Privacy Policy

The short version

We collect what you give us and what running a website unavoidably produces — and nothing else. No advertising trackers, no third-party analytics, no sale of personal data. Ever.

What we collect

Contact messages: the name, email, optional phone number and message you send, kept so we can reply and keep a record of the correspondence.

Owner applications: the legal name, entity type, email, phone, optional commercial-registration number and note you submit, kept to review the application and, if approved, to operate the partnership.

Accounts: when you hold a LUBY account, its email, phone number and language preference.

Technical records: our servers keep short-lived request logs (addresses, times, errors) for security and reliability, pruned automatically on a schedule.

What stays on your device

Your theme choice (light or dark) is stored in your browser's local storage and never sent to us. Signed-in sessions use a credential your browser holds; browsing the public site signed out requires no account and no cookie-based tracking.

Why we process it

To answer when you write to us; to review and administer owner applications; to operate accounts, and — when booking opens — reservations, payments and stays; to keep the platform secure; and to meet legal obligations that apply to us in the Kingdom, including tax and commercial regulation.

Who we share it with

Service providers who process data on our instructions and for the purposes above only — the provider that delivers our email, and, when booking opens, licensed payment providers who process payments under their own regulatory obligations. Authorities, where the law requires it. Nobody else, and never for advertising.

Where it lives, and for how long

Application and correspondence records are kept while they are needed for the purposes above and then deleted. Technical logs are pruned automatically after a short period. Backups exist for disaster recovery and expire on their own schedule.

Your rights

Under the Saudi Personal Data Protection Law (PDPL) you may ask what we hold about you, ask for correction, and ask for deletion of what we are not required to keep. Write to us through the contact page and we will answer in the language you write in.

Changes

This policy will grow when booking opens — payments and stays involve data this version does not describe. The revision date above always states the current version, and material changes will be announced on the site.