This policy explains how Clean Basket ("we", "us"), the operator of Suitiee, collects and uses personal data. It is written to meet the Personal Data Protection Law of the Kingdom of Saudi Arabia (the "PDPL") and its regulations, and it covers everyone whose data reaches the platform: people with an account, the staff they invite, the crews who clean the units, and the guests who stay in them.
We collect as little as the service needs, we keep it no longer than we must, and we do not sell it. Where we ask for your consent, it is a choice you can decline and later withdraw.
1. What we collect
Account data. Your name, email address, phone number, password (stored only as a hash), preferred language, and, for a company account, its name, city, commercial registration and VAT numbers. Staff invited to an account give us the same.
Units. The address, size, type and access instructions of each unit you manage, together with photographs and the guest guide you write for it.
Bookings and guests. When you connect a booking channel or a calendar, we receive the bookings for the unit: dates, the guest's name and, where the channel provides them, their phone number, email address, nationality, party size and messages. We process this data on your behalf as the host; the channel remains the guest's first point of contact.
Payments. When you pay, our payment gateway, Moyasar, collects your card details under its own privacy notice. We receive a reference to the payment, the last four digits of the card and its network, and the amount. We never receive or store a full card number.
Visits. When a crew cleans a unit, we record who did the work, when it started and finished, the photographs the crew takes before and after, any damage or issue they report, and the check-list they complete.
Technical data. The address, browser and device you use, the pages you open and the actions you take, and the errors the platform records. We use this to keep the service secure and working, not to build a profile of you.
Guest orders. A guest who orders a service from a sticker in a unit gives us their phone number to confirm the order by one-time code, and their name if they choose to.
2. Why we use it
To provide the service you signed up for: to run your calendar, dispatch crews to your units, take payment, issue invoices, send the messages you configure and show you what happened. This is processing necessary to perform our contract with you.
To keep the platform secure and lawful: to verify sign-ins, prevent fraud and abuse, keep accounting records and meet our obligations to the tax authority. This is processing required by law or by our legitimate interest in running a safe service.
To tell you about the service: renewal reminders, changes to these terms, a crew on its way. These are service messages, sent whether or not you have opted in to marketing.
To send you offers and news, only if you ticked the box that asks for it (section 7).
3. How long we keep it
Account and unit data is kept while your account is open. When you close it, we delete or anonymise it within ninety days, except for what we must keep longer.
Invoices, payments and the records behind them are kept for the period the Zakat, Tax and Customs Authority requires.
Booking and guest data is kept for two years after the stay, so a dispute, a damage claim or a tax query can be answered, and is then deleted. Visit photographs are kept for the same period.
Messages in the guest inbox are kept for as long as the booking they belong to. Technical logs are kept for ninety days.
5. Where it is kept
Your data is stored on servers under our control. Some of the providers named above process data outside the Kingdom of Saudi Arabia; where they do, we transfer it only as the PDPL allows, under contractual protections that require the same standard of care the law requires of us.
6. Your rights
Under the PDPL you have the right to know what data we hold about you and how we use it; to receive a copy of it in a readable form; to have inaccurate data corrected; to have data deleted when we no longer have a lawful reason to keep it; and to withdraw any consent you gave us, from that point on.
Some of this you can do yourself from your account: your details, your language, your marketing choice and your units are yours to edit. For a copy of your data, to close your account, or for anything else, write to info@suitiee.com. We answer within thirty days, and we may ask you to confirm your identity first.
If you are not satisfied with our answer, you may complain to the Saudi Data and Artificial Intelligence Authority (SDAIA), the competent authority for the PDPL.
7. Offers and news
We send marketing messages only to people who have asked for them. At sign-up there is a box, unticked, that asks whether you would like offers and news; if you leave it unticked you receive none. You can change your answer at any time in your account settings, and every marketing message tells you how to stop receiving them. Service messages — an invoice, a renewal reminder, a crew on its way — are sent regardless, because the service does not work without them.
8. Guests
If you are a guest, the host who lets the unit you are staying in is responsible for your data under the PDPL, and we process it on the host's behalf to run their calendar, send the messages they configure and prepare the unit for your stay. The booking channel you used has its own privacy notice. To exercise your rights over data held in Suitiee, contact the host or write to info@suitiee.com and we will pass your request on.
9. Security
Data is encrypted on its way to and from the platform. Passwords are stored only as salted hashes, and access to data inside our team is limited to the people who need it for their work. No system is perfectly secure; if a breach affects your data we will tell you and the authority within the time the PDPL sets.
11. Changes to this policy
We may update this policy. The date at the top of the page shows when it last changed, and a material change is announced by email or in your account before it takes effect.
12. Contact
Questions about this policy, and requests to exercise your rights, go to Clean Basket at info@suitiee.com, or by post to Riyadh, Kingdom of Saudi Arabia.