraw consent, or make any other request relating to their personal data by submitting a support ticket through the “Contact Us” page on the website or application.

We may request additional information to verify the identity of the person submitting the request before taking action.

Requests will be reviewed and answered within the periods and in accordance with the procedures prescribed by applicable law.

14. Account Deletion or Deactivation

Users may request the deletion or deactivation of their account by submitting a support ticket through the “Contact Us” page on the website or application.

Deleting an account may result in the loss of access to certain services, bookings, records, packages, tickets, or account-related benefits.

We may retain certain information after account deletion where required or permitted by law, or where necessary to prevent fraud, process refunds, maintain records, resolve disputes, or enforce the Terms and Conditions.

15. External Links and Third-Party Services

The Platform may contain links to, or integrations with, third-party services, including payment platforms, maps, social media networks, analytics tools, or partner pages.

SightScape does not control the privacy policies or data practices of those third parties and is not responsible for how they process personal data.

Users are encouraged to review the privacy policies of any third party before using its services.

16. Age Restrictions

SightScape’s paid services and purchasing features are intended for users who are at least 18 years old.

We do not knowingly seek to collect personal data from individuals under the age of 18 without an appropriate legal basis or parental or guardian consent where required.

If we become aware that data has been collected from an individual who is not entitled to use the service under the applicable terms, we may delete the data or take other appropriate action.

If a parent or legal guardian believes that the personal data of a person under the age of 18 has been collected without an appropriate legal basis or the required consent, they may submit a request to review or delete the data through the “Contact Us” page on the website or application.

17. AI-Assisted Customer Support

SightScape may use artificial intelligence-assisted customer support tools through channels including WhatsApp, website chat, or in-app chat.

Conversation content, booking information, and support-related messages may be processed to assist users, respond to enquiries, and improve service quality.

AI-generated responses may occasionally be inaccurate or incomplete. Users should refer to product pages, the Terms and Conditions, this Privacy Policy, or the customer support team to verify important information.

18. Changes to This Privacy Policy

SightScape may update this Privacy Policy from time to time.

The revised version will be published on the Platform together with an updated “Last Updated” date.

Where material changes are made to the way personal data is collected, used, or shared, SightScape may notify users through an appropriate method where required by law.

Continued use of the Platform after an updated Privacy Policy has been published indicates that the user has had the opportunity to review the revised policy. It does not replace separate consent where such consent is legally required.

Users are encouraged to review this Privacy Policy regularly.

19. Contact Information

For any enquiry, complaint, or request relating to this Privacy Policy or personal data, users must submit a support ticket through the “Contact Us” page on the website or application.

Users should select the appropriate request category, provide the necessary details, and attach any required information or supporting documents.

SightScape will follow up using the contact details provided in the support ticket or registered in the user’s Platform account.

The “Contact Us” page can be accessed through the website, application, or the official support channels displayed on the Platform.

Thank you for trusting SightScape. We are committed to protecting your privacy and handling your personal data responsibly and transparently.