BLUE DIVEYANBU · RED SEACustomer data protection
We respect your privacy and handle booking information responsibly and transparently.
Effective date: 23 August 2026This Privacy Policy explains how Blue Dive Yanbu, operated by Arabian Peaks Marine Services ("Blue Dive", "we", "us"), collects, uses, stores and protects personal data when you browse our website, request or book a marine activity, contact us, or use our related services.
We may collect your full name, Saudi national ID, Iqama or passport number, mobile number, email address, booking date and time, selected activity, duration, guest count, notes or special requirements, booking and invoice references, payment status, communications with us, and essential technical records such as IP address, browser type, device information and security logs. Please do not include unnecessary sensitive information in the notes field.
We collect data directly from you through booking and contact forms, through your communications with us, automatically through essential website technologies and logs, and from service providers involved in completing your booking or payment.
We process personal data to check availability; create, administer and fulfil bookings; identify and contact customers; prepare vessels and crews; issue invoices and payment confirmations; provide customer service; handle changes, cancellations, complaints and emergencies; prevent fraud and protect the website; maintain business and accounting records; and comply with applicable Saudi laws and lawful requests.
Depending on the purpose, processing is based on your consent, steps requested by you before entering into a booking, performance of the booking contract, our legitimate interests where permitted, and compliance with legal or regulatory obligations. You may withdraw consent where consent is the applicable basis, without affecting processing already carried out or processing required on another lawful basis.
Payments are intended to be processed through NeoLeap or another approved payment service provider. Card numbers, card verification codes and Apple Pay credentials are entered and processed within the payment provider's secure environment and are not stored by Blue Dive. We may receive and retain limited transaction information such as payment status, amount, time, provider reference and masked payment details for confirmation, reconciliation, refunds, fraud prevention and legal records.
We may share only the data necessary for the stated purposes with approved payment providers, our ERP and invoicing providers, website hosting and technical service providers, communications providers, authorized Blue Dive and Arabian Peaks personnel, professional advisers, insurers, and competent Saudi authorities where legally required. These parties may process data only for authorized purposes and subject to applicable confidentiality and data-protection requirements. We do not sell personal data.
Where a service provider processes or stores personal data outside the Kingdom, we will apply the requirements of the Saudi Personal Data Protection Law and its regulations, including required safeguards, assessments or approvals. Information will be limited to what is necessary for the relevant service.
We retain personal data only for as long as needed to fulfil the purposes described above and to meet applicable contractual, accounting, tax, dispute-resolution and legal requirements. When retention is no longer required, data is securely deleted, destroyed or anonymized in accordance with our procedures and applicable law.
We apply reasonable administrative, organizational and technical safeguards designed to protect personal data against unauthorized access, loss, misuse, alteration or disclosure. No electronic transmission or storage method is completely secure, but we review safeguards and restrict access according to operational need.
The website may use essential cookies or similar technologies required for security, session continuity, language preferences and website operation. If non-essential analytics or marketing technologies are introduced, we will provide the required notice and choices before using them where consent is required.
Subject to the Saudi Personal Data Protection Law and applicable exceptions, you may have the right to be informed about processing; access and obtain a copy of your personal data; request correction, completion or updating; request destruction when legally available; withdraw consent where applicable; and submit a complaint. We may need to verify your identity before acting on a request.
Bookings must be made by an adult. We do not knowingly request booking data directly from children. Information about minors should be provided only by their parent or legal guardian and only where necessary to arrange the activity safely.
Our website may contain links to third-party websites or services. Their privacy practices are governed by their own policies, and we encourage you to review them before providing information.
To ask a privacy question or exercise your rights, contact info@arabianpeaks.com or WhatsApp +966 56 809 0020. Please write "Privacy Request" in the subject or opening message. You may also submit a complaint to the competent Saudi authority in accordance with applicable procedures.
We may update this policy to reflect service, technology or legal changes. The latest version will be published on this page with its effective date. The Arabic text is the governing version if there is any difference in interpretation.