Privacy Policy
How MAZJ collects, uses, and protects your personal data, under the Personal Data Protection Law of Saudi Arabia.
Last updated
Who we are
MAZJ (مزج) is operated by MAZJ Al-Omrania One Person Company, a company registered in the Kingdom of Saudi Arabia, at Life Tower, Zaid Ibn Alkhattab Street, Al-Olaya, Al-Khobar. For the purposes of the Personal Data Protection Law (PDPL), we are the party that controls how your personal data is processed. Our website (mazj.org) and our booking store (mazj.online) are operated by the same company.
Scope of this policy
This policy explains how we handle personal data when you visit our website, book or pay on our website, contact us, or use the MAZJ space as a space subscriber or visitor. It follows the Personal Data Protection Law of the Kingdom of Saudi Arabia and its regulations, overseen by the Saudi Data & AI Authority (SDAIA).
The data we collect
Depending on how you interact with us, we may collect: • Contact and account details you give us, such as your name, phone number and email. • Booking and payment details when you reserve a space with us. • The access credential we issue you (a QR code or an access card) to enter the space, and records of your entry. • Footage from security cameras (CCTV) in and around the premises. • Website and device information, including cookies, IP address and how you use the site. • The content of your messages when you contact us by WhatsApp, email or the contact form.
Access to the space
Space subscribers enter the space using a personal digital access credential, a QR code or an access card, issued through our booking system. We keep a record of entry to help keep the space secure.
Security cameras (CCTV)
We operate CCTV in common and entry areas to keep subscribers, guests and property safe. Footage is kept for a limited period and then deleted, is accessible only to authorised staff, and is shared outside MAZJ only where the law requires it.
How we use your data
We use your data to: • Manage your bookings and subscriptions (to perform our agreement with you). • Operate secure access to the space and keep it safe. • Respond to your enquiries and provide support. • Meet our legal, tax and invoicing obligations, including ZATCA requirements. • Keep the site secure and improve it. • Send you updates or offers only where you have given us separate, explicit consent, which you can withdraw at any time.
Cookies and analytics
Our website uses cookies and analytics tools (such as Google Analytics) to understand how the site is used and to improve it. You can control or block cookies through your browser settings, though some parts of the site may not work as intended if you do.
Who we share your data with
We share personal data only as needed to run our service: • Our booking and payments platform (Rekaz), which processes your booking and passes your payment to the provider you choose. • Payment providers such as Tamara, Tabby and card networks. We do not store your full card details. • Our hosting and IT providers. • Government authorities where we are legally required to disclose it. We do not sell your personal data.
Transfers outside Saudi Arabia
Some of our service providers may process data outside the Kingdom. Where that happens, we transfer only what is necessary and rely on the conditions and safeguards allowed under the PDPL and the Regulation on Personal Data Transfer Outside the Kingdom.
How long we keep your data
We keep personal data only as long as we need it for the purpose we collected it, or as long as the law requires. Tax and invoicing records are kept for the period required by ZATCA. Your access credential is deactivated when your subscription ends, and entry records and CCTV footage are kept on a short rolling basis before they are deleted.
How we protect your data
We use organisational and technical measures to protect your data, and we limit access to staff who need it. No system can be guaranteed completely secure, but we work to keep your data safe and to respond quickly to any incident.
Your rights
Under the PDPL you have the right to: • Be informed about how your data is used. • Access your data and obtain a copy of it. • Correct data that is inaccurate or out of date. • Ask us to delete your data. • Withdraw your consent at any time. To exercise any of these, contact us through the details below, and we will respond within 30 days. If you are not satisfied, you may complain to the Saudi Data & AI Authority (SDAIA) through the National Data Governance Platform.
Children
Our services are meant for adults. We do not knowingly collect the personal data of anyone under 18. If you believe a child has given us their data, contact us and we will remove it.
Changes and contact
We may update this policy from time to time; the date at the top shows when it last changed. For any privacy question or request, reach us through the contact page or on WhatsApp, or by email at info@mazj.org. You can also contact the Saudi Data & AI Authority (SDAIA) if you wish to raise a concern with the regulator.
MAZJ Al-Omrania One Person Company · Commercial Registration No. 2051222684
VAT No. 310240548700003