Privacy policy

Last Updated: February 2026

WULOJ ("Company," "we," "us," "our") is committed to protecting your privacy. This Privacy Policy ("Policy") explains how we collect, use, disclose, and safeguard your information when you visit our website and use our platform (collectively, the "Service").

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Service. By accessing and using WULOJ, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein.

1. Introduction and Privacy Commitment

WULOJ is dedicated to maintaining the privacy and security of personal information provided by users. We understand that privacy is a fundamental right and take our responsibility seriously. This Policy applies to all users including property owners, managers, guests, and any other individuals who interact with our Service.

We comply with the regulations and requirements of the Kingdom of Saudi Arabia, including those issued by relevant governmental bodies and regulatory authorities.

2. Information We Collect

We collect various types of information in connection with the services we provide:

2.1 Personal Identification Information

• Full name (as shown in official identification)
• Email address
• Phone number
• Mailing address
• National ID number or passport number
• Business registration information (for commercial property owners)
• Tax registration number (VAT)

2.2 Identity Verification Information

• Government-issued identification documents (scans or photographs)
• Biometric data (facial recognition, fingerprints where applicable)
• Date of birth
• Nationality and citizenship information
• Residency status and visa information

2.3 Payment and Financial Information

• Bank account details (processed securely through PCI-DSS compliant processors)
• Credit or debit card information (last 4 digits only stored by WULOJ)
• Payment history and transaction records
• Billing address
• IBAN (International Bank Account Number)

2.4 Property and Rental Information

• Property address and location coordinates
• Property registration documents
• Property photos and specifications
• Rental agreements and contracts
• Guest booking information
• Check-in and check-out records

2.5 Smart Lock and Access Data

• Smart lock access logs and timestamps
• PIN codes and access credentials
• Access history and duration
• Device identifiers and IP addresses used for access

2.6 Usage and Technical Data

• IP address and device information
• Browser type and version
• Operating system
• Access times and duration
• Pages viewed and features used
• Referral source
• Device identifiers (IMEI, UDID, etc.)
• Geolocation information (with permission)

2.7 Communication Data

• Messages sent through the platform
• Support ticket communications
• Email correspondence
• Chat and customer service interactions

3. How We Use Your Information

3.1 Service Provision

• To operate and maintain the WULOJ platform
• To process guest onboarding requests
• To verify user and guest identities
• To process payments and transactions
• To generate and manage rental contracts
• To provide smart lock access and management
• To manage user accounts and accounts

3.2 Compliance and Legal Requirements

• To comply with Saudi Arabian laws and regulations
• To comply with anti-money laundering (AML) regulations
• To comply with know-your-customer (KYC) requirements
• To comply with legal obligations from government authorities
• To enforce our Terms of Service and other agreements
• To investigate fraud and illegal activities
• To prevent unauthorized access and secure our systems

3.3 Communication and Marketing

• To send transactional communications (booking confirmations, receipts)
• To respond to inquiries and support requests
• To send system updates and maintenance notifications
• To send promotional materials and marketing communications (with opt-in consent)
• To conduct surveys and gather feedback

3.4 Service Improvement and Analytics

• To analyze and understand user behavior
• To improve platform functionality and user experience
• To develop new features and services
• To monitor system performance and security
• To create anonymous statistical reports

4. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contract Performance: Processing necessary to execute our contract with you
• Your Consent: You have explicitly consented to the processing
• Legal Obligation: Processing required to comply with Saudi Arabian law
• Legitimate Interest: Processing necessary for our legitimate business interests
• Safety and Security: Processing necessary to protect the safety and rights of users

5. Data Sharing and Disclosure

5.1 Who We Share Data With

We may share your information with the following categories of recipients:

• Service Providers: Third-party vendors who provide payment processing, identity verification, smart lock integration, cloud hosting, and customer support services
• Government Authorities: When legally required or requested by Saudi Arabian law enforcement, regulatory bodies, or government agencies
• Legal Parties: When necessary to comply with legal obligations, court orders, or to protect our rights
• Business Partners: With partners collaborating on services (only with your consent)
• Other Users: Property owners and guests may see each other's information as necessary for booking and operations

5.2 Data Processing Agreements

All third-party service providers are bound by Data Processing Agreements that require them to:

