Privacy Policy
How MAZJ collects, uses, and protects your personal data, under the Personal Data Protection Law of Saudi Arabia.
Last updated
Who we are
MAZJ (مزج) is operated by MAZJ Al-Omrania One Person Company, a company registered in the Kingdom of Saudi Arabia, at Life Tower, Zaid Ibn Alkhattab Street, Al-Olaya, Al-Khobar. For the purposes of the Personal Data Protection Law (PDPL), we are the party that controls how your personal data is processed. Our website (mazj.sa) and our booking store (mazj.online) are operated by the same company.
Scope of this policy
This policy explains how we handle personal data when you visit our website, book or pay through our website or our booking store, contact us, or use the MAZJ space as a space subscriber or visitor. It follows the Personal Data Protection Law of the Kingdom of Saudi Arabia and its regulations, overseen by the Saudi Data & AI Authority (SDAIA).
The data we collect
Depending on how you interact with us, we may collect: • Contact and account details you give us, such as your name, phone number and email. • Booking and payment details when you reserve a space with us. • The access credential we issue you (a QR code or an access card) to enter the space, and records of your entry. • Footage from security cameras (CCTV) in and around the premises. • Website and device information, including cookies, IP address and how you use the site. • The content of your messages when you contact us by WhatsApp, email or the contact form.
Access to the space
Space subscribers enter the space using a personal digital access credential, a QR code or an access card, issued through our booking system. We keep a record of entry to help keep the space secure.
Security cameras (CCTV)
We operate CCTV in common and entry areas to keep subscribers, guests and property safe. Footage is kept for a limited period and then deleted, is accessible only to authorised staff, and is shared outside MAZJ only where the law requires it.
How we use your data
We use your data to: • Manage your bookings and subscriptions (to perform our agreement with you). • Operate secure access to the space and keep it safe. • Respond to your enquiries and provide support. • Meet our legal, tax and invoicing obligations, including ZATCA requirements. • Keep the site secure and improve it. • Send you updates or offers only where you have given us separate, explicit consent, which you can withdraw at any time.
Cookies and analytics
We use Google Analytics to understand how this site is used, so we can improve it. On this site we run it in a mode that stores nothing on your device: it sets no cookie and no other identifier, so it cannot recognise you here, and it cannot follow you from this site to another. What reaches us is aggregate, such as which pages are read, in which language, and the country a visit came from. The site sets one cookie of its own, to remember whether you chose Arabic or English. It holds that choice and nothing else. You can clear or block cookies in your browser settings at any time. We also use the Meta pixel, from the company behind Facebook and Instagram, to measure our advertising. Unlike the analytics above, it does store a cookie on your device, for up to 90 days, and it tells Meta which pages you read on this site, so it can tell whether one of our ads brought you here. The booking store does not run it. You can limit this in your Facebook or Instagram ad settings, or by blocking cookies in your browser. To book, we send you to our booking store (mazj.online), which runs on Rekaz, our booking and payments platform. Your booking details are collected there, and the link that takes you there carries the campaign tags and the ad click reference from your visit, if there were any. The store also runs Google Analytics under our account, and it sets its own cookies, which may include analytics and advertising cookies. The promise above does not cover them. Rekaz's own privacy notice governs its payment pages.
Who we share your data with
We share personal data only as needed to run our service: • Our booking and payments platform (Rekaz), which processes your booking and passes your payment to the provider you choose. • Payment providers such as Tamara, Tabby and card networks. We do not store your full card details. • Our hosting and IT providers. • Google, which provides the website analytics described above. On this site it receives aggregate usage data only; on the booking store it receives the booking steps and purchases. • Meta, which receives the pages you read on this site through its pixel. • Government authorities where we are legally required to disclose it. We do not sell your personal data.
Transfers outside Saudi Arabia
Some of our service providers may process data outside the Kingdom. Where that happens, we transfer only what is necessary and rely on the conditions and safeguards allowed under the PDPL and the Regulation on Personal Data Transfer Outside the Kingdom.
How long we keep your data
We keep personal data only as long as we need it for the purpose we collected it, or as long as the law requires. Tax and invoicing records are kept for the period required by ZATCA. Your access credential is deactivated when your subscription ends, and entry records and CCTV footage are kept on a short rolling basis before they are deleted.
How we protect your data
We use organisational and technical measures to protect your data, and we limit access to staff who need it. No system can be guaranteed completely secure, but we work to keep your data safe and to respond quickly to any incident.
Your rights
Under the PDPL you have the right to: • Be informed about how your data is used. • Access your data and obtain a copy of it. • Correct data that is inaccurate or out of date. • Ask us to delete your data. • Withdraw your consent at any time. To exercise any of these, contact us through the details below, and we will respond within 30 days. If you are not satisfied, you may complain to the Saudi Data & AI Authority (SDAIA) through the National Data Governance Platform.
Children
Our services are meant for adults. We do not knowingly collect the personal data of anyone under 18. If you believe a child has given us their data, contact us and we will remove it.
Job and training applications
When you apply to work with us, or for cooperative training, through our careers page, we collect the answers you give and the CV you attach. We use them only to consider your application, and we keep them only as long as we need them for that. Your CV is stored privately and is never published. If you would like your application deleted, write to us and we will.
Changes and contact
We may update this policy from time to time; the date at the top shows when it last changed. For any privacy question or request, reach us through the contact page or on WhatsApp, or by email at info@mazj.sa. You can also contact the Saudi Data & AI Authority (SDAIA) if you wish to raise a concern with the regulator.
MAZJ Al-Omrania One Person Company · Commercial Registration No. 2051222684
VAT No. 310240548700003