Privacy Policy

Who we are

Shueur ("we", "us", "the platform") operates the Shueur website and the Shueur mobile app, through which you browse events, buy tickets, and present entry passes in the Kingdom of Saudi Arabia. This Privacy Policy explains what personal data we process and why, and the choices you have. We process personal data in accordance with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations.

Data we collect

Depending on how you use Shueur, we collect:

• Account data you provide: first and last name, email address, mobile number, and (optionally) city and gender.
• Verification data: one-time passcodes (OTP) sent by SMS or email to confirm your identity.
• Booking data: the events you book, ticket types, order numbers, ticket holder name, and entry (scan) history.
• Payment data: payments are processed by our third-party payment gateway inside a secure web view. We do not collect or store your card number, CVV, or PAN. We receive only the transaction result and a reference.
• Favourites and preferences: events you save, your chosen app language, and your marketing preferences.
• Device and technical data: a push-notification token (Firebase Cloud Messaging), app version, device model and operating system, and crash and diagnostic logs (Firebase Crashlytics).
• Support data: the content of messages you send us.

How we use your data

• To create and secure your account and verify your identity.
• To process bookings, issue tickets, and validate entry at events.
• To provide customer support and respond to your requests.
• To send you service messages about your bookings (for example, confirmations, reminders, and changes to an event).
• To send marketing messages about events, only where you have opted in; you can opt out at any time.
• To keep the platform secure, prevent fraud and ticket abuse, and diagnose and fix technical problems.
• To comply with legal, regulatory, tax, and accounting obligations.

Sharing your data

We do not sell your personal data. We share it only with:

• Event organisers and venue operators, to the extent needed to admit you to an event you booked.
• Service providers who process data on our behalf under contract: our cloud hosting provider, our SMS provider, our email provider, our payment gateway, and Google (Firebase Cloud Messaging and Crashlytics).
• Government or regulatory authorities and courts, where required by applicable law or to protect our rights.

Data retention

• We keep account data for as long as your account is active.
• When you delete your account, we remove or anonymise your personal data as described in "Deleting your account" below.
• We retain transaction and booking records in an anonymised form for the period required by tax and accounting law (currently up to 10 years), without information that identifies you.
• Crash and diagnostic logs are retained for a limited period by Google Firebase and then deleted automatically.

Deleting your account

You can permanently delete your Shueur account and associated personal data at any time. There are two ways:

• In the app: open "My Account" → "Delete Account", then confirm. Your session ends immediately.
• By email: send a deletion request from your registered email address to info@shueur.sa. We verify the request and complete it within 30 days.
• What is deleted: your name, email address, mobile number, city, gender, avatar, saved favourites, marketing preferences, notification tokens, active sessions, and verification codes.
• What is kept: booking and payment records required by Saudi tax and accounting law are retained in an anonymised form (with your name and contact details removed) and can no longer be linked to you.
• Deletion is permanent and cannot be undone. To use Shueur again afterwards you would create a new account.

Your rights

Under the PDPL you have the right to:

• Be informed about how your data is processed.
• Access a copy of your personal data.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data (see "Deleting your account").
• Withdraw consent to marketing at any time.

To exercise any of these rights, contact us at info@shueur.sa. You also have the right to lodge a complaint with the competent supervisory authority in the Kingdom of Saudi Arabia.

Security

We protect your data with encryption in transit (HTTPS/TLS), access controls, and by storing authentication tokens in the secure storage provided by your device operating system. No method of transmission or storage is completely secure, but we take reasonable measures to safeguard your data.

Children's privacy

Shueur is not directed to children under 18. We do not knowingly create accounts for or collect personal data from children. A parent or guardian who books on behalf of a child is responsible for that booking.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the "last updated" date above. Significant changes will be notified in the app or by email.

Contact us

For any question about this Privacy Policy or your personal data, contact us at info@shueur.sa or through www.shueur.sa/contact.