• Process data only as instructed by WULOJ
• Maintain appropriate security measures
• Comply with applicable data protection laws
• Not use data for their own purposes

6. Data Retention

We retain your personal information for as long as necessary to provide our Service and for legitimate business and legal purposes:

• Account Information: Retained for the duration of your account and 2 years after account deletion (for legal compliance)
• Transaction Records: Retained for 7 years to comply with Saudi Arabian accounting and tax regulations
• Identity Verification Data: Retained for 5 years to comply with AML/KYC requirements
• Usage Data: Retained for 12 months unless longer retention is required by law
• Legal and Disputes: Retained for the period necessary to resolve any disputes or legal proceedings

After the retention period expires, we will securely delete or anonymize your information unless we are legally required to retain it.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our platform:

7.1 Types of Cookies

• Essential Cookies: Required for platform functionality and security
• Analytics Cookies: To understand how users interact with our platform
• Preference Cookies: To remember your settings and preferences

7.2 Cookie Control

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. However, disabling cookies may affect the functionality of the Service.

8. Data Security

We implement comprehensive security measures to protect your personal information:

• End-to-end encryption for data transmission using TLS/SSL protocols
• Encryption of sensitive data at rest using AES-256
• Secure, redundant data centers with physical and digital access controls
• Regular security audits and penetration testing by independent security firms
• Intrusion detection and prevention systems
• Multi-factor authentication (MFA) for account access
• Employee training on data protection and information security
• Incident response procedures
• Compliance with ISO 27001 and international security standards

While we implement strong security measures, no method of transmission over the internet is 100% secure. Users are responsible for maintaining the confidentiality of their passwords and account information.

9. Children's Privacy

WULOJ is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will immediately delete such information and cease further collection.

Parents or guardians who believe their child has provided information to WULOJ should contact us immediately at info@wuloj.com.

10. Your Privacy Rights

You have the following rights regarding your personal information:

10.1 Right to Access

You have the right to request access to the personal information we hold about you. We will provide this information in a commonly used, machine-readable format within 30 days of your request.

10.2 Right to Correction

You have the right to request correction or updating of inaccurate, incomplete, or outdated personal information.

10.3 Right to Deletion

You have the right to request deletion of your personal information, except where we are legally required to retain it. Deletion may not be possible if we have legal obligations to retain the information.

10.4 Right to Restrict Processing

You have the right to request that we restrict our processing of your personal information while we verify the accuracy of your data.

10.5 Right to Data Portability

You have the right to request a copy of your personal information in a structured, commonly used, and machine-readable format for transfer to another service provider.

10.6 Right to Withdraw Consent

Where we process your information based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing conducted prior to the withdrawal.

10.7 Right to Object

You have the right to object to certain processing of your data, particularly for marketing purposes.

11. Data Breach Notification

In the event of a personal data breach, WULOJ will:

• Notify affected users without undue delay and no later than 72 hours after becoming aware of the breach
• Notify relevant Saudi Arabian regulatory authorities as required by law
• Provide information about the nature of the breach and steps being taken to mitigate risks
• Provide recommendations for users to protect themselves

12. Saudi Arabia Regulatory Compliance

WULOJ complies with all applicable Saudi Arabian regulations including:

• Anti-Money Laundering (AML) Law: We comply with AML requirements and sanctions screening
• Know Your Customer (KYC): We implement KYC procedures to verify the identity and legitimacy of users
• Saudi Data Protection Law: We comply with data protection requirements issued by competent Saudi authorities
• Islamic Law Compliance: Our data processing practices comply with Sharia law principles
• Commerce Regulations: We comply with regulations issued by the Ministry of Commerce and related authorities
• Consumer Protection: We comply with consumer protection regulations and standards
• Telecommunications Regulations: We comply with regulations issued by the Communications and Information Technology Commission (CITC)

13. Contact and Data Protection Officer

For questions about this Privacy Policy, to exercise your rights, or to report privacy concerns, please contact:

• Privacy Email: info@wuloj.com
• Support Email: info@wuloj.com
• Data Protection Officer: info@wuloj.com
• Address: Riyadh, Kingdom of Saudi Arabia

We will respond to all privacy requests and inquiries within 15 business days.

14. Policy Updates

WULOJ may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of material changes by email or by posting the updated policy on our website.