Privacy & data protection

Privacy

We process personal and business data to run bookings, POS, staff tools and support — under tenant isolation, with purpose limits and retention controls you configure for your organisation.

What we collect

Account contact details, guest/customer records you enter, appointment and sale history, device/session data needed to secure the portal, and optional analytics only when consented.

PDPL (KSA) and UAE data protection

For organisations operating in Saudi Arabia or the UAE, we support controller instructions for personal data processing (customers and staff) consistent with PDPL and applicable UAE data-protection expectations: lawful purpose, minimisation, access controls, and retention. We act as a processor for tenant-held guest data and as a controller for AtiqSoft account and billing contacts. This page is a product notice, not legal advice.

Your controls

Organisation admins manage users, roles, retention and booking consent text. Guests can request access or deletion through your business; we assist tenants with export or erasure within the product where technically available.

What we do not claim

We do not display fake ISO, PDPL certification marks, or government seals. Compliance posture depends on how you configure and operate the product in your market.