Privacy Policy
Effective: 18 September 2026
1. Who we are
LA FIESTA EVENT is operated by Mr./ KHALID MOHAMMED O ALRASHEED, registered as a freelancer with the Ministry of Human Resources and Social Development (Document ID FL-776210436), Building 3555 Samaha Al Shaikh Muhammad Ibn Saleh Ibn Muhammad Al Athi, 7205 West Umm Al Hamam Dist, RIYADH, Postal Code 12324, Saudi Arabia. We are responsible for the personal data described here. Contact: info@lafiestaevent.com · privacy@lafiestaevent.com · +966 54 030 8586.
This policy explains what we collect, why, how long we keep it, and the rights you have under the Saudi Personal Data Protection Law (PDPL).
2. Who this covers
- Hosts — people who create an account and organise an event.
- Guests — people invited to an event. Guests do not have an account; their details are provided by the host.
- Supervisors (also referred to as guards) — people assigned to check guests in at the entrance, either by the host or by us on the host's behalf.
3. What we collect
From hosts
Name, mobile number, email address, and profile photo if you add one. Your events: title, date, time, venue, guest quota, chosen design, and the services you order. Your orders and invoices. Support messages you send us.
From hosts, about their guests
Guest name and mobile number, the companions allowed for each guest, RSVP reply, entry pass status, and the time and gate of check-in.
From supervisors
Name, mobile number, email, and the events they are assigned to.
Automatically
A notification token identifying your device, so we can send you app notifications. Basic technical records needed to run the service securely, such as sign-in events and rate-limiting records. We do not use analytics or advertising trackers, and we do not track you across other apps or websites.
We do not collect or store card numbers. Payment is handled through a secure payment process, and we receive only the result of the payment and the details needed for your invoice.
4. Why we use it
- To create and run your account and verify your identity at sign-in.
- To build, send, and manage your event's invitations, reminders, entry passes, and RSVPs, delivered via WhatsApp.
- To let your supervisors check guests in and to give you live attendance during the event.
- To take payment, issue your invoice, and handle refunds.
- To send you service notifications about your events, by app notification and email.
- To answer your support requests.
- To keep the service secure and prevent misuse.
- To meet our legal and tax obligations.
We do not use your data, or your guests' data, for marketing.
5. Our legal basis
We process host data to perform our contract with you, and to meet legal obligations such as tax record-keeping. We process guest data on the host's instructions, for the legitimate purpose of delivering the event the guest was invited to.
6. The host's responsibility for guest data
The host chooses the guest list and provides the names and numbers. The host confirms they are entitled to share those numbers with us for that event. We use guest data only to deliver that event, and never for any other purpose.
7. Who we share it with
We do not sell your data and we do not share it for anyone else's marketing.
We share only what is necessary with:
- WhatsApp (Meta) — the guest's number and invitation content, to deliver the invitation, reminder, and entry pass.
- Our payment provider — to process your payment securely.
- Our hosting and infrastructure providers — who store the data on our behalf under contract.
- Authorities — where the law requires it.
Some of these providers operate outside Saudi Arabia. Where data is transferred abroad, we do so in line with PDPL requirements.
8. How long we keep it
| Data | Retained |
|---|---|
| Guest names and mobile numbers, RSVPs, and check-in records | 7 days after the event |
| Supervisor assignment records | 7 days after the event |
| Event record (summary only — no guest contacts) | 365 days |
| Delivery and technical logs | 30 days |
| Host account, if unused | 730 days of inactivity |
| Invoices and payment records | 6 years, as required by Saudi tax regulations |
After the 7-day window, guest contact details are permanently deleted by an automated daily process. What remains is a summary of the event itself — not your guests' personal data.
9. Security
Access is restricted so that each account sees only its own data: a host sees only their own events, and a supervisor sees only the events they are assigned to. Data is encrypted in transit and at rest, and every sign-in is confirmed by a one-time code sent to your WhatsApp or email. No system is completely secure, but we work to protect your data and will notify you and the competent authority of any breach affecting you, as the law requires.
10. Notifications
We send notifications about your events through the app and by email. To do this we store a notification token for your device. You can turn off app notifications at any time in your device settings. Service messages about your orders, payments, and events are part of the service and are not marketing.
11. Children
The service is for adults. You must be 18 or older to create a host account. We do not knowingly collect data from anyone under 18. If you believe a minor has given us data, contact us at privacy@lafiestaevent.com and we will delete it.
12. Your rights
Under the PDPL you may ask us to: confirm what data we hold about you and get a copy; correct anything inaccurate; delete your data; restrict or object to how we use it; or receive your data in a portable form. Write to privacy@lafiestaevent.com and we will respond within 30 days. You also have the right to complain to the Saudi Data & AI Authority (SDAIA).
13. Deleting your account
You may delete your account from within the app, which takes effect immediately, or by submitting a request on our Delete My Account page, which we process within 24 hours. Deletion removes your account, your events, your guest data, and your uploaded files. Invoices and payment records are kept for six years, as required by Saudi tax regulations.
If a guest wants their details removed before the 7-day window ends, they should ask the host who invited them, or contact us at privacy@lafiestaevent.com.
14. Changes to this policy
We may update this policy. The effective date at the top will change, and we will tell you in the app when the change is significant.
15. Contact
info@lafiestaevent.com · privacy@lafiestaevent.com · +966 54 030 8586 · Support