Free Cancellation

• Cancel your booking 24 hours or more before the appointment for a full refund.
• No cancellation fees apply when you cancel within the allowed timeframe.
• Refunds are processed to your original payment method within 5-7 business days.

Late Cancellation

• Cancellations made less than 24 hours before the appointment may incur a fee.
• The fee depends on the salon's individual policy and service type.
• You will be notified of any applicable fees before confirming cancellation.

No-Show Policy

• If you miss your appointment without prior notice, the full amount may be charged.
• We recommend cancelling as early as possible if you cannot attend.
• Repeated no-shows may affect your ability to book in the future.

1. Introduction

• Welcome to Samha ("Samha," "Company," "we," "our," or "us"). This Privacy Policy describes how we collect, use, process, store, disclose, and protect personal data when you access or use the Samha mobile application, website, and related services (collectively, the "Service").
• We are committed to safeguarding your privacy and handling your personal data in accordance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia, applicable implementing regulations, and international data protection best practices.
• By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy.

2. Scope of Application

• This Privacy Policy applies to all users of the Samha application, including customers booking beauty services and any individuals interacting with our platform.
• It does not apply to third-party services that may be linked within the app.
• We are not responsible for the privacy practices of third parties.

3. Personal Data We Collect

3.1 Information You Provide Directly:

• Full name
• Email address
• Phone number
• Date of birth
• Booking details and appointment history
• Beauty preferences
• Optional profile photos
• Messages, reviews, and customer support communications

3.2 Payment Information:

• Payments are processed securely through certified third-party payment providers (including EDFAPAY).
• We do not store or process full credit or debit card numbers on our servers.

3.3 Automatically Collected Information:

• Device type and operating system
• Unique device identifiers
• IP address
• Log data (access times, pages viewed, actions taken)
• App usage analytics
• Approximate or precise location data (only with your explicit permission)

4. Legal Basis for Processing

• Your consent
• Performance of a contract (e.g., booking services)
• Compliance with legal obligations
• Legitimate business interests (such as fraud prevention and service improvement), provided such interests do not override your rights

5. How We Use Your Information

• Create and manage user accounts
• Facilitate bookings between users and salons
• Process transactions
• Send booking confirmations, reminders, and service updates
• Provide customer support
• Personalize user experience
• Detect, prevent, and investigate fraud or misuse
• Improve app performance and features
• Comply with applicable laws and regulatory requirements

We do not sell, rent, or trade your personal data.

6. Data Sharing and Disclosure

• With Partner Salons: We share necessary booking details with salons to enable appointment fulfillment.
• With Service Providers: We may share information with trusted third-party service providers (payment processors, cloud hosting providers, analytics providers) under contractual confidentiality obligations.
• Legal Requirements: We may disclose personal data if required by Saudi laws, court orders, or government authorities.
• Business Transfers: In the event of a merger, acquisition, restructuring, or asset sale, personal data may be transferred as part of the transaction.

7. Data Security

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Role-based access controls
• Secure authentication mechanisms
• Regular system monitoring and updates
• Hosting within secure data centers compliant with Saudi regulatory requirements

Despite our efforts, no system can guarantee absolute security.

8. Data Retention

• We retain personal data only for as long as necessary to provide the Service, fulfill contractual obligations, and comply with legal requirements (typically 5–10 years for financial records under Saudi law).
• When data is no longer required, it will be securely deleted or anonymized.

9. Your Rights Under PDPL

• Access your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of your data
• Restrict or object to processing
• Withdraw consent at any time
• Request data portability where applicable

To exercise your rights, please contact: privacy@samhaapp.com

We may request identity verification before processing certain requests.

10. International Data Transfers

• Personal data is primarily stored within the Kingdom of Saudi Arabia.
• If data is transferred outside Saudi Arabia, such transfers will comply with PDPL requirements and include appropriate legal safeguards to ensure adequate protection.

11. Children's Privacy

• The Service is not directed to individuals under the age of 18.
• We do not knowingly collect personal data from minors.
• If we become aware that a minor has provided personal data, we will take steps to delete such information promptly.

12. Cookies and Tracking Technologies

• We may use cookies and similar tracking technologies to maintain session functionality, remember user preferences, analyze usage trends, and improve Service performance.
• Users may manage certain tracking preferences through device or browser settings.

13. Changes to This Privacy Policy

• We reserve the right to update this Privacy Policy at any time.
• If material changes are made, we will notify users through the application or other appropriate means.
• Continued use of the Service after updates constitutes acceptance of the revised policy.

14. Contact Information

• Email: privacy@samhaapp.com
• Address: Riyadh, Kingdom of Saudi Arabia