Privacy Policy

Last updated: 3 October 2026

This policy explains how Lamar (“we”) collects, uses, and protects personal data when you use the Lamar app or this website. We handle personal data in line with the Kingdom of Saudi Arabia’s Personal Data Protection Law and its implementing regulations (the “PDPL”).

1. Who is responsible

Lamar is the controller of personal data collected through the app and website. For privacy questions, email privacy@lamardiscovery.com.

2. Data we collect

We collect only what we need to run the service, including:

• Account information: email address, full name, profile photo, short bio, and preferred language.
• Location data: approximate or precise location — only after you allow it — so we can show places near you. You can refuse and still browse general Jeddah results.
• Uploaded photos: profile pictures, business logos, and listing images uploaded by users or business owners.
• Booking and payment data: booking details (date and time, party size or ticket quantity, status, and reference). If you pay through a payment gateway, that provider processes card details; we keep the transaction reference, amount, and status, not your full card number.
• Business-owner data: business name, description, commercial registration number, and phone number when you register a business.
• Usage and device data: limited technical logs such as device type and crash reports, used to keep the app stable and secure.

3. How we use data

• Create and manage your account and sign-in session.
• Provide discovery, listing details, bookings, and favorites.
• Let business owners manage their listings and booking requests.
• Review businesses, and prevent fraud or abuse of the service.
• Contact you about your account, bookings, or support requests.
• Meet legal obligations in Saudi Arabia.

We process data to perform our contract with you (providing the service), with your consent (for example location or photos), for a limited legitimate interest in securing the service, or to meet a legal duty.

4. Sharing and processors

We do not sell your personal data. We may share it only with:

• Cloud hosting, storage, and infrastructure providers that process data on our instructions.
• Payment gateways, to complete charges or refunds when needed.
• The business linked to your booking, to the extent needed to fulfill it (display name, date and time, party size or tickets).
• Competent authorities when the law requires it.

5. Storage and PDPL compliance

We store and process personal data in a manner intended to comply with the PDPL. We use access controls, encryption in transit where appropriate, and row-level permissions so users see only what they are allowed to see. When we use processors, we require them to protect the data and not use it for their own purposes.

6. Retention

• Account data is kept while the account is active, then deleted or anonymized within a reasonable period after a deletion request or account closure, unless the law requires us to keep it longer.
• Booking and payment records are kept for as long as needed for financial records or dispute handling, then deleted or restricted.
• Profile or logo images are removed when replaced or when the account is deleted, with short-lived backups until the backup cycle rolls forward.

7. Your rights

Under the PDPL, you may — within the limits of the law — request to:

• Access your personal data and obtain a copy of it.
• Correct inaccurate data or complete incomplete data.
• Destroy data when it is no longer needed or when you withdraw consent.
• Restrict or object to processing in the cases the law allows.
• Lodge a complaint with the competent authority (SDAIA) if you believe we have not complied.

Send access, correction, or deletion requests to privacy@lamardiscovery.com from the email on your account, and describe what you need. We will verify your identity and respond within the statutory timeframes.

8. Location permission

Location is optional. If you refuse permission, the app still works with general Jeddah results. You can turn location access off at any time in your device settings.

9. Children

Lamar is not directed at children under 13. We do not knowingly collect their data. If we learn that an account belongs to a child under 13, we will delete it.

10. Updates

We may update this policy when the service or the law changes. The “Last updated” date at the top will change. Continued use of Lamar after an update means you have had the chance to review the new version.

11. Contact

Privacy inquiries: privacy@lamardiscovery.com
General and business inquiries: hello@lamardiscovery.com